Privacy Policy

1. Who we are

Adaise is provided by Digital Konsulterna Sweden AB (company registration number 559172-8562), Malmskillnadsgatan 44A, 111 57 Stockholm, Sweden. Email: info@adaise.com.

• Controller. We are the data controller for the website, the waitlist, Adaise user accounts and our customer relationships.
• Processor. For personal data contained in the advertising, commerce and catalog accounts that a customer connects, we act as the customer’s processor under the data processing terms in our Terms of Service.

2. Summary

• We use your data only to provide Adaise to you. We never sell it.
• Nothing is changed in your ad accounts unless a person on your side has approved it.
• We do not use your data, including data from Google or Meta, to train general or foundational AI models.
• You can ask us to delete your data at any time, and we do so within ten days. See How to delete your data.

3. Data we collect

Website and waitlist (adaise.com). Your email address, the website or store you enter (optional), the language you used, the time and wording of your consent, the page you came from and any campaign parameters (utm) in the link, and a one-way hashed version of your IP address used only to stop abuse.

Your Adaise account. Name, email address, a password stored only as a secure hash (Argon2), language and theme settings, your workspaces and brands, team members and their roles. If you sign in with Google, Meta or LinkedIn, we receive your name, email address, profile picture and the provider’s user identifier. We do not store those sign-in providers’ access tokens.

Sessions and security. A session cookie and, for security, records of sign-ins and of changes made in Adaise (who did what and when).

Content you create or upload. Images, videos and designs in the media hub, campaign drafts, reports, notes, questions you ask the AI assistant and its answers, and memories the assistant keeps (which you can see and delete).

Your brand and website. When you add a brand, Adaise reads public pages of your website (for example texts, logo and colours) to build your brand kit and brand facts.

Connected platforms and stores. Data from the accounts you connect, described in the next sections.

Credits. If you use features that cost credits, a record of credits granted and used.

4. Google user data

You choose whether to connect Google. Adaise asks for these permissions (scopes) on Google’s consent screen:

Changes. The changes Adaise can make in Google Ads are: campaign status, name and budget; creating and removing campaigns; adding and removing keywords and negative keywords; keyword bids; and uploading or removing ad videos. Every change is shown before and after, approved by a person, sent, read back and logged.

How we use Google user data. Only to provide the Adaise features you use: analytics and reports, improvement suggestions and alerts, the product center, the media hub, the campaign builder, the AI assistant and the changes you approve.

Adaise’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google user data only to provide or improve user-facing features that are visible and prominent in Adaise.
• We transfer Google user data only to the service providers listed in Sharing and subprocessors when needed to provide those features, to comply with applicable law, for security, or as part of a merger, acquisition or sale of assets after obtaining your explicit prior consent.
• We do not sell Google user data, and we do not transfer it to advertising platforms, data brokers or information resellers.
• We do not use Google user data to serve advertisements, including retargeting, personalised or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not use Google user data to train or improve generalised or foundational AI or machine-learning models, and we never mix one customer’s data with another customer’s.
• No person reads your Google user data unless you have given us permission for a specific item (for example when you ask for help), it is necessary for security (such as investigating abuse), it is required by law, or the data is aggregated and anonymised for internal operations. Everyone who works for us is bound by these rules.

You can remove Adaise’s access to your Google account at any time in Adaise or at myaccount.google.com/permissions.

5. Meta platform data

You choose whether to connect Meta. Adaise uses Facebook Login for Business and asks only for the permissions shown in Meta’s login dialog, which can include ads_read, ads_management, business_management and catalog_management, and access to the Facebook Pages and Instagram accounts that your ads run from.

What we process: the ad accounts, campaigns, ad sets, ads, creatives, images and videos, insights (performance reports), custom audience metadata (name, type and size only, never members), the Instagram accounts linked to your ad accounts, and product catalogs and their products. We also receive the name and Meta user ID of the person who connects.

Changes. After your approval Adaise can create campaigns, ad sets, creatives and ads, upload ad images and videos, change status and fields, create catalogs and add products. Adaise only changes or deletes objects that it created.

Why: to measure, report on and improve the connected advertiser’s own Meta advertising, and to carry out the changes the advertiser has approved.

What we never do: sell, license or purchase Meta platform data; use it to retarget people on or off Meta; combine one advertiser’s data with another’s; build profiles of individuals; use it to discriminate or to make eligibility decisions about housing, employment, insurance, credit or similar; or use it for surveillance.

Separation. We process Meta data only on behalf of and as instructed by the connected advertiser, and each advertiser’s data is kept separate and available only to that advertiser and the people they invite.

Deletion. Anyone can ask us to delete their Meta platform data. See How to delete your data. We also delete it when the connection is removed and you ask us to, when the customer leaves, when it is no longer needed, or when Meta asks us to.

6. Other connections

• WooCommerce. With a read-only key from the store owner, or the store’s public product list: products, prices, stock and categories, with optional webhooks for updates. Keys and webhook secrets are stored encrypted.
• Product feeds and files. Feeds (XML or CSV) you give us by URL or upload, and cost files you upload.
• LinkedIn. Only to sign in (name, email address, profile picture and identifier).

Shopify, Google Analytics, Search Console, Microsoft Advertising, TikTok, LinkedIn Ads and Pinterest are planned. This policy will be updated before they are connected.

