Last updated: 9 September 2026
Straight version: we collect what we need to run this business, we don't sell it, our AI assistant tells you it's an AI, and you can email us anytime to see what we hold or ask us to delete it.
We Speak Ads is a senior-led paid media agency based in Belgrade, Serbia. We are the data controller for everything described on this page.
Legal entity: We Speak Ads
Belgrade, Serbia
Company registration number: 65972492
Tax ID: 112239985
Contact: aleksandar@wespeakads.com
We have not appointed a Data Protection Officer. We are small enough that your email lands with the person who can act on it.
Contact details you give us. Name, work email, phone, company, website, role.
Business context you share. Industry, offer, ad spend, targets, what you have tried, what went wrong. This comes up on calls, in intake forms, and in conversations with Iskra.
Ask Iskra conversations. Everything you type into our AI assistant, together with a session identifier and timestamps. See the dedicated section below.
Technical data from your visit. IP address, browser, device, pages viewed, referrer, and the identifiers described in our Cookie Policy. Most of this is only collected if you allow it.
Client account data. If you become a client and grant us access to your Google Ads, Meta, LinkedIn or analytics accounts, we work inside your accounts under the permissions you grant. We do not copy your account data into our own systems beyond what a report needs.
We do not collect special category data (health, biometrics, political opinions, and so on) and we ask you not to send it to us.
| What we do | Why | Legal basis |
|---|---|---|
| Answer enquiries, run booked calls | You asked us to | Performance of a contract, or steps taken at your request |
| Qualify and route enquiries via Ask Iskra | Work out whether we are a fit before either of us spends an hour on a call | Legitimate interest |
| Deliver the free PPC audit | You requested it | Steps taken at your request |
| Manage and optimise client campaigns | It is the service you are paying for | Performance of a contract |
| Send marketing emails | Keep in touch with people who asked us to | Consent |
| Site analytics and ad measurement | Understand what works and whether our own ads pay off | Consent, via the cookie banner |
| Keep records, invoices, tax filings | We have to | Legal obligation |
| Protect the site from abuse and bots | Keep it available | Legitimate interest |
Where we rely on legitimate interest, we have weighed it against your rights and kept the processing narrow. You can object at any time using the contact details above.
Iskra is an AI. Not a person, not a persona for a person. She introduces herself as an AI at the start of every conversation, the chat window is labelled as an AI assistant, and if you ask her directly whether she is human she will tell you plainly that she is not.
What she does. Iskra asks questions to work out whether your situation is something we can actually help with, and if it is, points you to a call with Alex. She is a qualification and routing tool. She does not run your account, she does not give advice you should act on, and she cannot make a decision about working together. Any outcome is a suggestion that a human reviews.
How she works. Iskra is built on Google Gemini 3.6 Flash, accessed through the Lovable AI gateway from our server. Your messages are sent to that model to generate a reply. Our API credentials never reach your browser.
What we store. The conversation itself, a session identifier held in your browser under the key "wsa-chat-id", and timestamps. Conversations are held in our own database.
We do not use your conversations to train AI models. Not ours, not anyone else's. Messages are sent to the model to produce a response and for no other purpose.
How long we keep it. Conversations are deleted automatically twelve months after the last message, along with every message in them. This runs as a scheduled job, not as a promise we remember to keep.
When it reaches a human. If a conversation looks like a genuine enquiry, we get a notification containing your contact details and the basics of what you told Iskra, with a link back to the conversation. Our team can read the conversation in our own system.
What Iskra will never ask for. Payment card details, passwords, ID numbers, or credentials to your advertising accounts. If anything asks you for those inside a chat window on this site, it is not us. Please do not type them in regardless.
She loads only if you let her. Iskra sits behind the functional cookie category. Decline it and she does not load at all.
She can be wrong. She is a language model. Treat what she says as a starting point, not as a quote, a commitment, or professional advice.
