Integritetspolicy.

Who is responsible

AdMindra is operated by 3on Reklambyrå & Webbyrå AB, org.nr 556825-0566, Muskötvägen 23, 184 60 Åkersberga, Sweden. We are the controller for the data described here. Reach us at support@admindra.com.

What we collect

From you

• Account and contact details, and the company and website you advertise for.
• Campaign material you create or upload: ad text, logos, product images, approved creatives.
• Support messages.

From Meta, when you connect your accounts

Connecting Facebook and Instagram gives AdMindra access to a limited set of data from Meta, used only to deliver the service to the account it came from:

• Your name, email address and Meta user id, so we know who connected.
• The Facebook Pages and Instagram accounts you manage, so you can choose which one an ad is published from.
• Your Instagram posts, so you can pick an existing post to promote.
• Your ad accounts, and the ads, ad sets and results in them.

From websites you connect

Tracking events from your own site or store — page views, form submissions, add-to-cart and purchase signals — so campaign results can be measured.

From your mailbox, when you connect it

In AI-säljaren and Press you can connect your own mailbox, so that the messages you approve are sent from your own address. Nothing is sent that you have not approved.

• Gmail, by signing in with Google: your email address and Google account id, and permission to create drafts and send messages from your account (the Google scope gmail.compose). AdMindra does not read your inbox or any message in it.
• Outlook and Microsoft 365, by signing in with Microsoft: your email address and Microsoft account id, and permission to create drafts and send messages from your account (Microsoft Graph Mail.ReadWrite and Mail.Send). AdMindra does not read your inbox or any message in it.
• Other email (IMAP/SMTP): your email address, your mail servers and the password you give us, often an app password. With them AdMindra sends your approved messages, saves a copy in your Sent folder, puts drafts in your Drafts folder, and collects the replies to messages sent through AdMindra. To find those replies it reads the sender, subject, date and reply headers of new messages in your inbox, at most a hundred at a time. Only a message that answers one of ours is downloaded and kept; automatic replies, bounces and your own copies are not. Collecting stops 45 days after the last message you sent through AdMindra.

From your contacts, when you import them

In MindraNotes Circles, your own network of people, you can bring in your contacts once, by choice. You see every contact first and choose who comes along; nothing is saved before you confirm.

• Google, by signing in with Google: names, email addresses, phone numbers, organisations and job titles, addresses, web addresses, birthdays, notes and profile photos of your Google contacts (the Google scope contacts.readonly).
• Outlook and Microsoft 365, by signing in with Microsoft: the same details from the Contacts folder of your Microsoft account (Microsoft Graph Contacts.Read).
• A file you export yourself, for example from an iPhone (vCard) or Outlook (CSV).

AdMindra only reads. The access is used once and never stored, there is no ongoing sync, and nothing is ever written to or sent from your Google or Microsoft account. Your Circles belong to you as a person, not to a workspace, and are not shown to anyone else. You can export them or delete all of them at any time in Circles.

When you visit admindra.com

Our public pages count visits so we can see which pages and searches bring people to AdMindra. The site sets no cookie for this and loads no script from Google or any other analytics company, so there is no cookie banner.

• When a page opens, it sends us the page address, the page it came from, its title and your browser's description of itself. Our server also sees your IP address. We keep this with the visit in our own tracking. Visits from search robots and other automated browsers are not counted.
• Our server passes a page view on to Google Analytics: the page, the page it came from, its title, the language and the country, with a visitor number that changes every day and cannot be traced back to you. Your IP address and your browser's description are not sent to Google.
• A link from our pages to sign-up carries which page you came from and, if you came from another site or a campaign, that site's name and the campaign's tags. When the account has been made, we record that it came from there, without your name, email address or company.

When someone opens a personal page

With AI-säljaren, a customer can send a company a link to a page made for it, at admindra.com/till/…. The page is about the company, not the person reading it. It shows the company's name and town and what the sender offers.

