Security
Security and privacy for your ad traffic data.
Ad traffic data includes IP addresses, device details and access to ad accounts. Here is how Adjira handles each, described honestly.
Data processing agreement
Every customer is covered by a data processing agreement. Every vendor that processes customer data is listed on the subprocessors page with its location.
IP addresses encrypted and masked
Visitor IP addresses are encrypted at rest, bound to your workspace, and shown masked in the app. A full address is revealed only when a team member asks for it.
Least-privilege ad access
Ad accounts connect read-only by default. Write access for exclusion lists is separate, optional and revocable, and every write is confirmed by a person.
Workspace roles and two-step sign in
Owner, administrator, analyst and viewer roles control who can change rules, billing and integrations. Sign in supports an authenticator app as a second step.
Consent-aware tracking
The tracker can wait for your consent banner and follows the choice your site passes to it. You decide where it loads.
GDPR documents
A data processing agreement, a privacy notice, a cookie notice and a public subprocessor list, each versioned with its effective date.
Documents
We do not claim security certifications yet.
Security questions
How are visitor IP addresses protected?
Visitor IP addresses are encrypted at rest with AES-256-GCM, bound to your workspace, and shown masked in the app. A full address is revealed only when a team member asks for it. Exports show only the masked prefix.
Where is Adjira hosted?
Servers, database, Redis and backups run on Oracle Cloud Infrastructure in Frankfurt, Germany. Other vendors that process customer data, with their locations, are on the public subprocessors page. Subprocessors
Do you offer a data processing agreement?
Yes. Every customer is covered by a data processing agreement. Adjira gives 30 days notice by email before adding or replacing a subprocessor, and the customer may object. Data processing agreement
Who can access my data, and is two-step sign in available?
Access to customer data at Adjira is limited to people who need it to run the service, protected by multi-factor authentication, and logged. For your own team, sign in supports an authenticator app as a second step, and roles control what each member can see and change.
Can I delete my data?
Yes. You can find and delete one session or one visitor, export a visitor or a whole workspace, and delete a website, a workspace or an organization. A deleted workspace waits seven days so the deletion can be undone, then its data is removed. The encrypted form of each IP address is deleted after 30 days. Privacy notice
Make every ad dollar count.
Install in minutes, connect your ad accounts read-only, and see your first scored sessions as soon as paid traffic lands.