AdWisp Privacy Policy
Last updated: 5.10.2026
AdWisp gives you a health score and three suggested actions for your Meta ads. This policy explains what data AdWisp handles, why, and what you can do about it.
Who is responsible for your data
AdWisp is run by Niko Kvarnström, a private individual based in Finland. He is the data controller for the personal data described here.
Contact: niko.kvarnstrom@gmail.com
What we collect and why
Early access email. When you join early access, we store your email address to tell you when your spot opens and about the launch offer. We keep it until we have sent your invite after launch, or until you ask us to remove it. Legal basis: your consent, which you can withdraw any time by emailing us.
Your account. When you sign in, we store your email address, and your name if you sign in with Google. We use it to run your account. Legal basis: providing the service you asked for.
Your Meta ad data. When you connect Meta, we get read-only access (the ads_read permission). We read your ad account names, IDs, currency and status, and performance numbers such as spend, impressions, clicks, results and cost per result, for the account and its ad sets over the last 7 or 30 days. We keep only the latest check for each ad account. We cannot create, edit, pause or delete anything in your Meta account. Legal basis: providing the service.
Your Meta connection. We store the access key Meta gives us, encrypted, so AdWisp can read your numbers when you ask for a check. It is deleted when you disconnect Meta or remove the ad account in AdWisp.
Your numbers. The client value and close rate you enter, used to set your personal target, and which suggested actions you have marked as done. Legal basis: providing the service.
Cookies and browser storage
Some small files are needed for the site to work, and one is optional.
| Name | What it does | Needed? |
|---|---|---|
| __dpl | Set by our hosting to send you to the current version of the site | Yes, always on |
| Sign-in session (browser storage) | Keeps you signed in to the app | Yes, app only |
| Selected ad account (browser storage) | Remembers which ad account you last viewed | Yes, app only |
| adwisp-consent (browser storage) | Remembers whether you accepted or declined visit statistics, for up to 12 months | Yes, always on |
| session-id | Counts visits and page views so we can see how many people visit. The data goes to our hosting provider's statistics service, Tinybird, in the EU (Frankfurt) | No. Only set if you click Accept |
Legal basis for visit statistics: your consent. You can change your choice any time with "Cookie settings" at the bottom of the page.
What we don't do
We don't sell your data. We don't use it for advertising. We don't use it to train AI models, and no AI system reads your ad data: scores and suggestions come from fixed rules. We never change anything in your Meta account.
Who helps us run AdWisp
- Lovable: website and app hosting.
- Supabase: database and sign-in. Your stored data is kept in the EU (Ireland).
- Google: sign-in, if you choose "Continue with Google".
- Meta: the source of your ad data, under Meta's own terms.
- Tinybird: visit statistics for our hosting provider, only if you accept. Stored in the EU (Frankfurt).
Website files are delivered through global networks so pages load quickly, but your stored data stays in the EU. Where a provider such as Google processes data outside the EU, it does so under its own safeguards for international transfers.
How long we keep it
- Early access email: until your invite is sent after launch, or until you ask us to remove it.
- Account, your numbers and checks: while your account exists. Deleted within 30 days of your request.
- Meta connection: until you disconnect it or remove the ad account.
Your rights
You can ask to see the data we hold about you, correct it, delete it, get a copy, or object to or limit how we use it. Email niko.kvarnstrom@gmail.com and we will reply within 30 days.
You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Deleting your data
- Disconnect Meta: use the menu in AdWisp. You can also remove AdWisp in your Facebook settings under Business Integrations.
- Delete everything: email niko.kvarnstrom@gmail.com from the address you signed in with. We delete your account, numbers, checks and Meta connection within 30 days and confirm by email.
Security
Your Meta access key is stored encrypted and is only read on our server. Database rules make sure each account can only see its own data.
Changes
If this policy changes, we update the date at the top. If a change matters for how we use your data, we email signed-in users.