Privacy Policy

Last updated: February 25, 2026

1. Introduction

Digital Rebelz B.V. (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your data when you use our services.

2. Data We Collect

We may collect the following data:

  • Name and contact details (email address, phone number)
  • Company information
  • Information about your use of our services
  • Technical data (IP address, browser type)

When you use our campaign management services, we also collect:

  • Campaign performance data (impressions, clicks, conversions)
  • Search term and keyword data
  • Bid and budget information
  • Conversion tracking data

3. Google Platform Data

Digital Rebelz uses various Google APIs to manage and optimize advertising campaigns, analytics, tracking and web performance on behalf of our clients. Access is granted via the OAuth 2.0 authorization protocol, where you explicitly consent to the data scopes described below. All data is processed in accordance with the Google API Services User Data Policy, the Google Ads API Service Terms and the GDPR.

We access the following Google services:

Google Ads

  • Campaign optimization and performance analysis
  • Automated bid adjustments based on performance data
  • Keyword performance analysis and recommendations
  • Search term analysis for negative keyword suggestions
  • Budget allocation optimization
  • Reporting and trend analysis

Google Analytics 4 (GA4)

We use the Google Analytics Admin API to manage user access and retrieve performance data for reporting and analysis. Scopes: analytics.readonly, analytics.manage.users.

  • Website traffic analysis and visitor insights
  • Conversion attribution and audience reporting
  • Cross-channel performance comparison
  • Managing user access on behalf of the client

Google Tag Manager (GTM)

We use the Tag Manager API to manage, audit and optimize tracking configurations. Scopes: tagmanager.readonly, tagmanager.manage.users.

  • Tracking configuration audit and optimization
  • Consent Mode v2 compliance verification
  • Managing user access on behalf of the client

Google Search Console

We use the Search Console API for SEO analysis and organic search performance. Scope: webmasters.

  • Organic search performance and keyword rankings
  • Technical SEO monitoring (indexing, errors)
  • Landing page performance from organic search traffic

Google Merchant Center

We use the Content API for managing product feeds and shopping campaigns. Scope: content.

We do NOT share Google Platform data with third parties.

Data is only used for:

  • Internal analysis by our team
  • Reporting to the account owner (client)
  • Optimization of the client's own campaigns and online presence

4. Meta Platform Data

Digital Rebelz uses the Meta (Facebook/Instagram) APIs for managing and optimizing advertising campaigns and social media on behalf of our clients. All data is processed in accordance with Meta Platform Policy and the GDPR.

We access the following data via the Meta API:

  • Advertising insights and performance metrics (read_insights, ads_read)
  • Advertising management and campaign optimization (ads_management)
  • Page listings and business management (pages_show_list, business_management)
  • Page engagement data and post management (pages_read_engagement, pages_manage_posts)
  • Instagram account information and insights (instagram_basic, instagram_manage_insights)
  • Instagram comment management and content publishing (instagram_manage_comments, instagram_content_publish)

We use this data exclusively for:

  • Campaign optimization and performance analysis on behalf of authorized clients
  • Social media management and content planning
  • Engagement analysis and community management
  • Automated reporting and trend analysis

We do NOT share Meta Platform data with third parties. Data is used exclusively for services to the authorized account owner.

5. Additional Platforms

In addition to Google and Meta, we may connect with additional advertising and marketing platforms on behalf of our clients, including but not limited to:

  • Pinterest Ads — advertising management, performance metrics and audience insights
  • LinkedIn Ads — B2B advertising management and campaign optimization
  • TikTok Ads — advertising management and creative performance
  • Microsoft Advertising (Bing) — search campaign optimization

For each additional platform, the same framework applies as described in this Privacy Policy: data is processed exclusively on behalf of the client, not shared with third parties, and in compliance with platform policies and the GDPR.

6. OAuth Authorization

We use the industry-standard OAuth 2.0 protocol to obtain access to your accounts on external platforms. This means:

  • You are redirected to the login screen of the relevant platform (e.g. Google, Meta)
  • You see an overview of the specific access permissions (scopes) being requested
  • You explicitly grant consent by logging in and confirming access
  • We receive an authorization token that grants us access to your data — we never receive your password
  • Tokens are stored encrypted and only used for the purposes described

7. AI-Assisted Data Processing

Digital Rebelz uses AI technologies (including large language models) to analyze campaign data and generate optimization recommendations. This includes:

  • Automated performance analysis and anomaly detection
  • Generating optimization recommendations based on campaign data
  • Search term and audience analysis
  • Client profiles based on communication and campaign history

When processed by AI systems, only aggregated campaign data and performance metrics are used. Personally identifiable information (PII) of end users of advertisements is not sent to AI services. AI analysis serves exclusively to support our marketing services and output is always reviewed by our team.

8. Revoking Access

You can revoke granted access at any time:

After revoking access, all related tokens are immediately invalidated. Stored data will be deleted within 30 days, unless you have an active service contract.

9. Data Security

  • All data is encrypted in storage and transit
  • Access is restricted to authorized team members
  • Regular security audits
  • GDPR-compliant data processing
  • All data is stored and processed in the Netherlands

10. Data Retention

  • Active clients: data is retained for the duration of the contract + 1 year
  • Former clients: data is deleted within 30 days after contract termination
  • You can request immediate deletion at any time

11. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Correct your data (right to rectification)
  • Have your data deleted (“right to be forgotten”)
  • Transfer your data (right to data portability)
  • Object to the processing of your data

12. Data Deletion

You can request deletion of your data at any time. See our data deletion instructions for more information on how to submit a deletion request.

13. Contact

For questions about this Privacy Policy, you can contact us at:

Digital Rebelz B.V.
Email: info@digitalrebelz.com
Phone: +31 40 20 94 234
KVK: 85763845

Privacy Policy | Digital Rebelz