• When the page has been open for three seconds, it counts a visit. It also counts clicks on its button. We store the number and the time, never an IP address, and the page sets no cookie.
• If the reader chooses "Kontakta oss inte igen", the sender's addresses for them go on that sender's do-not-contact list. Each address is stored as a one-way code, with only its domain in clear.
• If the button leads to our sign-up and an account is made, the page records that it happened.

In the AdMindra Photos apps and AdMindra Cloud

AdMindra Photos for iPhone and Android shows, organises and backs up the photos and videos on your phone. You sign in with the same AdMindra account as on the web and in AdMindra Node, and you choose one home for everything: a computer or NAS of your own with AdMindra Node, or AdMindra Cloud.

• Your photo library, only after you allow it in the phone's settings: the photos and videos, and what the phone knows about them — date and time, size, favourites, albums and captions, and the location stored in the photo when the camera saved one.
• Labels made on the phone. The app sorts your photos into People, Pets, Children, Places and Travel, and makes them searchable, with the phone's own image analysis (Apple Vision on iPhone, Google ML Kit on Android). It runs on the phone: the photos are not sent anywhere for it. It notices that a photo has a face and how large it is; it does not recognise who anyone is and makes no face templates.
• Place names. To show "Djurgården" rather than coordinates, the app asks the phone's own geocoding service (Apple on iPhone, Google on Android) for the place name of a photo's location. That service receives the coordinates, not the photo. Place names are cached on the phone.
• Device details: a random id the app creates for your phone when it is installed (it is not an advertising id and is not shared), the phone's name and whether it is an iPhone or Android phone. They tell your home which phone a copy came from and let you approve or remove a phone.
• Backups: the photos and videos you choose to back up, with their labels, place names, favourites and albums, go to the home you chose. To your own computer or NAS they go directly over your home network, encrypted, and never pass through AdMindra. To AdMindra Cloud they are stored in the EU (Backblaze B2, Amsterdam), encrypted at rest. AdMindra holds those keys so that cloud features such as search can work, the way iCloud and Google Drive do by default; folders you lock are encrypted end to end, and we cannot read them. People at AdMindra do not look at your photos unless you ask us to for support, it is needed for security, or the law requires it.
• Face ID, Touch ID and fingerprint unlock the app on the phone; the phone checks them, and nothing about them reaches the app or AdMindra.
• The camera is used only to scan the pairing QR code from AdMindra Node.

The apps contain no advertising, no analytics or crash reporting from other companies and no tracking across apps. We never sell photos or what is in them, and they are not used to train AI models.

What we do with it

• Build and show you ad drafts, targeting and budgets for your approval.
• Create paused ads in your ad account after you approve them, and never before.
• Send the messages you approve from the mailbox you connected, put drafts in it, and show you the replies next to the contact they answer.
• Report back what your advertising cost and produced.
• Provide support, keep the service secure, and meet legal obligations.

We do not sell data. We do not use one customer's data to serve another. Data obtained from Meta is used only for the account that authorised it.

AI processing

Ad text, images and analyses are generated with AI models run by third-party providers. Campaign material and company information may be sent to them for that purpose. Customer data is not used to train those models.

A reply collected from a connected mailbox may be sent to an AI provider to suggest an answer for you to read. Nothing is answered automatically.

Who else sees it

Only processors needed to run the service: hosting and database, AI providers for generation, the advertising platforms you connected, and Google Analytics for the page views of our public pages described above. Each processes on our instructions under a data processing agreement. The messages you send go through the mail service of the mailbox you connected: Google, Microsoft or your own mail host.

How long we keep it

• Account and campaign data: while the account is active, and 90 days after it closes. When you delete your account yourself, it is deleted at once instead (see Your rights).
• Meta access tokens: until you disconnect or remove the app, then deleted immediately.
• Mailbox access — the Google or Microsoft tokens, or the password for other email: kept encrypted (AES-256-GCM) until you disconnect the mailbox, leave the workspace or the workspace is deleted, then deleted immediately.
• Replies collected from your mailbox: as account data, with the contact they answer.
• Contacts you import into Circles: until you remove them or delete Circles. A list fetched from Google or Microsoft that you have not confirmed is deleted after one hour.
• Tracking events: 24 months.
• Photos, videos and their labels in AdMindra Cloud: until you delete them, or your account. A deleted file goes to Recently deleted for 30 days. Our backup protection (a 30-day lock that stops anyone, attackers included, from erasing a copy early) keeps hidden copies for up to 30 days after that; they cannot be opened, and are then removed for good.
• Photos on your own computer, disk or NAS are yours and stay there; AdMindra never deletes them remotely.
• Invoices and accounting records: seven years, as Swedish bookkeeping law requires.

