Privacy policy
Last updated: 21 October 2026 · This is a translation. In case of discrepancy, the Spanish version prevails.
IllusionAds processes the minimum personal data necessary to provide the service and does not sell it or share it with third parties for commercial purposes.
Data controller
Rafael García Martín, Tax ID (NIF) 50203725S, [email protected]. The owner's full identification details are in the Legal notice.
What data we process and why
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Advertiser account and publication of ads | Company or professional name, contact person, email, website, content of the ads | Performance of the Terms of use (art. 6.1.b GDPR) | While the account is active and up to 3 years afterwards, for possible liabilities |
| Generation of ads with AI from the Advertiser's website | URL and public content of the website provided | Performance of the Terms of use | While the account is active |
| Automated AI review of ads and of the company profile when they are published (content rules) | The ad's texts, images, price and links; the company's trade name, description, logo, website and sector. Never emails or passwords | Performance of the Terms of use and legitimate interest in keeping the Platform safe (art. 6.1.b and f GDPR) | The result, while the account is active and up to 3 years afterwards |
| User account (if any): saving and following | Email and preferences | Performance of the Terms of use | While the account is active |
| Waitlist (notice of the IllusionAds launch) | Company name, website (optional), email, country and language | Consent (art. 6.1.a GDPR), which can be withdrawn at any time | Until you unsubscribe or, at most, 12 months after the launch |
| Reports and appeals | Data of the reporter and of the report | Legal obligation (Digital Services Act) | 3 years |
| Communications about IllusionAds news | Consent, which can be withdrawn in every message | Until you unsubscribe | |
| Security and usage statistics | IP address, technical browsing data | Legitimate interest in the security and improvement of the service | Maximum 12 months |
| Usage statistics by country (visits and sign-ups) | IP address from the server logs and from account sign-up, used only at that moment to find the country with a local database; only the country and the date are kept, as counts | Legitimate interest in measuring use of the Platform in each market (art. 6.1.f GDPR) | Server logs: 14 days. Counts by country: no time limit (they don't identify anyone). Approximate sign-up country: while the account is active |
Recipients
Data is not shared with third parties except where required by law. The following act as data processors, under a GDPR-compliant contract:
- OVHcloud (hosting; server in Canada, a country with an adequacy decision from the European Commission).
- Cloudflare, Inc. (content delivery and security network for the website; processes technical connection data such as the IP address).
- Anthropic (provider of the AI service used to generate and review ads).
International transfers
If any provider processes data outside the European Economic Area, it will do so with appropriate safeguards (EU-US Data Privacy Framework or standard contractual clauses of the European Commission).
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to [email protected] with the subject "Data protection". If you are not satisfied with the reply, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
The Platform is not aimed at children under 14, and Advertiser accounts cannot be created by anyone under 18.
Security
Appropriate technical and organisational measures are applied: encrypted communications, encrypted passwords, backups and restricted access to data.