Privacy policy

devdash.co is a brochure site. We do not run advertising or analytics trackers on it and we do not set cookies for tracking. Our host records standard server request logs, including IP address and user agent, for security and operational purposes, and those logs are deleted on a rolling basis.

If you email us at contact@devdash.co we hold that message and your contact details for as long as needed to answer it and to keep a record of the business relationship. The legal basis is our legitimate interest in responding to enquiries.

We manage Google Ads accounts for our own products and for clients who have linked their account to our manager account. Through the Google Ads API we read campaign, ad, keyword and performance data from those accounts, and we write campaign changes back to them.

• We access an account only where we own it or the owner has linked it to our manager account and asked us to manage it.
• The data is used solely to report on and manage that same account. It is never sold, brokered, shared with third parties, or pooled into a cross-advertiser dataset or benchmark.
• It is stored on infrastructure devdash AB controls, hosted in the EU, and access is limited to the devdash staff who work on the account.
• Credentials and API tokens are kept in our internal secret vault, never in source control.
• When an account leaves our management we remove the manager link, and we delete the data we hold for it on request.

Google's own handling of this data is governed by the Google Privacy Policy. See also our Google Ads API page.

When we build or operate a product for a client, any personal data in that product belongs to the client, who is the controller. We act as a processor under a written agreement, use the data only to deliver the agreed work, and return or delete it when the engagement ends.

We use a small number of service providers to run our own systems — cloud hosting, email, and the platform providers a given project depends on. They process data only on our instructions and under agreements that meet GDPR requirements. We can name the providers relevant to a specific engagement on request.

Under the GDPR you may request access to the personal data we hold about you, and its correction, deletion, restriction or portability, and you may object to processing based on legitimate interest. Write to contact@devdash.co and we will answer within one month. You also have the right to complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY).