This Privacy Policy explains how Ardion handles personal data when you use our platform, connect third-party services, or use the Ardion MCP server.
1. Who we are
Ardion is a trade name of Solidflow B.V., registered in the Netherlands under Chamber of Commerce (KvK) number 92757103, with its registered address at Klompenmakersstraat 3K, 8601 WR Sneek, The Netherlands.
Ardion acts as a controller for personal data relating to platform users. Where we process business content or data from services connected by a customer company, Ardion generally acts as a processor on behalf of that company.
2. Information we process
Ardion may process information you or your company provide when using the platform, including:
- Account information, such as your name and work email address.
- Business information and other content entered into the platform.
- Usage and technical information needed to operate, secure and improve the service.
- Information obtained from services your company chooses to connect.
3. How we use information
Ardion processes information only where necessary to provide, operate and maintain the service.
We may use information to:
- Provide and maintain the platform and its functionality.
- Manage accounts and access to the service.
- Provide support and communicate service or security information.
- Monitor and improve the performance, reliability and security of the platform.
- Comply with applicable legal obligations.
We do not sell personal data or use it for unrelated advertising purposes.
4. Google user data
Your company may choose to connect Google services to Ardion. Access is granted through Google’s authorization process, and we do not access Google user data before permission has been provided.
Ardion accesses and uses Google user data only to provide functionality requested or configured by your company. This may include retrieving information, generating results, or performing actions through a connected Google service.
Where necessary to complete a request, Google user data may be provided to a third party that the company has chosen and connected to Ardion. Such transfers occur only as part of providing the requested functionality.
Ardion uses Google user data only to provide the functionality requested by your company. We do not sell Google user data, we do not use it for advertising, marketing or any other unrelated purpose, and we never use or share it for the training of models.
Ardion does not allow its personnel to read Google user data, except where you have given consent, where it is necessary for security purposes, where required by applicable law, or where the data has been aggregated and anonymized for internal operations.
Ardion does not maintain a separate standing copy of data retrieved from Google services. Records created while performing work may contain information returned by Google and are deleted automatically after 30 days.
You may disconnect a Google service from Ardion or revoke access through your Google Account permissions. Stored credentials for that connection are removed when the connection is disconnected.
Ardion’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
5. Meta (Facebook and Instagram) data
Your company may choose to connect Meta Ads, Facebook or Instagram to Ardion. Access is granted through Meta’s login and consent process, where you choose which businesses, Pages and Instagram accounts Ardion may use. We do not access Meta data before permission has been provided.
Depending on the permissions granted, Ardion may receive:
- The ad accounts the connected person has access to, with their campaigns, ad sets, ads, creatives and performance data.
- Custom audiences, conversion datasets (such as a Meta Pixel) and custom conversions on those ad accounts.
- The Facebook Pages and linked Instagram business accounts that can be used for advertising.
- Posts, photos, videos, comments, mentions, reviews and insights of the connected Facebook Pages, and the Page access tokens needed to act on their behalf.
- Messenger conversations of those Pages, including the names and messages of the people who wrote to them.
- Posts, stories, comments, mentions, insights and direct messages of the connected Instagram business accounts, and public content found through hashtag search or other business accounts’ public profiles.
- The basic profile information Meta provides at login, such as the connected person’s name.
Ardion accesses and uses Meta data only to provide functionality requested or configured by your company. This may include reporting on ad and content performance, creating or changing campaigns, ad sets, ads, creatives and audiences, publishing and scheduling Page and Instagram posts, replying to, liking and hiding comments, liking posts, and replying to messages. Changes that can spend budget are only made when your company requests them, and they require confirmation by a person unless your company has chosen to let a specific action run automatically.
Where necessary to complete a request, Meta data may be provided to a third party that the company has chosen and connected to Ardion. Such transfers occur only as part of providing the requested functionality.
We do not sell or license Meta data, we do not use it for advertising, marketing or any other unrelated purpose, and we never use or share it for the training of models.
Ardion does not allow its personnel to read Meta data, except where you have given consent, where it is necessary for security purposes, where required by applicable law, or where the data has been aggregated and anonymized for internal operations.
