Last updated: 14 September 2026
This Privacy Policy explains how SparkIT AB, the company operating Adprove (“Adprove”, “SparkIT”, “we”, “us” or “our”), collects, uses, stores and otherwise processes personal data when you visit adprove.io, create or use an Adprove account, use our services, communicate with us, or otherwise interact with Adprove.
We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
1. Who We Are
Adprove is operated by:
SparkIT AB
Company registration number: 559472-6407
VAT number: SE559472640701
C/o Apartment86
Rutger Fuchsgatan 11
116 67 Stockholm
Sweden
For privacy and data protection matters: privacy@sparkit.se
For general customer support: support@sparkit.se
2. Scope of This Privacy Policy
This Privacy Policy applies to personal data processed in connection with Adprove, including our website, accounts, Workspaces, preview pages, APIs and related services.
It applies to users of Adprove, visitors to our website, customer representatives, invited team members, collaborators and other individuals whose personal data we process in our capacity as a data controller.
Customer Content uploaded to Adprove may also contain personal data relating to other individuals. Our role in relation to such data is explained below.
3. Our Role as Data Controller and Data Processor
SparkIT may process personal data in different capacities depending on the circumstances.
For personal data that we collect and use for our own purposes — for example account administration, billing, security, customer communication and operation of our website — SparkIT AB acts as the data controller.
When a customer uploads or otherwise submits personal data to Adprove and SparkIT processes that personal data solely on the customer’s behalf in providing the Adprove service, the customer generally acts as the data controller and SparkIT AB acts as the data processor.
In those circumstances, our processing is governed by our Data Processing Agreement (“DPA”) and the customer’s documented instructions.
The customer is responsible for ensuring that it has an appropriate legal basis for personal data that it uploads, shares or otherwise processes through Adprove.
4. Personal Data We Collect
Account and Profile Information
When you create or use an Adprove account, we may collect information such as:
We use this information to create and manage your account, authenticate you, provide the service and communicate with you.
Subscription and Billing Information
If you activate a paid Adprove subscription, we may process information relating to your subscription and payments, such as:
Payment information may be processed directly by our payment service providers. Adprove does not necessarily receive or store complete payment card details.
Usage and Technical Information
When you access Adprove, we may automatically collect technical and usage information such as:
We may use this information to operate, secure, troubleshoot and improve Adprove.
Communications
If you contact us, we may process your name, email address and the contents of your communication, together with other information necessary to respond to your request.
Customer Content
Adprove allows customers to upload, store, organize, review and share digital assets and related information.
Customer Content may include:
Customer Content may contain personal data. Where we process personal data contained in Customer Content solely on behalf of a customer, SparkIT generally acts as a data processor rather than the data controller.
5. How We Use Personal Data
Depending on your relationship with Adprove, we may process personal data to:
We do not use Customer Content for purposes unrelated to providing and securing the Adprove service unless required by law or otherwise agreed with the customer.
6. Legal Bases for Processing
Performance of a Contract
We process personal data when necessary to provide Adprove and fulfil our contractual obligations, including creating and maintaining accounts, providing Workspaces and administering subscriptions.
Legal Obligation
We may process and retain personal data where necessary to comply with legal obligations, including accounting, taxation and other regulatory requirements.
Legitimate Interests
We may process personal data where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.
These interests may include operating and improving Adprove, maintaining service security, preventing fraud and misuse, providing customer support, understanding how our services are used, and protecting our legal rights.
Consent
Where required, we may rely on your consent for a specific processing activity. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Customer Content
Customers retain ownership of the Customer Content they upload to Adprove.
We process Customer Content only to the extent necessary to provide, maintain, secure and support the Adprove service, in accordance with our Terms of Use, our DPA where applicable, and applicable law.
Customers are responsible for ensuring that they have the necessary rights and legal basis to upload and process personal data through Adprove.
If you believe that personal data relating to you has been uploaded to Adprove by one of our customers, the customer that uploaded or controls that information may be the appropriate data controller. In such cases, we may refer your request to the relevant customer or assist the customer in responding to your request where required.
8. We Do Not Sell Personal Data
We do not sell your personal data.
We do not sell Customer Content or information about customer projects to advertisers or other third parties. We also do not use Customer Content for third-party advertising.
9. Cookies and Analytics
Adprove may use cookies and similar technologies that are necessary for the operation, security and functionality of our website and services.
We may also use analytics technologies to understand how our website and services are used.
Where required by applicable law, non-essential cookies and similar technologies will only be used after obtaining the appropriate consent.
You can manage applicable cookie preferences through the cookie controls made available on our website.
Further information about the cookies and similar technologies used by Adprove may be provided in our Cookie Policy or cookie settings.
10. Marketing Communications
We may send information about Adprove, including product updates, new features and other relevant communications, where permitted by applicable law.
Where marketing communications are based on your consent, you may withdraw that consent at any time.
