What we collect, and what we do with it.

Who this covers

This policy covers two things: visitors to adverto.biz, and clients whose accounts we work in. Adverto is the data controller for both. If you have a question about anything here, use the contact form and we’ll answer within one business day.

Visitors to this site

Contact form. If you send the form, we receive your name, email address, company (optional), what you need help with, and your message. The form also records the IP address the request came from, which we use to block spam and rate-limit abuse. The message lands in our mailbox at adverto.biz, hosted on Google Workspace. We keep it as long as the conversation or the engagement it leads to is active, then delete it on request or when it’s no longer needed.

Analytics. We use Google Analytics 4, loaded through Google Tag Manager, to count page views and form submissions. It sets cookies in your browser and sends usage data to Google, which may process it outside the EU. Google Analytics 4 doesn’t log or store IP addresses. We also use Vercel Web Analytics, which is cookieless and doesn’t identify individual visitors. You can block analytics with a browser setting or extension and the site works exactly the same.

Hosting. The site is served by Vercel. Vercel’s servers log requests (IP address, URL, user agent) for security and operations, for a short period. Fonts are served from our own domain, so no request goes to a font provider.

What we don’t do. No advertising cookies, no retargeting pixels, no selling or sharing of visitor data, no newsletter you didn’t ask for.

Clients: access to your accounts

During an engagement you grant Adverto access to the platforms the work needs: Google Ads, Google Analytics, Google Tag Manager, Google Search Console, Meta, LinkedIn, and similar. Access is granted by you, at the role you choose, and you can revoke it at any time from the platform’s own settings.

We use that access for one purpose: delivering the service described in your agreement. Reporting, campaign management, budget pacing, audits, tracking setup. Nothing else.

Data from Google APIs

Some of our reporting and campaign-management tooling connects to client accounts through the official Google Ads API and Google Analytics APIs, using Google’s OAuth consent flow or a client account linked to Adverto’s Google Ads manager account. Through those APIs we read campaign, ad group, keyword, conversion and cost data, and, where the engagement includes it, create or change campaigns, ads, budgets and bids.

Adverto’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. In plain terms:

• Google account data is used only to provide and improve the service you asked for.
• It’s never sold, and never shared with third parties except where needed to deliver the service (for example, a reporting dashboard you’ve asked us to build) or where the law requires it.
• It’s never used for advertising outside your own account, and never used to train AI or machine-learning models.
• Nobody at Adverto reads it except to do the work, resolve a problem, or comply with the law.

Data pulled through these APIs is stored in the reporting tools we run for you (spreadsheets and dashboards in Adverto’s Google Workspace and Google Cloud accounts) and deleted when the engagement ends, unless you ask us to hand it over or keep it. To revoke API access, remove Adverto from your Google Ads account or manager link, or revoke the app at myaccount.google.com/permissions.

Where data lives and who sees it

Adverto works with clients in EMEA and the U.S. and uses Google Workspace, Google Cloud and Vercel, so data may be processed in the EU, the UK and the United States under those providers’ standard contractual terms. Where an engagement involves personal data of people in the EU or UK, we sign a data-processing agreement with you as part of the contract.

We don’t use subcontractors on client data. The person you speak to is the person in the accounts.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, or object to how it’s used. Send the request through the contact form and we’ll act on it within 30 days. If you’re in the EU or UK you also have the right to complain to your local data-protection authority.

Changes

If this policy changes, the date at the top changes with it. Anything material gets a note here explaining what moved.