Data from Google and Microsoft accounts

AdMindra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The same applies to what we receive from Microsoft: it is used only to send the messages you approve, to show you their result, and to bring the contacts you choose into your own Circles. It is not used for advertising, not sold, not used to train AI models, and not read by people at AdMindra unless you ask us to for support, it is needed for security, or the law requires it.

WordPress plugins

AdMindra MCP sends nothing to AdMindra. It lets an AI service that you choose and connect yourself (for example ChatGPT by OpenAI or Claude by Anthropic) read from your own WordPress site; it cannot change the site. What that service receives — the results of the tools it calls, such as your WordPress and PHP versions, your plugins and themes, the pages it checks and the source files it reads — is processed by its provider under the provider's own terms and privacy policy, not by us. What the plugin stores stays in your own database.

AdMindra Notice Inbox sends nothing to AdMindra and makes no external requests. To give each person an inbox, it keeps a copy of the admin notices it folds away (their text and markup, when they were seen and whether they were read) in that person's own user data in your WordPress database, for at most 30 days and at most 50 notices. Nobody else on the site can see another person's inbox. Deleting the plugin removes all of it.

AdMindra MCP Maintenance, its add-on, is downloaded inside AdMindra and connects the site to your workspace. It sends us the pairing code, the site's address and the WordPress, plugin and add-on versions when you connect it, and the site's id, those versions and the time when it asks what it may do — at most every 12 hours, and before a change when the last answer is older. We use that to answer, to show the site under WordPress in AdMindra and to deliver the add-on's updates. It never sends us file or page contents, users, or what the assistant reads or changes.

AdMindra Site Care and AdMindra Tracking for WooCommerce send data to AdMindra only after a site administrator connects them to AdMindra and switches them on. Each plugin's readme lists exactly what is sent, and we process it as described in this policy.

AI assistants you connect to AdMindra

You can connect an AI assistant that you choose yourself, such as ChatGPT by OpenAI or Claude by Anthropic, to your AdMindra workspace. You do it by signing in to AdMindra from the assistant, choosing one company and ticking what the assistant may do. Only an owner or admin of that company can connect one. The assistant then gets a connection for that one company and those things only; it never sees another company's data, and it can never send an email, publish anything or approve anything — a person does that in AdMindra.

What the assistant receives is the result of the tools it calls, for example your sales missions, the contacts and drafts in them and the growth opportunities waiting for review. That is processed by the assistant's provider under the provider's own terms and privacy policy, not by us. We store a hash of the connection (never the connection itself), its name, what it may do, who made it and when it was last used, and we log each call. You can see and revoke every connection under Inställningar → AI-agenter; a revoked connection stops working at once.

Your rights

You may request access to your data, correction, erasure, restriction, portability, and object to processing. Write to support@admindra.com and we will answer within 30 days. To delete data connected to Meta, see Delete your data.

You can delete the account you use in AdMindra Photos, AdMindra Node and AdMindra Create, with everything stored with it, yourself at admindra.com/account/delete; the Photos apps open the same page from Settings › Delete account. You sign in again to confirm. The account, its workspaces and files, your photos in AdMindra Cloud and your devices' connections are deleted at once, and you get a confirmation code. If you signed in with Apple, we also revoke AdMindra's access to your Apple ID. An account in the AdMindra advertising app or MindraNotes is separate: to delete it, write to support@admindra.com.

You may also complain to Integritetsskyddsmyndigheten (IMY), the Swedish data protection authority.

Where data is stored

Data is stored within the EU/EEA where the service allows it. Where a processor operates outside the EEA, the transfer relies on the European Commission's standard contractual clauses.