Privacy Policy
Effective from 1 October 2026.
1. Who is responsible
Adlounge AB, Swedish company registration number 556791-4063, Torkhusgatan 9, 120 65 Stockholm, Sweden, is the controller for the processing described here. Send questions about personal data to hello@greatnative.com.
2. Whose data we process
- Customers: advertisers, agencies and publishers, and their contact persons.
- Visitors to greatnative.com.
- Readers of publishers' websites and apps where our widget is shown (see section 5).
3. What data and why
| Purpose | Data | Legal basis |
|---|---|---|
| Create and manage accounts | Name, email, company, country, role, login details | Contract |
| Invoice advertisers | Company name, address, company or VAT number, payments | Contract, legal obligation (bookkeeping) |
| Pay publishers and issue self-billing invoices | Name, tax ID (for individuals, e.g. personal identity number), bank or payment account details, earnings | Contract, legal obligation (bookkeeping and tax) |
| Review websites and ads | Web address, content, contact details | Legitimate interest: keeping the network trustworthy |
| Support and communication | Emails and messages | Contract, legitimate interest |
| Security and fraud prevention | IP address, login logs, technical information | Legitimate interest: protecting the service, customers and publishers |
| Service news to customers | Legitimate interest; you can opt out at any time | |
| Statistics for greatnative.com | Pages visited, approximate country, browser, language choice | Legitimate interest: improving the website |
Filtering of invalid traffic is partly automated. If such a decision affects your earnings or your account, you can ask for a person to review it.
4. Where the data comes from
You provide most of the data yourself. Logs and statistics are created when the service is used. If you sign in with Google, we receive your name and email address from Google. When you enter a web address, we fetch public information from the page, such as its title, description, image and language.
5. Measurement on publishers' websites
When our widget is shown on a publisher's website or in an app, we collect data to count impressions and clicks, calculate cost and earnings, and detect invalid traffic.
- What: which ad or article was shown or clicked, whether it was visible on screen and for how long, the page it appeared on, device type, language and approximate country.
- Identifiers: the IP address is converted into a hashed identifier and is not stored in plain text. A temporary session identifier is used so that the same impression is not counted more than once.
- What we do not do: we do not build profiles of visitors across websites, and we do not sell personal data.
- Legal basis: legitimate interest in measuring, invoicing correctly and preventing fraud. Where the law requires consent for storage in the browser, the publisher obtains it.
6. Recipients and service providers
We share data with providers that help us run the service. They may only use the data on our behalf.
| Provider | Purpose |
|---|---|
| Lovable | Hosting of the website and platform |
| Supabase | Database, storage and sign-in |
| Stripe | Card payments and payouts |
| PayPal | Payments and payouts |
| Wise | Payouts, when that payment method is enabled |
| Sign-in with Google | |
| Lovable Email | Sending email |
| AI service via Lovable | Translation and ad suggestions; receives ad copy and public website text, not data about readers |
Advertisers receive aggregated statistics about their campaigns, and publishers about their websites. Neither receives data that identifies individual readers. We may also disclose data when required by law, for example to the Swedish Tax Agency.
7. Transfers outside the EU/EEA
Some providers may process data outside the EU/EEA, for example in the United States. In that case we make sure the transfer is protected by the European Commission's standard contractual clauses or by the provider's certification under the EU–US Data Privacy Framework.
8. How long we keep data
| Data | Kept for |
|---|---|
| Account and contact details | While the account is active and 24 months after it is closed |
| Accounting records, invoices and self-billing invoices | 7 years under the Swedish Bookkeeping Act |
| Bank and payout details | Until replaced or the account is closed, then for as long as bookkeeping requires |
| Measurement data with hashed identifiers | 13 months, after which only aggregated statistics are kept |
| Support and email | 24 months after the last contact |
9. Your rights
You have the right to know what data we hold about you, to have incorrect data corrected and to have data erased when it is no longer needed. You can also request restriction, object to processing based on legitimate interest and receive data you have provided yourself (data portability). Contact hello@greatnative.com.
We normally cannot link the hashed measurement data to a specific person, so we usually cannot provide or erase your data in it.
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se, or with the supervisory authority in your country.
10. Security
Data is protected by encryption in transit, access control and logging. Bank details and tax IDs are only accessible to the people who handle payouts.
11. Cookies and browser storage
On greatnative.com we use necessary storage for sign-in, language choice and security, as well as visit statistics. The widget on publishers' websites uses temporary browser storage so that the same impression is not counted more than once.
12. Changes
We may update this policy. Material changes are announced to customers by email or in the service. The date at the top shows when the policy was last changed.
13. Contact
Adlounge AB, Torkhusgatan 9, 120 65 Stockholm, Sweden, hello@greatnative.com.