Privacy Policy

This Privacy Policy explains how Adwise, an independent app built and operated by an individual developer (“the developer of Adwise”, “we”, “us”), handles information when you use the Adwise website and web application (the “Service”). Questions or requests can go to vineet.likhitkar@gmail.com.

1. Information we collect

Account information

Your name, email address and password (stored only as a secure hash), and the workspace you create.

Security information. If you add one, your mobile number (used to contact you about your account, verified by a text message). If you turn on two-step verification, an authenticator key (encrypted at rest) and one-time recovery codes (stored only as hashes). To protect your account, a record of sign-ins and security changes (time, IP address and browser), the devices you’ve signed in from, and a device cookie that recognises a browser you’ve used before. This is used only to detect unusual sign-ins, send you sign-in alerts and show you your recent security activity, and is kept for up to 180 days.

Connected ad account data

When you connect Meta or Google Ads through their official OAuth sign-in, we receive access tokens and, using them, read data from the ad accounts you choose: campaigns, ad sets / ad groups and ads, their status and settings, budgets, and performance metrics such as impressions, clicks, spend and conversions, including breakdowns by country, device, placement and hour of day.

Lead form data

If you connect a Facebook Page and use lead form (instant form) ads, we retrieve submissions to your forms: typically the names, email addresses, phone numbers and form answers of people who submitted them. For this data, you are the controller and Adwise processes it only on your behalf and on your instructions, to show and manage those leads for you. You are responsible for having a lawful basis and a privacy notice for the people who fill in your forms.

Action and audit logs

A record of changes made through Adwise (for example a campaign paused by a schedule, or a budget changed by a rule), including dry-run results, who or what triggered them, and when.

Session and technical data

A session cookie that keeps you signed in, and standard server logs (such as IP address, browser type and request times) used for security and troubleshooting.

2. Permissions we request

We ask only for the permissions needed for the features we offer. You grant them on Meta’s or Google’s own consent screen, and you can revoke them at any time.

Meta (Facebook and Instagram)

• ads_read: Read your campaigns, ad sets, ads, budgets and performance insights.
• ads_management: Pause, resume and change budgets and settings of your campaigns when you ask Adwise to.
• business_management: List the Business portfolios and ad accounts you can access, so you can choose which to connect.
• leads_retrieval: Retrieve submissions from your lead form (instant form) ads.
• pages_show_list: List the Facebook Pages you manage, so you can choose which to connect.
• pages_read_engagement: Read basic information about the Pages you connect.
• pages_manage_metadata: Subscribe your Page to lead notifications so new leads arrive promptly.
• pages_manage_ads: Access the lead forms and ads associated with your Page.

Google Ads

• https://www.googleapis.com/auth/adwords: read your Google Ads campaigns, ad groups, ads, budgets and performance reports, and make the changes you configure (such as pausing or resuming campaigns on a schedule).

3. How we use information

We use the information above only to provide and improve the features you use, namely to:

• show your campaigns, performance, analytics and leads inside Adwise;
• run the schedules and rules you set up, and record them in your action log;
• keep the Service secure, prevent abuse and fix problems;
• send you service messages, such as notifications from rules you configured or important account notices.

We do not sell your data or your leads’ data, do not use it for advertising, and do not use it to train third-party AI models.

4. Google API Services: Limited Use

Adwise’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide or improve user-facing features of Adwise, is not transferred to others except as needed to provide those features, comply with law or as part of a merger or acquisition with notice, is not used for advertising, and is not read by humans except with your consent, for security purposes, to comply with law, or when aggregated and anonymised for internal operations.

5. Sharing

We share information only with:

• The ad platforms themselves (Meta and Google), to carry out the actions you request, such as reading reports or pausing a campaign;
• Infrastructure providers that host and run the Service (such as cloud hosting, database and email delivery providers). They process data only on our instructions;
• authorities, where required by law.

6. Retention and deletion

We keep your data while your account is active. When you disconnect an integration, we delete its stored access tokens and stop syncing; synced data from that account is deleted from our active systems within 30 days. When you delete your account, or email us asking for deletion, we delete your account, connected account data, leads and logs within 30 days, except where we must keep something to comply with law. Backups roll off on their normal schedule.

Data deletion instructions for Meta

To delete the data Adwise holds from your Facebook or Instagram account:

• In Adwise, open Integrations and disconnect Meta; or email vineet.likhitkar@gmail.com with the subject “Delete my data” from the email on your Adwise account.
• You can also remove Adwise in Facebook under Settings & privacy → Settings → Business integrations (or Apps and websites), then select Remove.

We will confirm by email once deletion is complete.

7. Security

OAuth access and refresh tokens are encrypted at rest with AES-256-GCM. Data is transmitted over HTTPS, passwords are stored as salted hashes, and access to production systems is restricted. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you of a breach affecting it as required by law.

8. Cookies and local storage

Adwise uses two essential cookies: a session cookie that keeps you signed in, and a device cookie that recognises a browser you’ve signed in from before, so unusual sign-ins can be caught. Your theme preference (light or dark) is saved in your browser’s local storage. We do not use advertising or cross-site tracking cookies.

9. Your choices

You can access and update your account information in the app, revoke ad platform access at any time, and ask us for a copy of your data or for its correction or deletion by emailing vineet.likhitkar@gmail.com. Requests from people whose details were collected through your lead forms should go to you as the controller; we will help you respond.

10. Children

Adwise is a business tool for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this policy. We will change the date above and, for material changes, notify you by email or in the app before they take effect. See also our Terms of Service.

12. Contact

For any privacy question or request, email vineet.likhitkar@gmail.com.