Privacy Policy

TomoAds ("TomoAds", "we", "us", or "our") is operated by TomoAds LLC, a Wyoming limited liability company.

Principal Business Address:
30 N Gould St, Ste R
Sheridan, WY 82801
United States

Wyoming Filing ID: 2026-002029277

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By using TomoAds, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the platform.

1. Who This Policy Applies To

This policy applies to three groups:

Registered users — advertisers, publishers, and administrators who hold an account with us.
End users — individuals who view ads served through our network on publisher websites or within Telegram. End users do not hold an account with TomoAds, but limited technical data is processed about them when ads are served.
Visitors — anyone who browses our website.

2. Information We Collect

2.1 Account Information

When you register, we collect your email address and a password (which is hashed and never stored in readable form). If you sign up through Google or Telegram, you may not set a password with us.

You may optionally provide your name, display name, company name, timezone, locale, formatting preferences, an avatar image, and — for publishers — a cryptocurrency payout address.

2.2 Advertiser and Campaign Information

When advertisers create campaigns, we collect the campaign name, objective, targeting settings (device, geography, category), budget, bid type and amount, schedule, landing page URLs, and creative assets such as images, HTML, and ad text. Creative assets are stored on our content delivery network and served publicly as part of ad delivery.

2.3 Publisher Information

When publishers register inventory, we collect domain URLs, placement details, and a verification token used to confirm ownership. Optionally, we collect floor pricing, impression caps, geographic or category restrictions, and Telegram bot connection details. Telegram bot tokens are stored only in hashed form and are never kept in readable text.

2.4 Information Collected When Ads Are Served

When an end user views an ad served through our network, we automatically process:

The page URL and referring URL
Screen dimensions and device type
A randomly generated viewer identifier stored in the browser, used to limit how often the same person sees an ad
Telegram identifiers, if the ad is viewed inside a Telegram Mini App
IP address, used momentarily for fraud detection and country-level location, after which only an irreversible hashed version is stored
Browser user agent, used for device classification and bot detection
Country code, derived at a country level only — we do not collect city or precise location

2.5 Analytics Data

Each ad served, impression, click, and conversion generates an analytics record that may include event type, timestamp, fraud assessment, campaign and publisher identifiers, billed amount, page context, country, device type, a hashed IP address, and the viewer identifier.

2.6 Payment Information

We store wallet balances, transaction records, deposit and withdrawal records, billing events, and refund records. Payment processing is handled by our third-party providers (see Section 4). We do not store full card numbers ourselves.

2.7 Communications

If you contact support or submit a marketplace inquiry, we retain the content of your message along with the contact details you provide.

3. How We Use Your Information

We use the information we collect to:

Operate the platform, serve ads, and manage campaigns
Detect and prevent fraud and abuse
Process payments and payouts
Send you transactional messages such as password resets and billing notices
Respond to support requests
Improve and analyze the performance of our platform

Fraud detection is partly automated. Our systems assess signals such as bot-like user agents, datacenter IP addresses, unusual click patterns, and duplicate activity to decide whether an ad event is valid.

We share limited data with service providers that help us operate, and only as needed for their function:

Stripe — fiat payment processing (receives payment amount, currency, and customer email)
NOWPayments — cryptocurrency payment processing and payouts (receives payment amount, currency, and payout address)
Brevo — transactional email delivery (receives email address and message content)
Cloudflare — cloud storage and content delivery for creative assets and images
Telegram Bot API — bot ownership and identity verification
Google — authentication, if you sign in with Google
MaxMind — offline country-level geolocation

We do not sell your personal information. We do not share advertising data with our payment processors.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of our users and platform.

5. Cookies and Similar Technologies

We use cookies and browser storage to keep you logged in, protect against cross-site request forgery, remember preferences, and limit ad frequency. Authentication cookies are strictly necessary for the platform to function.

We also use impression pixels, click tracking, and conversion tracking as part of standard ad delivery.

You can control or clear cookies through your browser settings. Disabling strictly necessary cookies may prevent the platform from working correctly.

6. Data Retention

We retain different categories of data for different periods:

Financial and transaction records — retained on a long-term basis to comply with legal, tax, and accounting obligations.
Personal data — retained while your account is active. It is deleted following a period of prolonged inactivity, upon your request, or a set period after you delete your account.
Statistical and analytics data — retained on an ongoing basis, but stripped of personal identifiers so it can no longer be linked back to an individual. Raw analytics events are retained for up to 18 months and aggregated analytics for up to 24 months.

7. Your Rights and Choices

Depending on where you live, you may have rights over your personal data, including the right to access, correct, or delete it, and to request a copy.

You can update much of your profile information directly in your account settings. For requests to access or delete your personal data, contact us at the email address in Section 10, and we will process your request in line with applicable law.

Please note that certain information cannot be deleted on request where we are legally required to keep it. In particular, financial and transaction records must be retained to meet tax, accounting, and other legal obligations, and any personal details necessarily attached to those records will be kept for the same period, even after an account is closed or a deletion request is made.

8. Security

We protect your data using industry-standard measures, including encryption of data in transit, strong password hashing, short-lived signed access tokens with rotation, secure cookies, rate limiting, and hashing of IP addresses before storage in analytics.

No system is completely secure, and we cannot guarantee absolute security, but we work to protect your information and continually improve our safeguards.

9. Children's Privacy

TomoAds is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps.

10. Contact Us

If you have questions about this policy or wish to exercise your rights, contact us at:

Email: [email protected]
Entity: TomoAds LLC, a Wyoming limited liability company
Principal Business Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States
Wyoming Filing ID: 2026-002029277

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated through the platform where appropriate. Continued use of TomoAds after changes take effect constitutes acceptance of the updated policy.