Terms of Service

Effective: April 13, 2026

These Terms of Service (“Terms”) govern your access to and use of Doru, a software-as-a-service marketing platform operated by Spartan Media LLC (“Doru”, “we”, “our”). By creating an account or using the service, you agree to these Terms.

1. The service

Doru provides a web-based platform that lets small and mid-sized businesses manage their advertising across Google Ads, Meta Ads, TikTok Ads, and other supported platforms from a single interface. Features include connecting advertising accounts via OAuth 2.0, planning and reviewing campaigns, generating creative assets, launching campaigns on your explicit approval, and monitoring performance.

2. Your account

You must provide accurate information when you register, keep your credentials confidential, and promptly notify us of any unauthorized access. You are responsible for all activity that occurs under your account.

3. Subscription and fees

Doru is offered on a subscription basis. Fees are payable in advance and are non-refundable except as required by law. We may change our fees with at least thirty (30) days’ notice via the service or the email address on file.

Advertising spend is not included. Doru never charges your advertising platforms’ billing profiles. All costs for impressions, clicks, and conversions on Google Ads, Meta Ads, TikTok Ads, or any other connected platform are billed directly to you by those platforms, under your own billing profile with each platform.

4. Your content and your ad campaigns

You retain all rights to the content you provide to Doru (brand assets, copy, campaign briefs, creatives you upload). You grant Doru a limited, non-exclusive license to use that content solely for the purpose of operating the service on your behalf.

You are solely responsible for ensuring that all campaigns, ad content, and destination URLs you launch through Doru comply with the policies, laws, and regulations that apply to you and your business, including (without limitation) the program policies of each advertising platform on which you run campaigns. By way of example, campaigns launched on Google Ads are subject to the Google Ads policies, and campaigns launched on Meta platforms are subject to the Meta Advertising Standards. Doru does not independently review or approve customer ad content for compliance with platform policies.

5. Acceptable use

You agree not to, and not to permit others to:

• Use Doru to run advertising for unlawful, fraudulent, or deceptive products or services
• Circumvent, disable, or interfere with security or rate-limit features of the service or of any connected advertising platform
• Attempt to access another customer’s account, data, or infrastructure
• Reverse engineer, decompile, or attempt to extract the source code of the service
• Resell, sublicense, or lease access to Doru without our prior written consent
• Use the service to build a competing product

6. Third-party platforms

Doru integrates with third-party advertising platforms and service providers. Your use of those platforms is governed by their own terms of service and privacy policies. Doru is not responsible for the availability, content, or policies of third-party platforms, and is not liable for any damages resulting from their use.

7. Intellectual property

The Doru platform, including its software, design, logos, and content (other than content you provide), is owned by Spartan Media LLC or its licensors and is protected by intellectual property laws. No rights are granted to you other than those expressly stated in these Terms.

8. Termination

You may cancel your account at any time from your Doru settings. We may suspend or terminate your account if you materially breach these Terms, fail to pay fees, or use the service in a way that could cause harm to Doru, other users, or third parties. Upon termination, your access to the service will end and your data will be deleted in accordance with our Privacy Policy and the Data Processing Addendum below.

9. Disclaimers

Doru is provided “AS IS” and “AS AVAILABLE” without warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that it will meet any specific performance or business goal.

10. Limitation of liability

To the maximum extent permitted by law, Spartan Media LLC will not be liable for any indirect, incidental, consequential, special, or exemplary damages, or for lost profits or revenue, arising from or related to your use of the service. Our aggregate liability for any claim arising from these Terms is limited to the fees you paid to Doru in the twelve (12) months preceding the event giving rise to the claim.

11. Indemnification

You agree to defend, indemnify, and hold harmless Spartan Media LLC and its officers, employees, and agents from any claim, loss, or liability arising out of (a) your content or campaigns, (b) your breach of these Terms, or (c) your violation of applicable law or of any third-party right.

12. Governing law

These Terms are governed by the laws of the Commonwealth of Virginia, United States, excluding its conflict of laws rules. Any dispute arising from these Terms will be resolved exclusively in the state or federal courts located in Prince William County, Virginia, and the parties consent to personal jurisdiction in those courts.

