Privacy Policy

Effective: April 13, 2026

This Privacy Policy describes how Spartan Media LLC (“Doru”, “we”, “our”) collects, uses, and protects information when you use Doru at doru.espartan.net.

1. Who we are

Doru is a software-as-a-service marketing platform operated by Spartan Media LLC, a company organized under the laws of Commonwealth of Virginia, United States. If you are a customer of Doru, you are the controller of your own customer and campaign data; Doru acts as your processor for that data.

2. Information we collect

2.1 Information you provide

• Account information — name, email address, password, company name, language, and time zone.
• Billing information — processed by our payment provider; Doru does not store full card numbers.
• Campaign and brand information — business details, brand assets (logos, colors, voice guidelines), campaign briefs, target audiences, and budgets that you enter into the platform.

2.2 Information obtained from connected advertising platforms

When you connect your advertising accounts (Google Ads, Meta Ads, TikTok Ads) to Doru via OAuth, we access the following categories of information from those platforms, scoped to the accounts you explicitly authorize:

• Campaign, ad group, and ad metadata you or your team have configured
• Performance metrics (impressions, clicks, conversions, spend, revenue, ROAS)
• Keyword and search term data (for platforms that expose it)
• Account identifiers and billing status indicators

We do not receive raw user-level behavioral data, personally identifiable end-user information, or information about the individuals who see or interact with your ads.

2.3 Technical information

When you use Doru, we automatically collect device and log information (IP address, browser type, pages visited, timestamps) for security, fraud prevention, and operational monitoring.

3. How we use information

• To operate, maintain, and improve the Doru service
• To render your campaign dashboards and performance reports
• To generate campaign recommendations and optimization suggestions at your request
• To execute campaign actions on the connected advertising platforms when you explicitly approve them
• To communicate with you about the service, including security notices and product updates
• To detect, investigate, and prevent fraudulent or abusive activity
• To comply with legal obligations

4. Sharing and disclosure

We do not sell your personal information. We share information only with the following parties:

• Sub-processors — third-party infrastructure and integration providers we rely on to deliver the service. See our full Sub-processors list for current vendors.
• Advertising platforms — when you approve a campaign action, we transmit the necessary request to Google Ads, Meta Ads, or TikTok Ads on your behalf.
• Legal and safety — to comply with a lawful request, enforce our terms, or protect the rights, property, or safety of Doru, our users, or the public.
• Corporate transactions — in connection with a merger, acquisition, or sale of assets, subject to customary confidentiality protections.

5. Data retention

We retain your account and campaign data for as long as your account is active. When you delete your account, we delete associated customer content within ninety (90) days, except where a longer retention period is required by applicable law. Aggregate, anonymized usage statistics may be retained indefinitely.

6. Security

We apply industry-standard organizational and technical measures to protect your information, including encryption in transit and at rest, row-level access controls, audit logging for sensitive operations, and credential management via Google Cloud Secret Manager. No system is perfectly secure; we commit to notifying affected customers promptly in the event of a security incident that affects their data.

7. International transfers

Doru is operated from Commonwealth of Virginia, United States, and our sub-processors may process data in the United States and other jurisdictions. By using Doru, you consent to the transfer of your information to these locations. Where applicable, we rely on appropriate transfer safeguards such as Standard Contractual Clauses.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at info@espartan.net. We will respond within the timeframe required by applicable law.

9. Children

Doru is not directed to children under the age of 16, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the service or the email address associated with your account. Continued use of Doru after a change takes effect constitutes acceptance of the updated policy.

11. Contact us

Questions about this Privacy Policy or our handling of your information should be directed to info@espartan.net, by phone at +1 (703) 705-4977, or by mail to: