Privacy Policy

1. Data We Collect

We collect personal data including your name, email address, social media account information (via OAuth with your consent), financial information (processed by Stripe), and usage data (cookies, IP addresses, device information).

2. How We Use Your Data

We use your data to:

• Provide the Adswish marketplace and escrow services
• Track attribution for affiliate and hybrid campaigns
• Process payments and payouts via Stripe
• Prevent fraud and enforce platform policies
• Send transactional emails and notifications

3. Cookie Consent

We use cookies for attribution tracking and analytics. Attribution cookies are dropped by the business's own tracking setup (the Chrome extension, the desktop tracker, or a legacy installed script) and only after explicit user consent — if consent is not given, tracking runs in analytics-only mode. Consent is logged with timestamp, consent version, IP hash, and user agent.

4. Data Controller & Processor

The business is the data controller for their own site. Adswish is the processor and provides the tracking mechanism but does not assume legal coverage for the business's consent flow.

5. Data Retention

Personal data is retained for 7 years after account closure for financial record-keeping, then anonymized. Marketing/analytics data is retained for 2 years. Clicks log data older than 90 days is archived to cold storage and dropped from the active database.

6. GDPR Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (“right to be forgotten”)
• Export your data (Article 20) in machine-readable JSON format
• Object to processing of your data

To exercise these rights, contact privacy@adswish.com.

7. Subprocessors

We use third-party subprocessors to provide our services. The full list is published at /legal/subprocessors and updated within 30 days of adding any new vendor.

8. Google Ads & OAuth Data

When you connect Google Ads through the platform's integrations, you grant Adswish OAuth access to your Google Ads account. We use that access only to list, create, and manage campaigns you choose to amplify, and to read performance data for your dashboards. Google OAuth tokens are stored encrypted and are never exposed to other users; you can disconnect the integration at any time, which revokes our access. Adswish never shares your Google Ads data with third parties without your consent, and paid (Google Ads) data is reported separately from organic creator traffic.

9. Session & Inactivity Data

For security, sessions end automatically after a configurable period of inactivity (1–30 minutes, default 1 minute) and when you leave the dashboard via the browser back button. No personal data is transmitted to us by these timeouts; they simply end the authenticated session on your device.

10. Contact

For privacy questions or data requests, contact privacy@adswish.com.