If you would rather not. Book a call with Alex directly and skip the chat entirely. The link sits inside the chat window and in the footer of every page.
We publish free calculators, scorecards and audit tools under /resources. They work differently from one another, so here is exactly what each does.
Google Ads Account Audit. Asks for nothing. Your answers stay in your browser and never reach us.
Landing Page Scorecard. Asks for your name and email so we can show you the full breakdown, plus your page URL and, optionally, your company. That submission is stored in our database and triggers an internal notification so we know a real person is looking.
SaaS CAC Calculator. Gives you the result without asking for anything. Afterwards you can optionally leave an email to receive a copy. If you do, we receive that email together with the figures you entered, the result, the page URL, and the referral and campaign parameters your browser carried in. That submission is stored in our own database and deleted automatically after twelve months.
Getting a result and joining our list are two separate decisions. Where a tool asks for your email, that email is used to deliver what you asked for. Marketing email is a separate, unticked checkbox. Leave it unticked and you get your result and nothing else, ever. Tick it and every email we send after that carries a one-click unsubscribe.
How long we keep it. Tool submissions are stored in our own database and deleted automatically twelve months after you submit them. You can ask us to delete yours sooner at any time.
We use Google Analytics 4 and Google Ads measurement through Google Tag Manager, container GTM-KWXVRX6P. Nothing beyond the strictly necessary loads until you choose on the banner, and we pass your choice to Google using Consent Mode v2.
The full list of what gets set, by whom, and for how long is in our Cookie Policy.
We keep the stack small on purpose. Every one of these acts as a processor under our instructions.
| Vendor | What for | Where |
|---|---|---|
| Google (Analytics, Ads, Workspace, Gemini via Lovable) | Measurement, advertising, email, the model behind Iskra | US and global |
| Lovable | Website hosting, database, AI gateway | EU and US |
| Cloudflare | Content delivery, bot protection | Global |
| Calendly | Booking calls | US |
| Our email provider | Sending transactional and marketing email | US and EU |
We do not sell your data, and we do not share it with data brokers. We have never done either and have no plans to start.
Some of the vendors above are based in the United States or process data globally. Where that happens we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the vendor is certified under it, and on Standard Contractual Clauses where it is not, together with the safeguards in each vendor's own data processing terms.
If you want to know which mechanism applies to a specific vendor, email us and we will tell you.
| Data | Kept for |
|---|---|
| Ask Iskra conversations | 12 months from the last message, then deleted automatically |
| Enquiries that did not become clients | 24 months from last contact |
| Client records and campaign documentation | Duration of the engagement, plus 5 years |
| Invoices and accounting records | As required by Serbian law |
| Marketing list | Until you unsubscribe, or 24 months of no engagement |
| Analytics data | Per Google's retention settings, currently 14 months |
Internal email about an enquiry may survive slightly longer inside our mailbox. Ask us to delete it and we will.
Wherever you are, you can ask us to:
Email aleksandar@wespeakads.com. We answer within 30 days, usually much sooner. We will not charge you and we will not make you jump through hoops.
If you are in California, you also have the right to know what personal information we collect and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA. We will not discriminate against you for exercising any right.
If we get it wrong, you can complain to your data protection authority. In Serbia that is the Commissioner for Information of Public Importance and Personal Data Protection. In the EEA it is the supervisory authority where you live. We would rather you came to us first, but that is your call, not ours.
Encrypted connections, access limited to people who need it, credentials kept out of the browser, and a small vendor list so there is less surface to defend. No one can promise perfect security, and anyone who does is selling something. If a breach ever affects your data, we will tell you and the relevant authority within the legal deadlines.
This site is for businesses. It is not directed at anyone under 18 and we do not knowingly collect their data.
If we update this policy, the change appears here with a new date at the top. If a change materially affects how we handle your data, we will say so rather than quietly editing the page.
We Speak Ads
Belgrade, Serbia
Company registration number 65972492 · Tax ID 112239985