Privacy Policy

Last updated: 18 October 2026

Who I am

This website, arapovk.com, and my internal Meta app KA DIGITAL are run by KA Digital LLC, a Wyoming (USA) limited liability company, 30 N Gould St. Ste R, Sheridan, WY 82801, United States, represented by Kristijan Arapov. In this policy "I" and "me" mean KA Digital LLC.

KA Digital LLC is responsible for the personal data described here. For any privacy question or request, email [email protected].

What this policy covers

• arapovk.com: this website, my newsletter and my quiz and course forms.
• KA DIGITAL app: my Meta app (App ID 1066221416564351), called BOSSMODE Analytics until 18 October 2026. It is an internal tool that only my business uses. It has no public interface and no Facebook Login, and it collects no data from people who use Facebook or Instagram.

Data I collect on this website

• Your email address and form answers when you sign up for my newsletter or fill in a quiz or course form. I use them to send you the emails you asked for and to answer you.
• Campaign tags (UTM tags) of the link that brought you here, saved with your signup, so I know which posts and ads work.
• Usage data: the pages you view, your device and browser, and an approximate location from your IP address, collected with PostHog to see which pages help visitors.
• Server logs: your IP address, the time and the page you asked for, kept by my hosting provider for security and delivery.

Data I get from Meta through my app

I run paid ads on Facebook and Instagram for my own business and for clients who gave my business access to their ad accounts in Meta Business Manager. The app connects to the Meta Marketing API through system users of my business. With it I:

• read the settings, creatives and performance numbers (spend, reach, clicks, sales and cost per result) of the campaigns, ad sets and ads in those ad accounts;
• read the names and IDs of the Facebook Pages and Instagram accounts the ads run from, and the comments people leave on those ads, so I can improve the ads and answer questions;
• create and change campaigns, ad sets, ads and creatives in those ad accounts, on the instructions of the ad account owner.

I use this data only to run and report on the ads of the ad account owner it belongs to. I never sell, rent or license it. I never use it to build profiles of people, to watch people, or to make decisions about housing, jobs, credit, insurance, education or benefits. I keep the data of each client in a separate place. The access keys of the app stay on my server and are never shared.

Who processes data for me

I use these service providers. Each one gets only the data it needs to do its job for me, under its own terms.

• Hetzner Online GmbH (Germany): my server in Nuremberg, where the app runs and its data is stored.
• Cloudflare, Inc. (USA): website hosting, security, backups and private report pages.
• GitHub, Inc. (USA): private backups of my code and work notes.
• Anthropic PBC and OpenAI, L.L.C. (USA): AI assistants that read reports and draft ads for me on my instructions.
• Google LLC (USA): Google Sheets and Drive for client reports.
• Slack Technologies, LLC and Discord Inc. (USA): messages with clients and my internal work chat.
• Kit (ConvertKit, LLC) (USA): my newsletter and form emails.
• PostHog, Inc. (servers in the EU): website analytics.

How long I keep data

• Newsletter and form data: until you unsubscribe or ask me to delete it.
• Data from Meta: while I run the ads for that ad account. When the work ends, or when the ad account owner asks, I delete it as soon as I reasonably can, except what the law requires me to keep, such as invoices.
• Usage data and server logs: for the time my providers keep them, which is limited and set in their terms.

How to delete your data

• Anyone: email [email protected] with the subject "Delete my data". Name the email address, or the Facebook or Instagram account, that your request is about. I delete the data and confirm it to you within 30 days.
• Newsletter readers: click the unsubscribe link at the bottom of any of my emails, then email me if you also want your record deleted.
• Ad account owners: remove my business's access in Meta Business Manager (Business settings, then Partners) and email me. I then delete the data from your ad account.
• Facebook and Instagram users: The app has no Facebook Login, so it does not show in your "Apps and websites" settings. If you think I hold data about you from Meta, for example a comment you left on an ad I manage, email me and I delete it.

You can also ask me for a copy of your data, to correct it or to limit how I use it. If you live in the EU or the UK, you can complain to your data protection authority.

Requests from public authorities

If a public authority asks me for personal data, I check that the request is lawful, I challenge it when it is not, I share only the minimum the law requires, and I keep a record of the request, my answer and the legal reason.

Security

My server is reachable only through a private network with key-based login. Only I and the tools that do my work can access the data. App keys sit on the server with restricted file rights. This website uses HTTPS.

Changes to this policy

I update this page when my practices change. The date at the top shows the last change.