You can unsubscribe from promotional email communications by using the unsubscribe link included in the message or by contacting us.
Unsubscribing from marketing communications does not prevent us from sending necessary transactional or service-related communications, such as security notifications, billing information or important changes relating to your account.
11. Service Providers and Subprocessors
We use third-party service providers to help us operate Adprove. Depending on the services used, these providers may process personal data for purposes such as:
Where a service provider processes personal data on our behalf, we take appropriate steps to ensure that the processing is governed by appropriate contractual and data protection obligations. Where SparkIT acts as a data processor for a customer, the use of subprocessors is governed by our DPA.
12. International Data Transfers
We aim to process personal data in accordance with the requirements of the GDPR.
Some of our service providers may process personal data outside Sweden or the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we will use a lawful transfer mechanism where required, such as an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses (“SCCs”), or another lawful transfer mechanism available under applicable data protection law.
Where required, supplementary safeguards may also be implemented.
Information about applicable safeguards may be requested by contacting privacy@sparkit.se.
13. Data Security
We take the security of personal data seriously.
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access and other unlawful processing.
Our security measures are reviewed and adapted where appropriate based on the nature of the processing, available technology and relevant risks.
Access to personal data is limited to persons and service providers that require access for legitimate purposes and is subject to appropriate confidentiality and security obligations.
However, no internet-based service or method of electronic storage can be guaranteed to be completely secure.
14. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, to provide our services, or as required by applicable law.
Different categories of information may therefore have different retention periods.
Account information may be retained while an account remains active and for an appropriate period thereafter where necessary for legitimate business, security or legal purposes.
Billing, transaction and accounting information may be retained for the period required under applicable accounting, taxation and other legal requirements.
Security and technical logs may be retained for an appropriate period based on security, troubleshooting and fraud-prevention needs.
Uploaded Files
When a paid Adprove subscription ends or an Adprove free trial expires, uploaded files associated with the affected Workspace are retained for 90 days.
After that 90-day period, those uploaded files are permanently deleted and cannot be recovered.
Deletion of uploaded files does not necessarily result in deletion of all account information, Workspace structure, folders, billing records or other information, which may be subject to separate retention periods.
Where SparkIT processes personal data as a processor on behalf of a customer, retention and deletion are also governed by our DPA and the customer’s lawful documented instructions.
15. Your Data Protection Rights
Right of Access
You may request confirmation as to whether we process personal data about you and request access to that personal data.
Right to Rectification
You may request that inaccurate personal data about you be corrected and that incomplete information be completed.
Right to Erasure
You may request deletion of personal data relating to you in circumstances where the GDPR provides a right to erasure. The right to erasure is not absolute. We may retain information where processing remains necessary, for example to comply with a legal obligation or establish, exercise or defend legal claims.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances.
Right to Object
Where processing is based on legitimate interests, you may have the right to object to that processing. You may object at any time to processing of your personal data for direct marketing purposes.
Right to Data Portability
Where the requirements of the GDPR are met, you may request personal data that you have provided to us in a structured, commonly used and machine-readable format and may have the right to transmit that information to another controller.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect processing lawfully carried out before the withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
16. Exercising Your Rights
To exercise your data protection rights or ask a question about our processing of your personal data, contact privacy@sparkit.se.
We may need to request additional information where reasonably necessary to verify your identity before responding to a request.
We will respond to valid requests within the time limits required by applicable data protection law.
Where SparkIT processes personal data solely on behalf of an Adprove customer, we may refer your request to that customer or assist the customer in responding to the request.
17. Disclosure Required by Law and Protection of Adprove
We may disclose personal data where we reasonably believe disclosure is necessary to:
Any such disclosure will be limited to what is appropriate and permitted by applicable law.
18. Business Transfers
If SparkIT is involved in a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, personal data may be disclosed or transferred as part of that transaction where permitted by law.
We will take appropriate steps to protect personal data in connection with such transactions.
19. Children's Privacy
Adprove is a business service and is not intended for children.
We do not knowingly offer Adprove directly to children or intentionally collect personal data from children for the purpose of providing individual consumer services to them.
If you believe that a child has provided personal data to us inappropriately, please contact privacy@sparkit.se.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to Adprove, our processing activities, applicable law or regulatory requirements.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.
Where changes are material, we may provide additional notice where appropriate or required by law.
21. Contact Us
If you have questions about this Privacy Policy, how we process your personal data, or wish to exercise your data protection rights, please contact us at:
SparkIT AB
Company registration number: 559472-6407
VAT number: SE559472640701
C/o Apartment86
Rutger Fuchsgatan 11
116 67 Stockholm
Sweden
Privacy: privacy@sparkit.se
General support: support@sparkit.se
For privacy and data protection matters, including requests for access, correction, deletion, restriction, portability or objections to processing, please contact privacy@sparkit.se.
