1. Overview
AdSweet helps businesses with their ads on Facebook and Instagram. To do that we process data about you, your business and your ad account. We only use it to make AdSweet work and we never sell it. Our database and our servers are in the European Union, in Ireland. For the AI in AdSweet we work with suppliers in the United States: below you can read which ones and what they receive.
2. What data we collect
Your name and email address, your business details such as your website, logo and company number, your payment details through Stripe, and how you use AdSweet. You log in with a link we email you: we do not store a password. What you ask Dot and the texts, images and videos you have made in Studio, we keep with your account.
3. Data from Meta and Shopify
If you connect Meta, AdSweet reads your campaigns, ads, budgets and results. Your Meta key is stored encrypted in a separate vault, never in your browser. We never read your private messages. If you connect Shopify, we only fetch the number of orders and the revenue of your store per day, to put them next to the numbers from Meta. For that we do not request the customer data of your store and we do not store it.
4. Server-side measurement (Conversions API)
If you switch on server-side measurement in Settings, AdSweet sends every paid order from your store as a purchase to your own pixel at Meta. That switch is off by default: AdSweet then receives no data about your buyers. When it is on, AdSweet receives the order from Shopify but does not store it. We immediately turn the buyer's email address, phone number, name, city, postcode and country into a hash (SHA-256) and send only those hashes to Meta, with the order number, the time and the amount. After sending we delete the hashes; an event that cannot be sent is deleted after 7 days at most. For this data about your buyers, AdSweet acts on your behalf [to be checked by a lawyer].
5. Dot and the microphone
If you speak a question to Dot, AdSweet uses the speech recognition of your browser. Your browser first asks whether it may use your microphone. The sound does not go to AdSweet: the browser sends it to its own service for recognition, to Google in Chrome and to Apple in Safari, under their own privacy rules. AdSweet only receives the text that appears in the input field.
6. What we use it for
To set up and measure your campaigns, to give you an overview with suggestions every night, to let Dot answer your questions, to make texts, images and videos when you ask for them, to invoice you and to help you if you have a question.
7. Who we share it with
Only with the suppliers we need to make AdSweet work, and only what they need for their task. With Meta when you publish something yourself. With an AdSweet expert only if you ask for it. The next part names them.
8. Our processors
Supabase: the database, logging in and the storage of your files, in Ireland. Vercel: hosting of the website and the app, with the servers in Dublin. Stripe: payments, subscriptions and invoices. Resend: the emails from AdSweet. Meta: your ads and your numbers if you connect Meta, and the hashed purchases if you switch on server-side measurement. Anthropic (Claude): Dot's answers and the texts and checks in Studio. OpenAI: the AI images in Studio. Google (Gemini): the AI videos in Studio. Shopify: the numbers of your store, only if you connect Shopify. On the website we also use Google Analytics and the Meta pixel, only if you allow it.
9. Transfers outside the EU
Your database and your files are in the European Union. Anthropic, OpenAI and Google process what you ask the AI in the United States: your question, the details of your business that go with it and the images you add. On the Free plan, without AI, nothing goes to them. The safeguard for that transfer: [to be checked by a lawyer]. Vercel, Stripe, Resend, Meta and Shopify also work outside the EU; which data ends up there and with which safeguard: [to be checked by a lawyer].
10. Security
Your data is stored encrypted on servers in the European Union. Access to your Meta account runs through a secure connection that you can withdraw at any time. Only people who need it for their work can access your data.
11. How long we keep it
For as long as you have an account. If you ask us to delete your account, we delete your data after a waiting period of [waiting period PJ]. Until then you can withdraw the request. We keep invoices for 7 years, because the law requires it. The buyer hashes for server-side measurement are deleted after sending, and after 7 days at the latest. How long we keep your conversations with Dot, your notifications, the summaries of your competitors and the messages sent through the forms on the website while your account is active: [rule PJ]. The log of the AdSweet team, with who changed what in your account: [rule PJ].
12. Your rights
You can always ask which data we hold about you, have it changed or deleted, and object to how we use it. Email privacy@adsweet.ai for that. If you are not satisfied, you can contact the Data Protection Authority.
13. Cookies
In the app AdSweet only sets necessary cookies, never for advertising or measuring: a Supabase cookie starting with sb-, to keep you logged in (30 days at most), as-org, as-account and as-periode for the business, the ad account and the period you chose, and NEXT_LOCALE for your language (1 year each), as-ref and as-code for a referral or a discount code (30 and 60 days), and as-meta-state or as-shopify-state while you connect Meta or Shopify (10 minutes). If you choose to pay at Meta in the app, Meta's window opens and it can set its own cookies. Which cookies the website uses and how to change your choice, you can read in our cookie statement.
14. Changes
If we change this text, you will see it at the top in the date. For an important change we let you know by email beforehand.
15. Contact
Questions about your data? Email privacy@adsweet.ai.