Back to Adtool.io

Privacy Policy

Last Updated: January 19, 2026

1. Introduction

Welcome to Adtool.io. This Privacy Policy explains how Adtool.io collects, uses, stores, and protects your information when you use this Facebook advertising management platform.

This service is primarily targeted at users in Denmark and the European Union, and complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information Collected

2.1 Personal Information

  • Account Information: Email address, name, profile picture
  • Authentication Data: Login credentials, session tokens stored by Supabase
  • Communication Data: Support requests and feedback you send

2.2 Facebook Integration Data

  • Access Tokens: Facebook OAuth tokens to access your ad accounts
  • Ad Account Data: Ad account details, business manager information
  • Campaign Data: Campaign names, settings, ad sets
  • Page Information: Connected Facebook pages and Instagram profiles
  • Pixel Data: Facebook pixel configurations and settings
  • Audience Data: Custom audience configurations (no personal data of your audience members is stored)

2.3 Google Drive Integration Data

  • Access Tokens: Google OAuth tokens to access your Drive files
  • Folder Information: Names and links to folders you connect for creative storage
  • File Metadata: File names, types, and basic metadata (file contents are not stored)

2.4 Technical Data

  • Usage Information: How you interact with the platform
  • Device Information: Browser type, operating system
  • Session Cookies: Essential cookies for authentication and functionality
  • Local Storage: UI preferences like sidebar state and content groups
  • Log Data: IP addresses, access times, error logs
  • Analytics & Product Improvement: PostHog analytics for product usage patterns, feature adoption, and user identification (email, user ID) for support and optimization; Google Tag Manager for marketing analytics

3. How Information is Used

3.1 Primary Purposes

  • Service Delivery: Provide Facebook ad management and campaign creation tools
  • Account Management: Maintain your account and process authentication
  • Integration Management: Connect and synchronize with Facebook and Google Drive
  • Data Synchronization: Keep your campaign and creative data up-to-date

3.2 Service Improvement and Analytics

Aggregated Data Analysis: We may use aggregated, anonymized data to analyze patterns and improve our services. This data cannot identify individual users or accounts and is used solely to enhance the Adtool.io platform for all users.

Examples of how anonymized data may be used:

  • Understanding general performance trends across campaign types
  • Identifying common workflow patterns to improve the user interface
  • Developing better default settings and recommendations

Note: Your individual account data, campaign details, and creative assets are never sold or shared with third parties. Any data analysis is performed on fully anonymized, aggregated datasets that cannot be traced back to specific users or accounts.

3.3 Communications

  • Service-related notifications and updates
  • Technical support and customer service
  • Important security or policy changes
  • Product updates, new features, and improvement announcements (you may opt-out by contacting hello@adtool.io)
  • Educational content and best practices for advertising optimization

4. Data Storage and Security

4.1 Data Location

Your data is stored on secure servers provided by Supabase in the United States. Data transfers from the EU to the US are protected under the EU-US Data Privacy Framework (DPF), ensuring compliance with GDPR requirements for international data transfers.

4.2 Security Measures

  • End-to-end encryption for data transmission
  • Encrypted storage of sensitive data including access tokens
  • Row-level security (RLS) policies in the database
  • Regular security updates and monitoring
  • Access controls and authentication requirements

4.3 Data Retention

Data is retained for as long as your account is active and as needed to provide the services. You may request deletion of your data at any time by contacting hello@adtool.io.

5. Third-Party Integrations

5.1 Facebook/Meta

Integration with Facebook's Marketing API is used to manage your advertising campaigns. Facebook's own privacy policy applies to data they collect. Only the minimum necessary permissions are requested to provide the services.

5.2 Google Drive

Integration with Google Drive is used to access creative assets you choose to connect. Google's privacy policy applies to data they collect. Only folders you explicitly authorize are accessed.

5.3 Supabase

Supabase provides the database and authentication services. All data is stored in their US data center (Ohio) with enterprise-grade security and EU-US Data Privacy Framework protections.

5.4 Stripe

Stripe processes all payment transactions. Payment card details are handled directly by Stripe and never touch our servers. Stripe's privacy policy applies to payment data.

5.5 PostHog

PostHog provides product analytics to help us understand feature usage and improve the platform. Session recordings automatically mask sensitive data.

5.6 Upstash

Upstash provides Redis caching services for improved performance. Only temporary, non-personal operational data is cached.

5.7 ActiveCampaign

ActiveCampaign is used for marketing communications. Your email address may be shared for product updates and newsletters you subscribe to.

5.8 Crisp

Crisp provides live chat support. Conversation history and basic profile information are stored to provide better customer service.

5.9 Vercel

Vercel hosts the Adtool.io application. Access logs and performance data are processed for security and optimization purposes.

For a complete list of sub-processors and their data handling practices, please see our Data Processing Agreement.

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how your data is used
  • Right to Data Portability: Transfer your data to another service
  • Right to Object: Object to the use of your personal data
  • Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, please contact hello@adtool.io

7. Cookies and Tracking

7.1 Essential Cookies

Essential cookies are used for:

  • Authentication and session management (via Supabase auth)
  • User interface preferences (sidebar state, content groups)
  • Security and fraud prevention

7.2 Analytics and Product Improvement Tools

We use PostHog and Google Tag Manager to improve product experience and understand how users interact with our platform:

  • Feature Usage Analysis: Understand which features are used and how to improve them
  • Technical Performance: Identify issues and optimize platform performance
  • User Support: Provide personalized assistance based on your usage patterns
  • Product Development: Analyze onboarding completion and feature adoption to guide improvements

Data collected by analytics tools includes:

  • User identification (email address, user ID)
  • Feature usage events and interaction patterns
  • Session recordings with sensitive data automatically masked
  • Technical performance metrics and error logs
  • Time spent on features and navigation patterns

By using Adtool.io, you consent to this analytics data collection. Marketing cookies or third-party advertising trackers are not used.

8. Data Sharing

Your personal information is not sold, traded, or rented to third parties. Data may be shared only in these limited circumstances:

  • With your explicit consent
  • To comply with legal obligations
  • To protect rights or safety
  • With service providers under strict data protection agreements (see our Data Processing Agreement for the complete sub-processor list)

9. International Transfers

Data is processed in the United States (Ohio data center) under the EU-US Data Privacy Framework, ensuring appropriate safeguards for EU data as required by GDPR.

10. Children's Privacy

Adtool.io is not intended for use by children under 16 years of age. The service does not knowingly collect personal information from children under 16.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. Users will be notified of any material changes via email or through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Information

For questions about this Privacy Policy or data protection matters, please contact:

Email: hello@adtool.io
Service: Adtool.io
Data Controller: Adtool (CVR: 45752577)