Last updated: 2026
1. Roles and scope
This agreement forms part of the Terms of Service and applies whenever Advoratise processes personal data on behalf of a business customer (advertiser, publisher, creator or agency). For that data the customer is the controller and Advoratise is the processor; for its own account, billing, fraud-prevention and compliance records Advoratise is an independent controller.
Processing covers marketplace account data, campaign and listing data, order, invoice and payout records, and communications exchanged through the platform, for the duration of the customer's account.
2. Processor obligations
Advoratise processes personal data only on the customer's documented instructions, which are given by using the platform's features and by the Terms of Service, unless required otherwise by law.
Personnel and automated systems with access are bound by confidentiality. Automated decisions are logged with a stated reason and can be reviewed by a human on request.
3. Sub-processors
Advoratise uses sub-processors for hosting and database services, payment processing and payouts, transactional email, and error monitoring. Each is bound by written terms no less protective than this agreement.
Customers are notified of a new or replaced sub-processor before it begins processing, and may object on reasonable data-protection grounds.
4. International transfers
Where personal data leaves the EEA or the UK, transfers rely on an adequacy decision or on Standard Contractual Clauses, including the UK International Data Transfer Addendum, together with a transfer risk assessment.
5. Security
Access to production data is restricted and authenticated; row-level security isolates each account's records; financial and moderation records are append-only; secrets are held in managed secret storage; card data never touches Advoratise systems and is handled solely by the payment provider.
6. Assistance, breach notice, deletion and audit
Advoratise assists the customer with data subject requests, impact assessments and regulator enquiries, and notifies the customer without undue delay after becoming aware of a personal data breach affecting their data.
On termination, personal data is deleted or returned, except records Advoratise must retain for tax, accounting, anti-fraud or other legal obligations.
Advoratise makes available the information needed to demonstrate compliance and supports audits on reasonable notice, no more than once a year unless a regulator requires otherwise.
Advoratise operates internationally. Advertising, privacy, tax and consumer-protection rules differ by jurisdiction, so this document is a configurable baseline reviewed on a jurisdiction-by-jurisdiction basis rather than a claim of automatic worldwide compliance.