7. How we use data and our legal bases

• Providing Adaise (account, connections, analytics, suggestions, media, products, campaign drafts, AI assistant, approved changes): performance of our contract with you or your organisation.
• Data in your connected accounts: processed on the customer’s behalf under the data processing terms.
• Waitlist: your consent, which you can withdraw at any time.
• Security, abuse prevention and logs: our legitimate interest in keeping Adaise secure.
• Bookkeeping: our legal obligations under Swedish accounting law.
• Support and service messages: performance of our contract or our legitimate interest in answering you.

Adaise makes no decisions based solely on automated processing that have legal or similarly significant effects on you. AI suggestions are only suggestions, and every change needs a person’s approval.

8. AI features

Adaise uses AI in the assistant, reports, copywriting, product texts, image descriptions, the brand kit and ad suggestions. We send only the data needed for the task you asked for.

• Anthropic (Claude), USA. Text tasks, for example your question and relevant figures from your own accounts, product data or texts from your website. Anthropic processes the data as our subprocessor and does not use it to train its models.
• Google Cloud Vertex AI, EU region. Image generation from text instructions only. Your product images are not sent.
• Bria AI. Image editing (cut-out, new background, extend, erase, upscale) of images you choose. These tools are in testing and are not yet available to customers. When they are, this policy will say so and the images you choose will be sent to Bria for that edit.

We do not use your data, including Google user data and Meta platform data, to train or improve general or foundational AI models. One customer’s data is never used to answer another customer.

9. Sharing and subprocessors

We share data only with these service providers, which process it on our behalf under written agreements and only as needed to provide Adaise:

We also send data back to the platform it came from when you approve a change (for example Google Ads, Merchant Center or Meta). Apart from this, we disclose data only if required by law, or as part of a merger or acquisition after your explicit prior consent. We never sell personal data or platform data.

10. How long we keep data

• Waitlist: deleted automatically 12 months after you sign up, or earlier if you ask.
• Account data: for as long as your account is active. When the account is closed, it is deleted within ten days.
• Raw responses from platforms: 7 days.
• Hourly performance breakdowns: 180 days.
• Other data from connected accounts (campaigns, daily performance, products): as long as the connection and the customer relationship are active and the data is needed for the service. On request, or when the customer relationship ends, it is deleted within ten days.
• When you disconnect an account: we hand the access back to Google or Meta (we revoke it) and delete the tokens immediately. If the same login is still connected in another workspace, the access is handed back when the last one is removed.
• Backups: kept for 14 days, so deleted data disappears from backups within 14 days.
• Cache in your browser: a copy of your ad data is kept in your browser for at most 24 hours and cleared when you sign in or out.
• Bookkeeping records: seven years, as required by Swedish law.

11. How to delete your data

You can ask us to delete your data at any time. This applies to everyone, including data we received from Google and Meta.

1. Email info@adaise.com with the subject “Delete my data”.
2. Tell us the email address of your Adaise account (or the waitlist) and, if it concerns a connected account, which one.
3. We confirm your identity and delete the data within ten days, and from backups within 14 days. We confirm by email when it is done.

Through Facebook. If you remove Adaise in your Facebook settings and ask for your data to be deleted, Facebook sends us the request. We then delete your Facebook sign-in and the Meta connections you made, with their access tokens, right away. Facebook gives you a confirmation code and a link to a page on app.adaise.com that shows the deletion is done.

You can also remove Adaise’s access directly with each platform:

• Google: myaccount.google.com/permissions
• Facebook: Settings & privacy → Settings → Business integrations → Adaise Marketing → Remove
• LinkedIn: Settings → Data privacy → Permitted services

We may keep data we are legally required to keep, such as bookkeeping records, for as long as the law requires.

12. Security

• All traffic to Adaise is encrypted with TLS (HTTPS).
• Access and refresh tokens from Google, Meta and other platforms, and store keys, are stored encrypted, and we never share them.
• Passwords are stored only as secure hashes.
• Calls to Meta are signed with an app secret proof.
• Changes in ad accounts pass a separate write path with approval, spend caps and logs.
• Access to systems and data is limited to the people who need it.
• Each customer’s data is kept separate from other customers’ data.
• If a personal data breach occurs, we notify affected customers, the platforms concerned and the Swedish Authority for Privacy Protection as required.

13. Transfers outside the EU

Our servers are in the EU. When data is transferred to a provider outside the EU/EEA, such as Anthropic in the USA, the transfer is protected by the European Commission’s standard contractual clauses or by the EU–US Data Privacy Framework where the provider is certified.

14. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to processing, to receive it in a machine-readable format, and to withdraw consent at any time. Contact info@adaise.com. We answer within one month.

If the data comes from a customer’s connected account, we act on the customer’s instructions and forward your request to them.

You can complain to the Swedish Authority for Privacy Protection (IMY): imy.se.

15. Cookies and local storage

We use no analytics, tracking or advertising cookies and no third-party trackers.

• adaise.com: the cookie adaise_lang remembers your language choice for one year. Your choice of light or dark mode is saved in your browser’s local storage.
• app.adaise.com: the cookie adsai_session keeps you signed in for up to 30 days, and adsai_signin_state protects sign-in for a few minutes. Local storage keeps interface settings, and a cache of your ad data is kept for at most 24 hours.

16. Children, changes and contact

Adaise is a service for businesses and is not directed at children.

If we change how we use data, we update this policy and the date at the top. If a change means we use data from Google, Meta or other platforms in a new way, we ask for your consent before we do so.

Questions: info@adaise.com, Digital Konsulterna Sweden AB, Malmskillnadsgatan 44A, 111 57 Stockholm, Sweden.