13. Changes to these Terms

We may update these Terms from time to time. Material changes will be communicated at least thirty (30) days before they take effect, via the service or the email address associated with your account. Continued use of Doru after the effective date of a change constitutes acceptance of the updated Terms.

14. Contact

Questions about these Terms, or legal notices required to be delivered in writing, should be sent to info@espartan.net, by phone at +1 (703) 705-4977, or by mail to:

Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the Terms of Service above and applies where Doru processes Personal Data on your behalf in connection with your use of the service.

A. Definitions

Capitalized terms used but not defined in this DPA have the meaning given in the Terms. “Personal Data”, “processing”, “controller”, “processor”, and “data subject” have the meanings given in the EU General Data Protection Regulation (“GDPR”) and equivalent applicable data protection laws.

B. Roles of the parties

You are the controller (or processor acting on behalf of a controller) of Personal Data that you upload to or generate within the service, and of Personal Data obtained from connected advertising platforms on your behalf. Doru acts as a processor of that Personal Data and will process it only on your documented instructions, which are set out in these Terms and the configuration you choose within the service.

C. Scope, nature, and purpose of processing

Doru will process Personal Data to provide the service described in the Terms, including: connecting your advertising accounts, reading campaign metadata and performance metrics from connected platforms, presenting that information in your dashboard, generating campaign recommendations at your request, executing campaign actions you explicitly approve, and providing customer support.

D. Sub-processors

You authorize Doru to engage the sub-processors listed at doru.espartan.net/sub-processors to process Personal Data on your behalf.Doru remains responsible for its sub-processors’ compliance with this DPA. Before engaging a new sub-processor, Doru will provide at least thirty (30) days’ notice, and you may object to the addition for reasonable data protection reasons by terminating the affected portion of the service within thirty (30) days of the notice.

E. Security

Doru will implement appropriate technical and organizational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include: encryption in transit and at rest, row-level access controls, credential management via Google Cloud Secret Manager, audit logging for sensitive operations, and regular review of access rights.

F. Security incidents

Doru will notify you without undue delay — and in any event within seventy-two (72) hours of becoming aware of a Personal Data breach affecting your Personal Data — of the nature of the incident, the categories and approximate number of data subjects and records affected, likely consequences, and measures taken or proposed to address the breach and mitigate harm.

G. Assistance with data subject rights

Taking into account the nature of the processing, Doru will assist you by appropriate technical and organizational measures, insofar as possible, to respond to requests from data subjects to exercise their rights under applicable data protection laws (including access, correction, deletion, portability, and objection). If Doru receives such a request directly, it will advise the data subject to contact the controller and will notify you of the request.

H. International transfers

Doru may transfer Personal Data to countries outside your own jurisdiction, including the United States, for processing by Doru and its sub-processors. Where required by applicable law, transfers will be made subject to appropriate safeguards, including Standard Contractual Clauses approved by the relevant supervisory authority.

I. Audits

Doru will make available to you the information necessary to demonstrate compliance with this DPA, including third-party certifications and audit reports of its sub-processors where available. On reasonable request and with at least thirty (30) days’ notice, Doru will allow for and contribute to audits conducted by you or an independent auditor you appoint, at your expense, subject to customary confidentiality obligations.

J. Return and deletion

Upon termination of the service, Doru will, at your choice, return or delete all Personal Data in its possession, unless retention is required by applicable law. Deletion will occur within ninety (90) days of account termination.

K. Relationship to advertising platform terms

You acknowledge that when Doru executes Google Ads, Meta Ads, or TikTok Ads API operations on your behalf, those operations are also governed by the advertising platforms’ own terms, including (where applicable) the Google Ads Data Processing Terms, to which you as the advertiser are directly bound. Nothing in this DPA overrides or limits your direct legal relationship with those platforms.

L. General

This DPA is incorporated into and forms part of the Terms. In the event of a conflict between this DPA and the Terms, this DPA prevails with respect to Personal Data processing. If any provision of this DPA is held invalid or unenforceable, the remaining provisions will continue in full force and effect.