Loading AdMyChat...
Connecting to network servers. Please wait...
Connecting to network servers. Please wait...
Statutory Transparency Statement pursuant to Articles 13 & 14 of Regulation (EU) 2016/679 (EU GDPR) and the Data Protection Act 2018 (UK GDPR) · Last Revised: August 2026
AdMyChat ("we", "us", or "the Platform") operates a privacy-first monetization network for software engineers and tool creators. We enforce strict data minimization (Article 5(1)(c)): our IDE extensions and browser tools operate on zero-code telemetry—we never inspect, parse, transmit, or store source code, prompts, repository contents, or file paths.
The legal entity determining the purposes and means of processing personal data across the AdMyChat platform, website (admychat.com), and associated extensions is:
| Data Controller: | AdMyChat Network Ltd. |
| Corporate Inquiries: | [email protected] |
| Data Protection Officer (DPO): | [email protected] |
| EU/EEA Representative (Art. 27): | AdMyChat EU Compliance Representative · [email protected] |
| Data Subject Rights Desk: | [email protected] |
Every processing activity conducted by AdMyChat is tied to a verified lawful basis under Article 6(1) of the GDPR:
| Data Category | Collected Data Elements | Processing Purpose | Lawful Basis (Art. 6(1)) |
|---|---|---|---|
| Account & Identity | OAuth User ID, verified email address, profile avatar (optional). | Developer authentication, account management, and status notifications. | Art. 6(1)(b) · Performance of Contract |
| Telemetry & Activity | 5-second active editor heartbeat signals, surface type (VS Code, CLI, Browser), campaign impression IDs. (Zero code transmitted). | Calculating earned microdollars, serving active sponsorships, and verifying session validity. | Art. 6(1)(b) · Performance of Contract |
| Financial & Payouts | Payout destination email (PayPal/Stripe Connect), withdrawal amounts, transaction IDs, statutory tax classification. | Disbursing developer earnings, statutory accounting, and financial reporting. | Art. 6(1)(b) (Contract) & Art. 6(1)(c) (Legal Obligation) |
| Security & Anti-Fraud | Hashed machine-scoped API keys (SHA-256), coarse country/region code, IP ASN (datacenter vs. residential verification). | Preventing click-fraud, Sybil bot attacks, and infrastructure DDoS protection. | Art. 6(1)(f) · Legitimate Interests |
| Developer Interests | Self-declared technology tags (e.g. TypeScript, Python, Rust, Cloud). | Matching higher-paying, category-targeted sponsor campaigns. | Art. 6(1)(a) · Explicit Consent (Opt-in) |
We adhere to strict storage limitation principles (Article 5(1)(e)). Personal data is retained only for the time necessary to fulfill the purpose for which it was gathered:
| Data Type | Retention Period | Retention Rationale & Lifecycle |
|---|---|---|
| Active Telemetry (Ticks) | 24 to 48 hours (in Redis buffer) | Aggregated every 10 minutes into daily financial totals, after which raw heartbeats are automatically purged from memory. |
| Security & Network Logs | 30 to 90 days | Maintained for cyber incident forensics, DDoS analysis, and firewall threat mitigation. |
| Developer Account Profile | Duration of active account lifecycle | Retained until an erasure request under Article 17 is executed or the account is voluntarily terminated. |
| Financial & Payout Records | 7 years following transaction date | Mandatory retention under statutory corporate tax laws, anti-money laundering (AML) regulations, and commercial accounting requirements. |
To deliver global platform infrastructure and developer payouts, we engage verified third-party subprocessors. All transfers of personal data outside the European Economic Area (EEA) or the United Kingdom are governed by legal adequacy mechanisms:
| Subprocessor Category | Operational Region | Purpose | Transfer Safeguard |
|---|---|---|---|
| Cloud Compute & Storage | European Union (Germany / Finland) | Core compute infrastructure, distributed in-memory cache & persistent relational ledger. | EEA Direct Storage (No third-country transfer) |
| Edge Routing & DDoS Shield | Global Edge Network / USA | Edge SSL termination, DNS routing, and cyber attack mitigation. | EU-U.S. DPF & Standard Contractual Clauses (SCCs) |
| Payout Gateways | Global Banking & Payment Networks | Processing developer cash-out requests and disbursements. | EU-U.S. DPF, SCCs & Binding Corporate Rules |
| Transactional Messaging | Global Infrastructure / EU / USA | Two-factor authentication codes and account status notifications. | Standard Contractual Clauses (SCCs) |
Under Chapter III of the GDPR and UK GDPR, you possess irrevocable rights regarding your personal data:
You may request confirmation as to whether your data is being processed and obtain a complete structured copy of all stored personal records.
You can immediately modify inaccurate or incomplete data (e.g. payout email, declared category tags) directly in your Developer Wallet dashboard.
You may demand the permanent erasure of your personal data. We will delete all personal and telemetry records, retaining only statutory financial ledgers.
Receive your account metrics, earnings logs, and impression history in a structured, commonly used, machine-readable format (JSON/CSV).
Object at any time to processing based on legitimate interests, or request restriction of data processing while a dispute is being investigated.
You will not be subjected to legal or significant decisions based solely on automated profiling. All waitlist approvals and payout rejections involve human review.
If you believe our processing infringes data protection legislation, you have the statutory right to lodge a complaint with your local supervisory authority in the EU Member State of your habitual residence or place of work, or the Information Commissioner's Office (ICO) in the United Kingdom.
→ European Data Protection Board (EDPB) Directory of National DPAs
→ UK Information Commissioner's Office (ICO)
To ensure secure, audited execution of Data Subject Access Requests (DSARs), we adhere to the following protocol:
[email protected] or [email protected] using the email address registered with your AdMyChat account.