Privacy policy

adbjørn is operated by Money Trees AS, a Norwegian private limited company (AS), organisation number 938 785 813 (Foretaksregisteret), Solveien 18, 1394 Nesbru, Norway (“we”, “us”). adbjørn puts your Meta, TikTok and Snapchat ad accounts side by side in one dashboard. You can also connect your Shopify store to see its orders and products there.

We are the controller for information about our customers’ users: account holders and team members, including account, billing, support, security and marketing information. For the data in a merchant’s connected ad accounts and store, including data about the store’s customers (shoppers), the merchant is the controller and we process it on the merchant’s instructions under our data processing agreement.

For privacy questions and requests, email [email protected] or write to us at the address above.

About account holders and team members:

• Account: name, email address, team, role and invitations (if a colleague invites you, we receive your email address from them).
• Authentication and account-security information: password hashes, passkey and authenticator settings, recovery records, sign-in sessions and security activity, IP addresses and browser details.
• Billing: if you pay through Stripe, your billing contact, company details, subscription status, invoices and payment references. Stripe handles card details, and we don’t receive them.
• Support and requests: what you send us, privacy and deletion requests, and our replies.
• Marketing choices: whether you agreed to product emails, when, and the wording you agreed to.

From the platforms a merchant connects, which we process for the merchant:

• Ad platforms (Meta, TikTok, Snapchat): account names and identifiers, currencies and time zones, connection credentials, campaign, ad set and ad details, creatives and media (which may show or name people), spend, delivery, engagement and conversion reports.
• Shopify: shop details and contact email; orders, refunds, taxes, products and line items. About shoppers, we import only Shopify’s customer and order IDs and the shipping postcode and country. We do not import shoppers’ names, email addresses, phone numbers or street addresses. If Shopify asks us to erase a shopper’s data, we anonymise that shopper’s orders: we replace their customer and order IDs with random values and delete the shipping postcode, and keep the amounts, products, dates and country, so your totals do not change (the redacted orders drop out of the postcode map). We keep only a one-way coded form of the original IDs, to stop those orders being imported again. We never store shoppers’ email addresses, so a request that names only an email address matches nothing we hold.
• Platform privacy requests: the reference and status of deletion requests a platform sends us.

Customer and order IDs are pseudonymous identifiers. Together with postcodes and purchase history they can relate to an identifiable person, so we treat them as personal data.

You need to give us your name and email address, and billing details for a paid plan, to have an account. Without them we cannot provide the service. We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

For account holders and team members:

• Providing the service and running accounts (sign-in, team access, reports, billing, service and security emails): our and our customer’s legitimate interest in providing the service the business has signed up for and giving its team access. If you contract with us yourself, for example as a sole trader, performance of that contract.
• Security and fault-finding (preventing abuse, investigating problems, keeping logs): our legitimate interest in keeping the service and your accounts safe.
• Support: our legitimate interest in answering our customers. Privacy requests: our legal obligation.
• Marketing email: your consent (see below).
• Accounting: our legal obligation under the Norwegian Bookkeeping Act.
• Legal claims: our legitimate interest in establishing, exercising or defending legal claims.

We process a merchant’s ad and store data, including shopper identifiers, only to provide the service on the merchant’s instructions. The merchant decides the legal basis for that processing.

We never sell personal data. We do not use a merchant’s imported data for our own marketing or to build profiles across merchants.

We send product news and offers only if you agree. The box at signup is unticked, and you can use adbjørn without agreeing. You can withdraw at any time with the unsubscribe link in every marketing email, in Settings, or by emailing [email protected], and we will then stop. We keep a record of when you agreed and the wording you saw. Service emails about your account, security, billing and changes to our terms are not marketing.

A team member connects a platform and picks an account or shop. We receive a connection credential, never your platform password, and import what the platform’s permissions allow. For Shopify we import as much order history as Shopify’s permissions for the app allow. Imported data is stored in our database and used to build your reports.

If you connected Meta, you can remove adbjørn in your Facebook or Meta Business settings, or email us. When Meta sends us a deletion request, we remove the connection and delete the Meta ad data we imported through it. You can check progress at the status link you are given.

Creative previews may load images and video directly from the ad platform, which then receives your browser’s network information. Reports you download are your copies; deleting data in adbjørn does not delete files you have already downloaded.

• Disconnect a platform: its imports stop and we delete the stored connection credential. You can also revoke access in the platform’s own settings.
• Uninstall the Shopify app from your Shopify admin.
• Cancel your subscription in adbjørn.
• Close a user account in Settings: you lose access straight away and are removed from your teams. A team’s only owner must transfer ownership first, or ask us to delete the team.
• Ask for deletion at any time by emailing [email protected].

What we then delete, and when, is in the retention table.

Our database backups expire after no more than 28 days. If we ever restore one, data we have deleted or anonymised is not returned to active use.

Your team members can see your shared connections and reports according to their roles. We use these providers:

• Railway (Railway Corporation, United States) for hosting and database, in its EU region (Netherlands). Railway may access it from the United States to run and support the service.
• Resend (Plus Five Five, Inc., United States) for sending our account and service emails.
• Purelymail (Add Rabbit LLC, United States) for our business and support email, stored in the United States.
• Stripe for card payments. Stripe also uses some data as an independent controller, for example for fraud prevention, under its own privacy policy.

Roles, locations and safeguards are in our provider annex.

The platforms you connect receive our requests and handle data under their own terms. For the Snapchat integration, Snap’s privacy policy is incorporated by reference for Snap’s own handling of information. We may also disclose data where the law requires it, or to a buyer or successor if our business is transferred, under this policy.

Some providers are based in, or process data in, the United States. For Railway and Resend, the transfer relies on the European Commission’s standard contractual clauses in their data processing terms. Email us for a copy of the safeguards that apply.

We protect data with hashed passwords, access controls and encrypted connection credentials. No system is completely risk-free. We notify the competent supervisory authority and affected individuals where required by applicable data-protection law. To report a security vulnerability, email [email protected].

You can ask to access, correct or delete your personal data, restrict its use, or receive data you gave us in a portable format. You can object to processing based on our legitimate interests, and you can always object to marketing. Where we rely on consent, you can withdraw it at any time. Email [email protected].

We respond within one month. If a request is complex, or we receive many, we may extend this by up to two more months and will tell you why. We may ask for reasonable proof of identity or authority. Never send passwords, connection tokens or card details.

If you shop at a store that uses adbjørn, contact that store first; it controls your data and instructs us.

You can complain to Datatilsynet in Norway or to your local data protection authority.

adbjørn sets only cookies that are strictly necessary for sign-in and security, so they need no consent (Norwegian Electronic Communications Act § 3-15). They do not track you across other sites.

• auth_session: keeps you signed in; 24 hours, renewable for up to 30 days.
• session: older sign-in cookie being removed; deleted when you sign in or out.
• auth_signup_grant: signup; thirty minutes.
• auth_ceremony: passkey sign-in or setup; five minutes.
• auth_recovery: account recovery; ten minutes.
• csrf_token: protects forms and requests from forgery; until you close your browser.
• oauth_flow_<provider>: links a platform connection to the browser that started it; ten minutes.
• shopify_pending_install: continues a Shopify installation or sign-in; fifteen minutes.

The dashboard uses local and session storage to remember choices such as date ranges and views. Stripe checkout and ad-platform media previews may set their own cookies under their own policies. You can block or delete cookies in your browser, but blocking the cookies above stops sign-in from working.

We show the effective date and version at the top. We publish updates here and notify you directly where required.