Apart from the names and identifiers of the connected Facebook Pages and Instagram accounts, which are kept with the connection’s credentials until it is disconnected, Ardion does not maintain a separate standing copy of data retrieved from Meta. Records created while performing work may contain information returned by Meta and are deleted automatically after 30 days.
You may disconnect Meta Ads, Facebook or Instagram from Ardion at any time, which removes the stored credentials for that connection, including its Page access tokens and the stored Page and account details. You can also remove Ardion under Business integrations in your Facebook settings, and an admin of a business portfolio can remove Ardion from that portfolio’s connected apps. To request deletion of any remaining Meta data held by Ardion, contact info@ardion.io.
Ardion’s use of information received from Meta complies with the Meta Platform Terms and Developer Policies.
6. LinkedIn data
Your company may choose to connect LinkedIn to Ardion. Access is granted through LinkedIn’s login and consent process, and we do not access LinkedIn data before permission has been provided.
Depending on the permissions granted and the features your company uses, Ardion may receive:
- The ad accounts the connected person has access to, with their campaign groups, campaigns, ads and aggregated performance and audience reports.
- The LinkedIn Pages the connected person administers, with their posts and aggregated page statistics.
- Responses to your company’s own lead forms, where your company enables lead synchronization.
- The basic profile information LinkedIn provides at login, such as the connected person’s name and email address.
Ardion accesses and uses LinkedIn data only to provide functionality requested or configured by your company. This may include reporting on ad performance, creating or changing campaigns, ads and audiences, publishing content for your company’s Pages and, when the connected person requests it, on their own LinkedIn profile, delivering lead form responses to services your company has connected, and sending conversion events from your company’s own systems to LinkedIn. Email addresses in conversion events are hashed before they are sent. Changes that can spend budget are only made when your company requests them, and they require confirmation by a person unless your company has chosen to let a specific action run automatically.
We do not sell or license LinkedIn data, we do not use it for advertising, sales, recruiting or any other unrelated purpose, we do not combine information about LinkedIn members with other data to build profiles, and we never use or share it for the training of models. LinkedIn data is only made available to the company that connected it.
Ardion does not allow its personnel to read LinkedIn data, except where you have given consent, where it is necessary for security purposes, where required by applicable law, or where the data has been aggregated and anonymized for internal operations.
Ardion does not maintain a separate standing copy of data retrieved from LinkedIn. Records created while performing work may contain information returned by LinkedIn and are deleted automatically after 30 days.
You may disconnect LinkedIn from Ardion at any time, which removes the stored credentials for that connection. You can also remove Ardion under Permitted services in your LinkedIn settings. To request deletion of any remaining LinkedIn data held by Ardion, contact info@ardion.io.
Ardion’s use of information received from LinkedIn complies with the LinkedIn API Terms of Use and the LinkedIn Marketing API Terms.
7. Third-party services
Your company may connect third-party services to Ardion. When a connected service is used, information needed to perform the requested action may be sent to and received from that provider.
Your company controls which services are connected. Third-party providers process information under their own terms and privacy policies.
10. Retention and deletion
We retain personal data only for as long as necessary to provide the service or meet applicable legal requirements.
- Account data is retained while your company uses Ardion and is deleted within 30 days after the account is closed.
- Business content is retained until it is deleted by your company or the account is closed.
- Credentials are retained until the relevant connection is disconnected or the account is closed.
- Product analytics and error information are retained for 30 days.
You may request deletion of personal data held by Ardion by contacting info@ardion.io.
11. Security
Ardion uses technical and organizational safeguards designed to protect personal data against unauthorized access, loss, alteration or disclosure. Data is encrypted in transit and at rest, and production systems are protected by firewalls and restricted access controls.
No method of storage or transmission is completely secure, and absolute security cannot be guaranteed.
12. Your rights
Where applicable under the GDPR, you may request access to, correction of, deletion of, restriction of, or portability of your personal data, and you may object to certain processing.
Where Ardion processes information on behalf of your company, requests relating to that information may need to be handled by your company as the controller.
To exercise your rights, contact info@ardion.io. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens, or with the supervisory authority in the EU member state where you live or work.
13. Changes to this policy
We may update this Privacy Policy when our services or data practices change. The latest version and its effective date will always be published on this page.
14. Contact
If you have any questions about this Privacy Policy or concerns about how we handle your personal data, please contact us at info@ardion.io.