Privacy Policy
Last updated: 16 September 2026
1.1. This Privacy Policy explains and lists the transparency information regarding what personal data is collected (Section 2) when you use this website and the services provided through it (together "Service"), how such personal data will be processed (Sections 3–6) and which rights you have with respect to your personal data (Section 8). For more details on how we use cookies and similar technologies, please refer to the Cookie Notice.
1.2. BOTAN APP LIMITED (with its legal address at Arch. Makariou III, 95 CHARITINI BUILDING, 1st floor, Flat/Office 102, 1071, Nicosia, Cyprus) is the data controller of your personal data ("we", "us", or "our").
1.3. By using the Service, you promise us that (i) you have read, understand, and agree to this Privacy Policy and the data processing described, and (ii) you are over 18 years of age. If you do not agree or are unable to make this promise, you shall not use the Service.
1.4. We do not knowingly process personal data from persons under 18 years of age. If you learn that anyone younger than 18 has provided us with personal data, please contact us at finance@botanapp.com.
1.5. If any questions remain unanswered or you would like to exercise your privacy rights, please contact us at finance@botanapp.com.
2.1. When you use the Service, we process data:
2.2. Data directly provided by you.
2.2.1. Contact information: This may include your name, phone number, email address. You may provide us with this information if you wish to cooperate with the Company.
2.2.2. Business information: This may include your CV, information about your company & niche, other messages with respect to your business if you wish to cooperate with the Company.
2.2.3. Communication through email: When you contact us, you may also provide us with some personal information.
2.3. Data we collect automatically.
2.3.1. Device and geolocation data: We collect language settings, Internet Protocol address, time zone, type and model of a device, device settings, OS version, Internet service provider, mobile carrier, and unique device identifiers.
2.3.2. Log and usage data: We collect information on how you interact with our Service. This may include information about what pages you have viewed, the features and content you interact with, how often you use the Service, how long you are on the Service.
2.3.3. Cookies and similar technologies: We use cookies and similar technologies to enhance your user experience, optimize ads, and analyze traffic. For more information, please refer to the Cookie Notice.
2.4. Data received from Pinterest: We use the Pinterest API (read-only access) to receive advertising and campaign performance data from our own Pinterest Ads accounts ("Pinterest Ads Data"), such as campaign details, spend, impressions, clicks and conversions. Pinterest Ads Data does not include personal data of Pinterest users. Our platform is not affiliated with, endorsed, or sponsored by Pinterest, Inc.
3.1. For the processing of your personal data, we rely on the following lawful bases:
3.2. We collect and utilize data primarily to provide the Service and continuously improve it with the help of analytics, as well as to measure the performance of our own advertising. Below, you may find a more comprehensive breakdown of how we use information.
Reasons for Processing | Types of data | Lawful bases |
To explore business and working possibilities between you and the Company | Contact information. Name, phone number, email address | Necessary for our legitimate interests; your consent |
To explore business and working possibilities between you and the Company | Business information. CV, information about your company & niche, other messages with respect to your business | Necessary for our legitimate interests; your consent |
For analytical purposes. To provide, improve the Company's activities, and develop the Website | Device and Geolocation Data. Language settings, IP address, time zone, type and model of a device, device settings, OS version, Internet service provider, mobile carrier, unique device identifiers | Necessary for our legitimate interests |
For analytical purposes. To provide, improve the Company's activities, and develop the Website | Log and Usage Data. Information about how you use our Service and user activity within the Service | Necessary for our legitimate interests |
For internal advertising and financial reporting. To measure the performance and cost-efficiency of our own advertising campaigns on Pinterest | Pinterest Ads Data (see Section 2.4) | Necessary for our legitimate interests |
3.3. We rely on the following legitimate interests:
3.4. How we use Pinterest Ads Data. We use Pinterest Ads Data only internally to measure the performance of our own advertising, including together with our other advertising and revenue data at an aggregated level. We do not sell or share Pinterest Ads Data with third parties and do not use it for targeting outside Pinterest.
4.1. Apart from our employees, contractors, and affiliated companies (if any), we share information with the range of third parties that helps operate, provide, improve, integrate, customize, support, and market our Service. We require all third parties to respect the security of your personal data and treat it under the law. The types of third parties we share information with include, in particular:
4.2. Service providers: We engage the partners mentioned below to carry out specific services or business functions on our behalf using their technologies and resources, based on our instructions. We do not allow our third-party service providers to use personal data for their purposes and only permit them to process it for specified reasons defined in this Privacy Policy.
External Third Parties (website):
These providers do not receive Pinterest Ads Data.
4.3. Public authorities, including law enforcement agencies: We may use and disclose personal data to enforce our legal rights or Terms of Use, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.
4.4. Third parties as part of a merger and acquisition: As we develop our business, we may buy or sell assets or business offerings. Customers' information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated company (if any) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy. Pinterest Ads Data will be transferred only to the extent permitted by Pinterest's terms.
5.1. We may transfer personal data to employees, contractors and third parties from countries other than the country in which the data was originally collected in order to provide the Service and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.
5.2. In particular, if we transfer personal data from the EEA to countries without an adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission, or (ii) the European Commission adequacy decisions about certain countries.
