Privacy Policy

Data controller

The data controller is Adswave Software Kft., registered at 1028 Budapest, Széchenyi utca 21/A, Hungary. Adószám (Tax ID): 33089326-2-41. Cégjegyzékszám: 01 09 458535. You can reach us at hello@adswave.io.

Information we collect

Account information

When you sign up we collect your email address and display name. If you sign in with Google we receive your name, email, and profile picture from Google.

Organization and workspace settings

To run the product we store the settings you create in Adswave: organizations, workspaces, clients, monthly budgets, report configurations, alert rules, team invites and roles, branding (such as logos and agency names), and similar configuration you enter. This is your account structure, not a copy of your full ad account history from Google or Meta.

Connected advertising platform data

When you connect Google Ads or Meta Ads with secure sign-in, we receive access and refresh tokens. We use those tokens to fetch advertising metrics on your behalf (for example campaign results, product and search-term reports, creative asset information, and account structure).

We do not keep a lasting warehouse or archive of your Google or Meta campaign metrics. Numbers are fetched from Google and Meta when you use the Service. For speed, we may keep short-lived caches in memory (typically minutes, and up to about 30 minutes) so the same view does not re-fetch every time. Those caches are temporary and are cleared when they expire, when the service restarts, or when you disconnect.

We do not modify, create, or delete campaigns or other objects in your advertising accounts. Adswave is read-only analysis. You make changes in Google Ads or Meta yourself.

Usage and diagnostic data

We collect anonymised error reports (via Sentry) and basic usage telemetry to maintain reliability and improve the Service. We do not intentionally collect personally identifiable information in those reports.

Payment information

Payments are processed by Stripe. We do not store credit card numbers or bank account details. Stripe may collect information as described in Stripe’s Privacy Policy.

How we use your data

• To provide, operate, and maintain the Service (budget tracking, campaign analysis, product and keyword checks, creative insights, change history, alerts, and client reports).
• To authenticate your identity and manage sessions.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (for example invitation links and alert notifications you configure).
• To monitor and improve performance, security, and reliability.
• To comply with legal obligations.

Google API Services User Data Policy

Adswave’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the data necessary to provide the features you use.
• We do not sell, rent, or share Google user data with third parties for advertising, data brokering, or any purpose unrelated to the Service.
• We do not use Google user data to build user profiles for advertising or to serve ads.
• We only retain Google user data as long as necessary to provide the Service to you. You may revoke access at any time.
• Access to Google user data is limited to the features described in this policy and is not transferred to other applications.

Meta Platform data

Data obtained through Meta’s advertising tools is used solely to provide analytics and insights inside Adswave. We comply with Meta’s Platform Terms. We do not sell Meta data, use it to build advertising profiles, or share it with third parties for purposes beyond operating the Service. You can disconnect Meta at any time in Adswave or in Meta Business Integrations. See our Data Deletion page for how to remove connected data.

Legal basis for processing

We process your personal data on the following legal grounds under the GDPR:

• Contract: processing necessary to provide the Service you signed up for (Art. 6(1)(b)).
• Consent: when you explicitly grant access to your Google Ads or Meta Ads account via secure sign-in (Art. 6(1)(a)). You may withdraw consent at any time by disconnecting the integration.
• Legitimate interest: error monitoring, security, and service improvement, where our interests do not override your rights (Art. 6(1)(f)).
• Legal obligation: where we are required to retain or disclose data by applicable law (Art. 6(1)(c)).

Data sharing

We do not sell your personal data. We share data only with the following categories of service providers, and only to the extent necessary to operate the Service:

• Google Cloud Platform: hosting, database, and secret management.
• Firebase (Google): authentication and identity.
• Stripe: payment processing.
• Sentry: error monitoring (anonymised).

We may also disclose information if required by law, regulation, or legal process.

Data retention

We retain your account and organization settings for as long as your account is active. Advertising metrics from Google and Meta are not kept as a lasting archive. They are fetched when you use the Service and may sit briefly in short-lived caches for speed, then expire.

Access tokens are deleted when you disconnect an integration. If you delete your account, associated personal data (account info, tokens, organization settings, workspaces, clients, budgets, reports, and alert rules) is permanently removed within 30 days, except where retention is required by law. For step-by-step instructions, see Data Deletion.

International data transfers

Our infrastructure is hosted on Google Cloud Platform, which may process data in regions outside the European Economic Area (EEA). Where data is transferred outside the EEA, we rely on Google’s Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure an adequate level of protection as required by the GDPR.

Security

We take commercially reasonable measures to protect your data. Access tokens are encrypted at rest using Google Cloud Secret Manager. All traffic between your browser and our servers is encrypted via TLS. Access to production systems is restricted and audited.

Cookies and local storage

Adswave uses localStorage in your browser to store your authentication token and user preferences. We do not use third-party tracking cookies. Firebase may set a small number of first-party cookies for authentication purposes.

Your rights (GDPR & applicable law)

If you are located in the European Economic Area or in a jurisdiction with similar data-protection laws, you have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate data.
• Erasure: ask us to delete your data (“right to be forgotten”).
• Restriction: ask us to restrict processing while we verify your request.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

Third-party links

The Service may contain links to third-party websites or services (for example Google Ads, Meta Business Suite, Stripe). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

Children’s privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by placing a prominent notice in the Service. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact us at hello@adswave.io.