1 Introduction

DIQQA is a server-side tracking and ad attribution platform operated by BHSTUDIO LLC. We provide software-as-a-service (SaaS) solutions for e-commerce merchants on platforms such as Salla and Zid. Our mission is to help store owners measure the effectiveness of their advertising campaigns by matching ad clicks to purchases and providing real-time optimization tools.

We are committed to the highest standards of data privacy. This policy explains how we collect, use, and protect data in compliance with global privacy regulations and advertising platform policies (including Meta and Google).

2 Data We Collect

We collect specific data points to provide attribution services:

• Click Data: Page URL, referrer, UTM parameters, and ad click identifiers (e.g., fbclid, gclid, ttclid, sclid)
• Visitor Identifier: An anonymous unique ID stored via a first-party cookie
• IP Address: Immediately hashed using SHA256 before storage — never stored in plain text
• Order Data: Received via secure webhooks from Salla/Zid (Order ID, total amount, currency)
• Customer Data: Email and phone numbers provided during checkout — immediately hashed using SHA256 before being sent to any third party

3 How We Use Data

We use the collected data strictly for the following purposes:

• Attribution: Matching specific ad clicks to successful purchases to determine marketing ROI
• Conversion Events: Sending secure, hashed conversion data to advertising platforms via official APIs (e.g., Meta Conversions API, Google Ads API) to improve ad delivery
• Campaign Optimization: Enabling store owners to manage their ad campaign status (such as pausing or activating campaigns) directly from the DIQQA dashboard based on real-time performance data
• Analytics Dashboard: Displaying aggregated performance metrics (ROAS, revenue, CPA) to the authenticated store owner

4 Data Protection & Security

• Hashing: All Personal Identifiable Information (PII) is hashed using SHA256. We do not store plain-text emails, phone numbers, or IP addresses
• Infrastructure: Data is stored on secure Cloudflare infrastructure (D1 Database) with multi-layered encryption
• Encryption: All data in transit is protected via industry-standard HTTPS/TLS encryption
• Access Control: Access to store data is restricted to the authenticated merchant who owns the respective ad accounts

5 Third-Party Sharing & Compliance

We only share hashed data with authorized advertising platforms for the purpose of conversion attribution. We comply with the Meta Business Tools Terms, Google Ads API Services User Data Policy, and other platform-specific regulations.

Authorized Platforms:

• Meta (Facebook / Instagram) — via Conversions API (CAPI)
• Google Ads — via Enhanced Conversions API
• TikTok — via Events API
• Snapchat — via Conversions API

We never sell your data to third parties. Data is used exclusively to provide the services requested by the merchant.

6 Data Retention & Deletion

• Click Data: Retained for 90 days
• Order Data: Retained for 2 years for historical analytics
• Merchants can request a full deletion of their data at any time by contacting us

7 Cookies

We use the following cookies:

8 Your Privacy Rights

Users have the right to access, rectify, or erase their data. Since we only store hashed data, any request for data portability or access will be provided in a secure, machine-readable format.

• Right of access: Request a copy of your data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to object: Object to the processing of your data
• Right to portability: Request your data in a machine-readable format

9 Contact Us

If you have any questions regarding this Privacy Policy or BHSTUDIO LLC's data practices, please contact us:

Entity: BHSTUDIO LLC

Email: support@diqqaapp.com

Website: www.diqqaapp.com