1. Who we are
Deltaware is an independent Swedish software business. Deltaware develops and operates software products, including Adverge.
For questions about this policy or the handling of personal data, email [email protected].
2. Scope and roles
This policy applies to the Deltaware website and Deltaware-operated products. The exact data-protection role depends on the context.
- Deltaware acts as a controller for its website, company communications, product administration, account security, and legal obligations.
- For customer-controlled campaign and lead data processed through Adverge, Deltaware generally acts on the customer’s instructions as a service provider or processor.
- The customer remains responsible for having a lawful basis for the business and personal data it asks Adverge to process.
3. Data we process
Public website
The public website does not use advertising cookies, analytics scripts, or contact forms. Hosting and security providers may process standard request data such as IP address, browser information, requested page, timestamp, and security signals.
Company communications
If you contact Deltaware, we process the information you provide, such as your name, work email address, organisation, message, and related correspondence.
Adverge accounts and operations
Adverge may process account and business details, authorised-user information, product settings, operational records, campaign information, performance information, support records, and security or audit events.
Meta Platform Data
When an authorised business connects Meta to Adverge, the product may process the data needed for the approved features, including:
- basic user and business identity information returned during authentication;
- business portfolio, Page, advertising account, Instagram account, Pixel, or dataset references;
- campaign configuration, creative references, delivery status, performance metrics, and billing-readiness information;
- lead information submitted through authorised Meta lead forms; and
- permission, connection, security, and operational status needed to provide and protect the integration.
Deltaware does not sell Meta Platform Data. It is used only to provide, secure, support, and improve the authorised product functions.
4. Why we process data
We process personal data only for defined purposes, including to:
- provide, operate, secure, and support Deltaware products;
- authenticate authorised users and maintain business context;
- connect approved provider accounts and display available business assets;
- create or manage authorised advertising operations;
- retrieve and handle authorised lead data;
- provide business-level reporting and operational status;
- detect abuse, diagnose failures, maintain auditability, and protect systems; and
- meet legal, regulatory, and contractual obligations.
5. Legal bases
Where the GDPR applies, Deltaware relies on the legal basis appropriate to the processing: performance of a contract, legitimate interests in operating and securing the business and products, consent where required, and compliance with legal obligations.
Customers using Adverge are responsible for determining and documenting their legal basis for customer-controlled campaign, lead, and communications data.
6. Sharing and service providers
Deltaware may share data only where needed with:
- the customer and its authorised users;
- connected platforms, such as Meta, when carrying out an authorised request;
- carefully selected hosting, infrastructure, security, communications, and support providers acting under appropriate obligations; and
- authorities or professional advisers where required by law or necessary to protect legal rights.
Deltaware does not disclose personal data to unrelated third parties for their own advertising.
7. International transfers
Some providers may process data outside Sweden or the European Economic Area. Where required, Deltaware uses recognised transfer mechanisms and appropriate safeguards, such as adequacy decisions or contractual protections.
8. Retention and deletion
Deltaware keeps data only for as long as reasonably needed for the purpose for which it was collected, the customer relationship, system security, dispute handling, or legal obligations.
When an integration is disconnected, future provider access is stopped. Data already stored is deleted or retained according to the applicable customer instructions, legal requirements, and product retention rules. See the Data Deletion Instructions to request deletion.
9. Security
Deltaware applies technical and organisational safeguards appropriate to the data and risk. These include access controls, tenant separation, protected credential handling, encryption where appropriate, audit records, secure deployment practices, and limited access based on operational need.
No service can guarantee absolute security. Deltaware reviews safeguards as the products and risks evolve.
10. Your rights
Depending on applicable law and the context, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to withdraw consent where processing relies on consent.
Send requests to [email protected]. Deltaware may need to verify your identity or authority. If Deltaware processes the data only for a customer, the request may be referred to that customer.
You may also complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or another competent supervisory authority.
11. Children
Deltaware’s website and products are intended for businesses and authorised adult users. They are not directed to children.
12. Changes to this policy
Deltaware may update this policy when its products, processing, or legal obligations change. The effective date at the top identifies the current version. Material changes will be communicated through an appropriate channel.