Aad your service

Legal

Privacy Policy

Last updated: 2026-10-30

ad your service ("we", "us") operates ays one, a B2B marketing-intelligence platform used by advertising agencies to analyse the advertising and analytics accounts of their clients. This policy explains what data we collect, how we use it, and the choices you have. It applies to ays one at one.adyourservice.nl (formerly dashboard.adyourservice.nl).

What data we collect

  • Account data — the email and name you use to sign in (handled by our authentication provider, Clerk).
  • OAuth access & refresh tokens you grant when connecting Google (Google Ads, Google Analytics 4, Search Console), Meta (Ads, Facebook Pages, Instagram), LinkedIn Ads, Klaviyo, and Shopify. Tokens are stored encrypted at rest.
  • Aggregated advertising & analytics metrics retrieved through those connections (e.g. spend, impressions, clicks, conversions, keyword and page performance, traffic by channel). We do not collect personally-identifying end-user data from the connected platforms.
  • Usage & audit logs — sign-in events and actions taken within your workspace.

How we use the data

We use connected-account data solely to provide the platform's features to you: displaying dashboards and reports, generating audit findings and AI-assisted recommendations, and (only with your explicit approval) applying changes back to the connected advertising accounts. We do not sell data, and we do not use it for advertising or to train generative AI/ML models.

Google user data — Limited Use disclosure

ad your service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, data obtained from Google Ads, Google Analytics, and Search Console is used only to provide and improve user-facing features within the platform; it is not transferred to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger/acquisition; it is not used for advertising; and it is not used to train generalised AI/ML models. Human access to this data is restricted to what is required for support, security, or to comply with the law, and otherwise occurs only with your consent.

Meta & LinkedIn data

Data received from Meta (Facebook Login, Pages, Instagram, Marketing API) and LinkedIn is processed on behalf of our agency customers under the same principles: used only to provide the platform's features, never sold, and retained only as long as the connection is active or as required by law.

Shopify data

When a merchant connects a Shopify store, we read its orders to report sales per marketing channel. For each order we store only the order ID and number, amounts, currency, financial and fulfilment status, the order date, and the visit source Shopify records for it (UTM parameters, landing page and referrer). We do not request or store customer names, email addresses, phone numbers or addresses. The data is processed on behalf of the merchant, only to show their reports, and is never sold or shared.

When the app is uninstalled, the connection is switched off at once and the store's orders are deleted when Shopify sends its shop deletion request (48 hours later). A customer deletion request from Shopify deletes the orders it lists. Data is encrypted in transit (TLS) and at rest.

Sub-processors

We rely on a small set of infrastructure providers to operate the platform: Fly.io (application hosting), Neon (database), Inngest (background jobs), Clerk (authentication), Anthropic (AI recommendations — connected-account data sent for analysis is not used to train models), and Sentry (error monitoring). Each processes data only to provide its service to us.

Retention & deletion

We retain data for as long as your account and the relevant connection are active. You can request deletion at any time — see our Data Deletion Instructions. On deletion, OAuth tokens are revoked at the source platforms and stored data is removed from active systems within 24 hours and from encrypted backups within 30 days.

Your rights (GDPR)

As we operate from the Netherlands (EU), you have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. To exercise these rights, contact us using the details below.

Contact & Data Protection Officer

ad your service · Nils Kuipers (DPO)
nils@adyourservice.nl
Jan Evertsenstraat 775, 1061 XZ Amsterdam, Netherlands