6.1. We have implemented appropriate security measures to prevent your data from being accidentally lost, used, accessed unauthorized, altered, or disclosed. In addition, we limit access to your data to employees, agents, contractors, and other third parties who have a business need to know. They will only process your data based on our instructions and are subject to a duty of confidentiality.
6.2. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
6.3. We also use technical data encryption tools like SSL protocols to secure your data.
6.4. We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in the Terms of Use and Privacy Policy. We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
6.5. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process your data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
6.6. Pinterest Ads Data.
6.6.1. Security. Pinterest API credentials and access tokens are stored encrypted in a dedicated secrets management service, are never stored in code or repositories, are masked in logs, and are accessible only to our automated data pipeline. Access to Pinterest Ads Data in our data warehouse is role-based and limited to our data, analytics and user acquisition teams; aggregated reports are available to user acquisition and finance teams.
6.6.2. Retention. Data in transit (streaming layer) is automatically deleted within 7 days. Pinterest Ads Data in our data warehouse forms part of our historical advertising and financial reporting and is retained for as long as necessary for these purposes and to comply with our legal (including accounting and tax) obligations. Upon Pinterest's request or our own decision, we delete raw Pinterest Ads Data within 30 days.
6.6.3. Revocation. Access can be revoked at any time in the Pinterest account settings or by us. Upon revocation, the access token becomes invalid, we delete the stored credentials on the same day, and data retrieval stops.
We reserve the right to and may change this privacy notice occasionally. If we make any material changes, we will notify you through our Service, email, or by presenting you with a new version of this privacy notice for you to accept if we, for example, add new processing activities or collect additional personal data from you. Your continued use of the Service after the effective date of an updated version of the Privacy Policy will indicate your acceptance of the Privacy Policy as modified.
8.1. This Section explains legal rights applicable to users that are residents of certain economic areas, countries, or states as set forth below. Except as otherwise provided herein, you may exercise your legal rights by contacting us at finance@botanapp.com. To ensure that we properly handle the requests you make regarding your rights, we are required to verify those requests.
8.2. EEA residents
As a data subject, you have the right to interact with your data directly or through a request to us. This section describes these rights and how you can exercise them:
Right | Description |
Right to access | You can request an explanation of the processing of your personal data. |
Right to rectification | You can change the data if it is inaccurate or incomplete. |
Right to erasure | You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law. |
Right to restrict the processing | You may partially or completely prohibit us from processing your personal data. |
Right to data portability | You can request all the data you provided to us and request to transfer data to another controller. |
Right to object | You may object to the processing of your personal data. |
Right to withdraw consent | You can withdraw your consent at any time. |
Right to file a complaint | If your request was not satisfied, you could file a complaint to the regulatory body. |
To exercise your rights, contact us. Our lead supervisory authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus. You may also submit a complaint to your local Data Protection Authority.
UK residents enjoy the same rights but may lodge a complaint with the Information Commissioner's Office. You can contact them at 0303 123 1113 or go online at www.ico.org.uk/concerns.
8.3. US residents
You, as data subjects, have some special privacy rights. To use them, please contact us at finance@botanapp.com. Depending on the state and legislative requirements, we will respond to your request within the time required by applicable law (generally 45 days, which may be extended where permitted). If we deny your request, you may appeal by replying to our response. If your complaint is not satisfied, you can file a complaint with your state Attorney General or the Federal Trade Commission.
Your rights vary depending on the laws that apply to you, but may include:
Right | Description |
Right to access | You can request an explanation of how your personal data is processed. |
Right to correct | You can change the data if it is inaccurate or incomplete. |
Right to delete | You can request to delete your personal data from our systems. |
Right to portability | You can request all the data you provided to us and request to transfer data to another controller. |
Right to opt out of sales and targeted advertising | You can opt out of the sale of personal data and of processing for targeted advertising or profiling. |
Right to limit or opt in to sensitive data processing | Depending on your state, you can limit the use of sensitive data or must give prior consent to it. We do not process sensitive data. |
Right against automated decision-making | You can object to decisions based solely on automated processing that produce legal or similarly significant effects. |
Please note! If your state is missing a comprehensive privacy law, your rights are governed by applicable federal law. If you have any questions, please contact us.
8.4. "Do not sell my personal information" under CCPA
California residents have the right under the California Consumer Privacy Act ("CCPA") to opt out of the "sale" of their personal information. We do not sell your personal information to anyone, nor use your data as a business model. However, you may contact us to record your preference so that we do not sell your data in the future.
8.5. Access rights under California's Shine the Light
Under the Shine the Light law, California residents may ask companies once a year what personal information they share with third parties for those third parties' direct marketing purposes. To obtain this information from us, please send an email message to finance@botanapp.com, which includes "Request for California Shine the Light Privacy Information" in the subject line and your state of residence and email address in the body of your message.
8.6. "Do-not-track" requests
We currently do not have the ability to honor "Do Not Track" browser signals. We may modify this privacy notice as our abilities change.
8.7. Canadian residents
As data subjects, you have privacy rights prescribed by Canada's federal and provincial privacy laws. If you want additional information, please contact us. If you are not satisfied with the response, you can file a complaint with the Office of the Privacy Commissioner of Canada.
If you have any questions about this Privacy Policy and/or want to exercise your legal rights, you may contact us at finance@botanapp.com.