01 Controller And Scope
Valkiria is a SaaS platform for advertising analytics, AI campaign planning, and integration management. The service is operated by Denha Nexus s.r.o., Pekná cesta 2459/19, 831 52 Bratislava, Slovakia. The service follows GDPR, ePrivacy, and applicable EU requirements. This policy applies to valkiria.pro, sys.valkiria.pro, user workspaces, APIs, OAuth integrations, and related product pages.
02 Data We Process
We may process user account data, business email, organization profile, access roles, project settings, advertising accounts and campaigns, metrics, UTM data, audiences, creatives, uploaded files, technical logs, security events, billing and contract data, support messages, cookie identifiers, and consent records. OAuth access and refresh tokens are stored server-side and are used only for providers authorized by the user.
03 Purposes And Legal Bases
Data is used for login and security, product delivery, ad-account synchronization, reporting, campaign preparation, provider-readiness checks, abuse prevention, billing, support, product improvement, and legal compliance. Legal bases include contract performance, legitimate interest, legal obligation, and consent where required.
04 Advertising And Analytics Integrations
Valkiria connects Google Ads, Meta Ads, TikTok, LinkedIn, Reddit, Microsoft Advertising, Pinterest, X, Snapchat, Yandex Direct, Telegram/Internal Ads Controls, GA4, Search Console, and other integrations only after user authorization or organization-admin setup. The service does not request provider passwords, does not bypass provider policies, and does not activate ad spend automatically. Users can disconnect an integration or revoke access at the provider.
05 Google User Data (Google API Services)
Valkiria's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. When you connect a Google account, Valkiria requests only the scopes needed for the features you enable and uses the resulting data solely to provide and improve those user-facing features. We do not sell Google user data, do not use it for advertising, and do not transfer it except as needed to provide the service or as required by law.
Per-scope access:
• Google Ads (adwords): read and manage your Google Ads campaigns, ad groups, keywords, budgets, and performance metrics to sync, report on, and prepare the campaigns you request. Ad spend is never activated automatically.
• Merchant Center / Shopping (content): read your Merchant Center product and Shopping data to support Shopping campaign preparation and status checks.
• Google Analytics 4 (analytics.readonly): read GA4 reporting data to build analytics and attribution reports. Read-only.
• Search Console (webmasters.readonly): read Search Console search-performance data (queries, impressions, clicks, positions) for SEO reporting. Read-only.
• YouTube (youtube.readonly, yt-analytics.readonly): read your YouTube channel and YouTube Analytics metrics to include video performance in analytics and content planning. Read-only.
Google tokens are stored encrypted server-side, are used only for the providers you authorized, and are removed or revoked when you disconnect the integration.
06 Processors And International Transfers
We may share data with hosting, database, payment, email, analytics, logging, AI infrastructure, and official advertising API providers when needed to operate the service. Transfers outside the EEA use contractual and technical safeguards, including Standard Contractual Clauses, access control, encryption, and data minimization. We do not sell personal data.
07 Retention And Security
Data is retained for as long as needed to provide the service, meet contractual obligations, protect security, preserve audit evidence, and satisfy applicable retention periods. OAuth tokens are removed or deactivated when an integration is disconnected unless limited log retention is required by law or security. We use HTTPS, server-side secret storage, role-based access control, audit logs, least privilege, and suspicious-activity monitoring.
08 User Rights
Users may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent. Users may also complain to the Office for Personal Data Protection of the Slovak Republic or another competent EU authority. Requests can be sent to Valkiria support: support@valkiria.pro.
09 Cookies And Policy Updates
We use necessary cookies for login, security, and workspace functionality, and analytics or marketing cookies only according to applicable consent requirements. This policy may be updated when the product, providers, laws, or company details change. The current version is published on this page.