Privacy Policy

1. Who we are

Adsome Suite is operated by Stromberg Media AB, org.nr 559387-6591, a company registered in Stockholm, Sweden. We are the data controller for the personal data described here. Contact: carl@adsome.io.

2. What we collect

• Account identity — your name and email address, used to authenticate you and to determine which ad accounts you may view.
• Meta advertising data — campaign, ad set, ad and creative metadata, and performance metrics (spend, impressions, clicks, conversions) retrieved from the Meta Marketing API for ad accounts you have authorised.
• Access tokens — encrypted at rest and used solely to retrieve the data above on your behalf.
• Operational logs — a record of API requests we make, retained so we can monitor our own use of the Meta API responsibly.

We do not collect advertising identifiers, browsing history, or any data about the end users who see your ads.

3. How we use it

Solely to operate this platform: to show you how your advertising is performing, to generate analysis and creative recommendations, and to create or amend ads at your instruction. We do not use your data for our own advertising, we do not build profiles, and we do not sell or rent it to anyone.

4. Meta Platform data

We access Meta advertising data through the Meta Marketing API in accordance with Meta's Platform Terms and Developer Policies. We request only the permissions the platform needs: ads_read, ads_management, business_management, pages_show_list and pages_read_engagement. Meta Platform data is not transferred to any third party and is not used for any purpose other than operating this platform for you.

5. Sub-processors

We use the following providers to run the service. Each processes data only on our instruction:

• Cloudflare — application hosting and content delivery.
• Supabase — database, authentication and file storage (hosted in the EU).
• Anthropic — the model that generates performance analysis and creative recommendations. Advertising metrics and creative copy are sent for this purpose. They are not used to train models.

6. Retention

Advertising data is retained while your account is active and for 90 days after it is closed, after which it is deleted. Access tokens are deleted immediately on disconnection. Operational logs are retained for 12 months.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data, and to object to processing. To exercise any of these, email carl@adsome.io.

You can also request deletion of all data associated with your Meta account at any time from our data deletion page. You have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish supervisory authority.

8. Security

All traffic is served over HTTPS. Access tokens are encrypted at rest. Client data is isolated at two independent layers: an authorisation check in the application, and row-level security enforced by the database itself, so one client cannot read another's data even if an application check were missed. We do not store passwords — authentication is handled by our authentication provider.

9. Contact

Questions about this policy: carl@adsome.io, or write to Stromberg Media AB, Stockholm, Sweden.