AdMindra

Privacy policy.

How AdMindra handles project data, campaign material, tracking events, connected mailboxes and support requests.

Who is responsible

AdMindra is operated by 3on Reklambyrå & Webbyrå AB, org.nr 556825-0566, Muskötvägen 23, 184 60 Åkersberga, Sweden. We are the controller for the data described here. Reach us at support@admindra.com.

What we collect

From you

  • Account and contact details, and the company and website you advertise for.
  • Campaign material you create or upload: ad text, logos, product images, approved creatives.
  • Support messages.

From Meta, when you connect your accounts

Connecting Facebook and Instagram gives AdMindra access to a limited set of data from Meta, used only to deliver the service to the account it came from:

  • Your name, email address and Meta user id, so we know who connected.
  • The Facebook Pages and Instagram accounts you manage, so you can choose which one an ad is published from.
  • Your Instagram posts, so you can pick an existing post to promote.
  • Your ad accounts, and the ads, ad sets and results in them.

From websites you connect

Tracking events from your own site or store — page views, form submissions, add-to-cart and purchase signals — so campaign results can be measured.

From your mailbox, when you connect it

In AI-säljaren and Press you can connect your own mailbox, so that the messages you approve are sent from your own address. Nothing is sent that you have not approved.

  • Gmail, by signing in with Google: your email address and Google account id, and permission to create drafts and send messages from your account (the Google scope gmail.compose). AdMindra does not read your inbox or any message in it.
  • Outlook and Microsoft 365, by signing in with Microsoft: your email address and Microsoft account id, and permission to create drafts and send messages from your account (Microsoft Graph Mail.ReadWrite and Mail.Send). AdMindra does not read your inbox or any message in it.
  • Other email (IMAP/SMTP): your email address, your mail servers and the password you give us, often an app password. With them AdMindra sends your approved messages, saves a copy in your Sent folder, puts drafts in your Drafts folder, and collects the replies to messages sent through AdMindra. To find those replies it reads the sender, subject, date and reply headers of new messages in your inbox, at most a hundred at a time. Only a message that answers one of ours is downloaded and kept; automatic replies, bounces and your own copies are not. Collecting stops 45 days after the last message you sent through AdMindra.

From your contacts, when you import them

In MindraNotes Circles, your own network of people, you can bring in your contacts once, by choice. You see every contact first and choose who comes along; nothing is saved before you confirm.

  • Google, by signing in with Google: names, email addresses, phone numbers, organisations and job titles, addresses, web addresses, birthdays, notes and profile photos of your Google contacts (the Google scope contacts.readonly).
  • Outlook and Microsoft 365, by signing in with Microsoft: the same details from the Contacts folder of your Microsoft account (Microsoft Graph Contacts.Read).
  • A file you export yourself, for example from an iPhone (vCard) or Outlook (CSV).

AdMindra only reads. The access is used once and never stored, there is no ongoing sync, and nothing is ever written to or sent from your Google or Microsoft account. Your Circles belong to you as a person, not to a workspace, and are not shown to anyone else. You can export them or delete all of them at any time in Circles.

When someone opens a personal page

With AI-säljaren, a customer can send a company a link to a page made for it, at admindra.com/till/…. The page is about the company, not the person reading it. It shows the company's name and town and what the sender offers.

  • When the page has been open for three seconds, it counts a visit. It also counts clicks on its button. We store the number and the time, never an IP address, and the page sets no cookie.
  • If the reader chooses "Kontakta oss inte igen", the sender's addresses for them go on that sender's do-not-contact list. Each address is stored as a one-way code, with only its domain in clear.
  • If the button leads to our sign-up and an account is made, the page records that it happened.

What we do with it

  • Build and show you ad drafts, targeting and budgets for your approval.
  • Create paused ads in your ad account after you approve them, and never before.
  • Send the messages you approve from the mailbox you connected, put drafts in it, and show you the replies next to the contact they answer.
  • Report back what your advertising cost and produced.
  • Provide support, keep the service secure, and meet legal obligations.

We do not sell data. We do not use one customer's data to serve another. Data obtained from Meta is used only for the account that authorised it.

AI processing

Ad text, images and analyses are generated with AI models run by third-party providers. Campaign material and company information may be sent to them for that purpose. Customer data is not used to train those models.

A reply collected from a connected mailbox may be sent to an AI provider to suggest an answer for you to read. Nothing is answered automatically.

Who else sees it

Only processors needed to run the service: hosting and database, AI providers for generation, and the advertising platforms you connected. Each processes on our instructions under a data processing agreement. The messages you send go through the mail service of the mailbox you connected: Google, Microsoft or your own mail host.

How long we keep it

  • Account and campaign data: while the account is active, and 90 days after it closes.
  • Meta access tokens: until you disconnect or remove the app, then deleted immediately.
  • Mailbox access — the Google or Microsoft tokens, or the password for other email: kept encrypted (AES-256-GCM) until you disconnect the mailbox, leave the workspace or the workspace is deleted, then deleted immediately.
  • Replies collected from your mailbox: as account data, with the contact they answer.
  • Contacts you import into Circles: until you remove them or delete Circles. A list fetched from Google or Microsoft that you have not confirmed is deleted after one hour.
  • Tracking events: 24 months.
  • Invoices and accounting records: seven years, as Swedish bookkeeping law requires.

Data from Google and Microsoft accounts

AdMindra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The same applies to what we receive from Microsoft: it is used only to send the messages you approve, to show you their result, and to bring the contacts you choose into your own Circles. It is not used for advertising, not sold, not used to train AI models, and not read by people at AdMindra unless you ask us to for support, it is needed for security, or the law requires it.

WordPress plugins

AdMindra MCP sends nothing to AdMindra. It lets an AI service that you choose and connect yourself (for example ChatGPT by OpenAI or Claude by Anthropic) read from your own WordPress site; it cannot change the site. What that service receives — the results of the tools it calls, such as your WordPress and PHP versions, your plugins and themes, the pages it checks and the source files it reads — is processed by its provider under the provider's own terms and privacy policy, not by us. What the plugin stores stays in your own database.

AdMindra Notice Inbox sends nothing to AdMindra and makes no external requests. To give each person an inbox, it keeps a copy of the admin notices it folds away (their text and markup, when they were seen and whether they were read) in that person's own user data in your WordPress database, for at most 30 days and at most 50 notices. Nobody else on the site can see another person's inbox. Deleting the plugin removes all of it.

AdMindra MCP Maintenance, its add-on, is downloaded inside AdMindra and connects the site to your workspace. It sends us the pairing code, the site's address and the WordPress, plugin and add-on versions when you connect it, and the site's id, those versions and the time when it asks what it may do — at most every 12 hours, and before a change when the last answer is older. We use that to answer, to show the site under WordPress in AdMindra and to deliver the add-on's updates. It never sends us file or page contents, users, or what the assistant reads or changes.

AdMindra Site Care and AdMindra Tracking for WooCommerce send data to AdMindra only after a site administrator connects them to AdMindra and switches them on. Each plugin's readme lists exactly what is sent, and we process it as described in this policy.

Your rights

You may request access to your data, correction, erasure, restriction, portability, and object to processing. Write to support@admindra.com and we will answer within 30 days. To delete data connected to Meta, see Delete your data.

You may also complain to Integritetsskyddsmyndigheten (IMY), the Swedish data protection authority.

Where data is stored

Data is stored within the EU/EEA where the service allows it. Where a processor operates outside the EEA, the transfer relies on the European Commission's standard contractual clauses.