Privacy Policy

Last updated: 1 November 2026

Contact: contact@iqsion.com

1. Information we collect

Your account. Name, email address, company details, and the team members you invite with their roles.

Data from the platforms you connect. Only when you connect a platform, only for the accounts you choose, and only what the features below need:

• Google Ads — account names, campaign, ad group, keyword, search term, placement and impression-share performance (spend, clicks, conversions, conversion value).
• Google Analytics 4 — report data for the property you choose: sessions, traffic sources, pages, events, conversions and revenue.
• Google Search Console — search performance for the site you choose: queries, pages, clicks, impressions and positions.
• Google BigQuery — read access to the Google Analytics 4 export dataset you choose.
• Meta (Facebook and Instagram ads) — ad accounts, campaign, ad set and ad performance, creatives and their previews, custom audience and product catalog metadata.
• TikTok Ads and LinkedIn Ads — ad accounts and campaign performance.
• Shopify — orders, products, inventory and customers, with each customer's email address (not their name, phone number or address), to report on sales, products and repeat purchases.
• İkas — orders, products, inventory and customers, including customer names and email addresses, for the same reports.
• HubSpot and Pipedrive — deals, contacts and companies, to connect marketing to sales.

Website events, if you install our pixel. The IQsion pixel is installed only when you ask for it. It records visits and shopping events on your site — pages viewed, products added to cart, purchases, traffic source and campaign parameters — with an anonymous identifier, and an email address only when your site passes one to it.

Ad accounts connected through VIRIO. VIRIO, the creative studio at viriostudio.com, lets its users connect their Meta and TikTok ad accounts without an IQsion account. IQsion then reads, with read-only permission (on Meta, ads_read only), the ad accounts' names and currency and each ad's creative and performance — spend, impressions, clicks, purchases and purchase value — and gives VIRIO only that creative performance for that user. These connections have no IQsion login and are used for nothing else.

Public ads from Meta's Ad Library. For VIRIO's inspiration feature we read ads that Meta publishes in its Ad Library for EU countries: the advertiser's page name, the ad's text, where and how long it ran and its reported reach. We keep no images or videos of these ads; VIRIO links to the ad in the Ad Library instead.

How you use IQsion. A record of the actions taken in your account — who connected or changed what, and questions asked of our AI features — and technical data such as IP address and browser type.

2. How we use it

• To show your dashboards and reports, and keep them up to date.
• To answer the questions you ask in Ask IQsion or through the IQsion connector in your own AI assistant.
• To suggest optimizations, and to carry out an action only when you or your team approve it — for example pausing a campaign on Google Ads or Meta.
• To give you support when you ask for it.
• To keep the service secure and meet our legal obligations.

We do not sell your data, and we do not use it for advertising.

3. Google user data

When you connect Google Ads, Google Analytics, Google Search Console or Google BigQuery, IQsion asks Google for read access to that product's data (the Google Ads permission also allows the campaign changes you approve, such as pausing a campaign). We use it only to provide the IQsion features you use with it, as described above.

IQsion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not sell Google user data, and we do not transfer it to advertising platforms, data brokers or information resellers.
• We do not use it to serve advertising, including retargeting or personalized ads, or to determine creditworthiness.
• We do not use it to develop, improve or train generalized artificial intelligence or machine learning models.
• Nobody at IQsion reads it, except with your permission (for example when you ask us for help with your account), when needed for security, to comply with the law, or in aggregated and anonymized form for internal operations.
• We share it only with the service providers that run these features for us (Section 5), under contracts that restrict them to that purpose.

You can withdraw IQsion's access at any time at myaccount.google.com/permissions and delete the data we imported by disconnecting the product in IQsion (see Data Deletion).

4. AI features

When you ask a question in Ask IQsion, we send your question and the figures IQsion retrieves for that brand to Google Cloud Vertex AI (Gemini models) to produce the answer. Google processes this data only to answer the request and, under its Google Cloud terms, does not use it to train its models. If you connect the IQsion connector to your own AI assistant (such as Claude, ChatGPT, GitHub Copilot or Gemini), the figures you ask for there go to that assistant's provider under your own agreement with them. We do not use your data, or any data received from Google, Meta or other platforms, to train AI models.

5. Who we share it with

• Google Cloud (Cloud Run, BigQuery, Firebase, Vertex AI) — hosting, storage, sign-in and the AI answers in Ask IQsion (Section 4).
• VIRIO — for ad accounts connected through VIRIO only: their creative performance, for the VIRIO user who connected them.
• People you give access — your team members and, if an agency manages your brand, that agency's team, limited by the roles you set.
• Authorities — only when the law requires it.

6. Where it is stored and how it is protected

Your data is stored on Google Cloud in the United States, encrypted in transit and at rest. Access tokens for connected platforms are kept in an access-controlled database that the app's users cannot read directly. Within IQsion, each account's data is kept separate, team members see only what their role allows, and actions are recorded in an activity log. Backups are encrypted too. At IQsion, only the people who run the service can reach the systems that hold this data, and access to it is logged.

7. Security incidents

We keep a written incident response plan. If we learn of a security incident that affects personal data — for example unauthorised access to it, or its loss or disclosure — we contain it, find out what was affected and fix the cause. We tell Shopify within 24 hours when its merchants' data may be involved, and the other platforms concerned as their terms require. We tell the affected brands without undue delay and within 72 hours: what happened, which data was involved and what we are doing about it. Where the law requires it we also notify the authorities, in Türkiye the Personal Data Protection Authority within 72 hours. We keep a record of every incident and what we changed because of it. To report a security issue, write to contact@iqsion.com.

8. How long we keep it

• Data imported from a platform: while the platform is connected. Disconnecting it deletes that data.
• Shopify stores: when the IQsion app is uninstalled, Shopify asks us 48 hours later to delete the store's data, and we delete it then. When a store's customer asks the store to delete their data, Shopify passes the request on and we delete that customer's data.
• Pixel events: for the retention period set in your settings.
• Ad accounts connected through VIRIO: until they are disconnected in VIRIO, which deletes the access token at once and their data within 30 days.
• The activity log: 12 months.
• Your account: until you ask us to delete it; we then delete it and its data within 30 days, keeping only what the law requires (such as invoices).

9. Your rights and choices

Under the Turkish Personal Data Protection Law (KVKK) and the GDPR you may ask to access, correct, delete or export your personal data, and object to or restrict its processing. You can disconnect any platform at any time in Settings → Data Connectors. To make a request, write to contact@iqsion.com; step-by-step instructions are on our Data Deletion page.

If you are a customer of a brand that uses IQsion, that brand decides how your data is used; please contact the brand first, and we will help them respond.

10. Cookies

We use cookies to keep you signed in and to remember your preferences. See our Cookie Policy.

11. Children

IQsion is a business service and is not meant for anyone under 18.

12. Changes to this policy

We will post any change here and update the date above. If a change is significant, we will tell account owners by email before it takes effect.

13. Contact

Questions about this policy or your data: contact@iqsion.com

Trustio Dijital Pazarlama ve Yazılım Ticaret Ltd. Şti., Adnan Kahveci Mah. Çamlıtepe Cad. 24/2 B1-8, Beylikdüzü, İstanbul, Türkiye