Privacy
What nForce collects, why, for how long, and how to have it deleted. Updated 12 October 2026.
Who we are
nForce is run by B2B Factory AB (org.nr 559515-4476), Västertorp 12, 179 97 Färentuna, Sweden. We are the controller for your account and how we run nForce. For the data we read from your ad account to do the work you ask for, we act on your behalf (as your processor); the data processing agreement is part of our terms. Questions and requests: privacy@b2bfactory.io.
What we collect, why, and for how long
| Why | What | Legal basis | How long |
|---|---|---|---|
| Your nForce account | Your name, email and LinkedIn member id, from Sign in with LinkedIn | Contract: the service you asked for | 12 months after you last use nForce, or until you ask us to delete it |
| Welcome and account emails | Your name and email. These are the welcome, how to start, and notices such as a report or a build being ready | Contract | As long as your account |
| nForce news | Your email, and your yes with its date | Consent: the tick box when you connect. Unsubscribe any time | Until you unsubscribe, or your account is deleted |
| Connecting your LinkedIn ad account | The access and refresh tokens LinkedIn issues, encrypted, and whether you chose read only or read and build | Contract | Deleted when you ask (within 10 days), or as soon as LinkedIn refuses them because you removed the connection |
| Audits, plans, builds and reports | From your ad account: campaigns, settings, targeting, ad text and images, and aggregate results. From you: your company, website, buyers, budget and goals, and the plans and changes made with you, with the words you used to approve each change | Contract | 90 days after you last use nForce; within 10 days of you asking |
| Changes you let nForce make on its own | Which changes you switched on, for which month, and the words you used; the changes you said no to, with your words; nForce's checks of each live campaign's spend during the day; and a log of each change nForce made on its own, with its reason and LinkedIn's confirmation | Contract | The checks 30 days; a no until the end of the following month; the log 12 months. All of it is deleted with your ad account's data, and your email and words within 10 days of you asking |
| The AI agents' work | What a task needs from the rows above, sent to Anthropic's AI models to write ads or review an account | Contract | 90 days |
| The free build in nForce's demo account | What you build there (campaign names, ad text, targeting) sits paused in nForce's own LinkedIn ad account. That account is shared: everyone with view access to it, nForce's team and other demo visitors, can see it. You are given view access too | Contract | Kept paused there; on request we take it out within 10 days |
| Giving you view access to the demo account | Your LinkedIn member id for the ads, which LinkedIn gives us when you connect your ad account | Contract | As long as your account |
| Security and fixing problems | A log of each nForce action: which one, when, whether it worked, and your words when you approved a change. Your conversation itself stays in your own AI assistant | Legitimate interest: keeping nForce secure and working | 12 months |
| Benchmarks in our customers' reports | Your account's results combined with at least five other accounts. No data about any LinkedIn member, and nothing that identifies you | Legitimate interest, and your agreement when you connect, as LinkedIn requires. Opt out by email | The combined figures are kept; your own figures go as in the audits row |
| Billing | The Stripe customer and subscription ids and whether your plan is active. Stripe holds the card, never us | Contract, and the Swedish Bookkeeping Act for invoices | Invoices 7 years, at Stripe and in our books; the rest as long as your account |
| Measuring our LinkedIn ads | If you agree to cookies on this site: what LinkedIn's Insight Tag records about your visit. See Cookies on this site | Consent, which you can withdraw any time from Cookie settings | LinkedIn removes direct identifiers within 7 days and deletes the rest within 180 days, as it states |
What we never do
- We never sell your data. The only advertising tag on this site is LinkedIn's Insight Tag, and it loads only if you agree.
- We never read the people who fill in your lead forms. Their answers stay in LinkedIn.
- We never export or collect LinkedIn members' data, and never build audiences from it.
- We never train AI models on your data. Anthropic does not train its models on data sent through its API.
- We never delete anything in your ad account, and never switch a campaign on unless you ask. New campaigns are built paused, and every change waits for your yes.
Who processes it for us
- Netlify: hosts the site and nForce's server, and stores the data above.
- Anthropic: runs the AI models nForce's agents use.
- Stripe: card payments for the plan.
- Google Workspace: our email.
- Apify: reads the public LinkedIn Ad Library for the audit.
- GitHub: stores records from our older sign-up form.
Some of them process data in the United States, under the EU's standard contractual clauses or the EU-US Data Privacy Framework, as each provider's data processing terms set out. LinkedIn is the ad platform itself and decides for its own part how it handles your data; its privacy policy applies there.
Security
LinkedIn tokens are encrypted (AES-256-GCM) before they are stored, with the key kept apart from the data; tokens stored before 5 October 2026 are encrypted the first time they are used again. They are never sent to an AI model or to your AI assistant, which can only use nForce's own actions. Everything travels over HTTPS. Only nForce's founder has access to the stored data.
Your rights
You can ask for a copy of your data in a machine-readable format, have it corrected or deleted, restrict or object to how we use it, and withdraw any consent: write to privacy@b2bfactory.io. For cookies, use “Cookie settings” at the bottom of every page. We answer within one month, and delete data from your LinkedIn account within 10 days. You can also complain to the Swedish Authority for Privacy Protection, IMY (Integritetsskyddsmyndigheten): imy.se, imy@imy.se, +46 8 657 61 00.
Cookies on this site
Browsing this site sets no cookie and contacts no other service until you choose. Its fonts are served by this site itself. If you agree to marketing cookies, it loads LinkedIn's Insight Tag, which shows us how our LinkedIn ads perform; if you say no, it does not load. Your choice is kept in your browser (local storage, not a cookie) for 12 months. You can change it any time from “Cookie settings” at the bottom of every page.
The Insight Tag sends LinkedIn the address of the page you visit, the page you came from, your IP address, your browser and device, and the time. LinkedIn gives us only aggregate reports, such as how many visitors came from our ads and their job titles and companies as a group; we never see who you are. For this data LinkedIn and we are joint controllers, as LinkedIn's terms describe; LinkedIn's own privacy policy applies to its part. LinkedIn states that it removes direct identifiers within 7 days and deletes the rest within 180 days.
Under the Swedish Electronic Communications Act (lagen om elektronisk kommunikation, chapter 9, section 28), cookies that are not strictly necessary need your consent first, and your consent is the legal basis for the tag. If you withdraw, we delete the LinkedIn cookies and browser storage kept under this site's address; cookies LinkedIn keeps under linkedin.com can be cleared in your browser settings.
| Name | Provider | Purpose | Kept for | Type |
|---|---|---|---|---|
| nforce-consent | nForce | Remembers your cookie choice (browser storage, not a cookie) | 12 months | Necessary |
| nf_s | nForce | Keeps you signed in after you open a link in our email | 30 days | Necessary |
| li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory, li_fat_id, li_giant, li_adsId, li_hem (browser storage) | Measures how our LinkedIn ads perform and who visits after seeing them | From 1 day to 1 year | Marketing, with consent |
Links in emails we send you may record that they were opened, and may sign you in with one cookie (nf_s) that lasts 30 days; our older sign-up form used the same cookie. Signing in on nForce's connector (nforce-connector.netlify.app) sets one cookie there that keeps you signed in for 12 hours.
Children
nForce is for businesses and not meant for anyone under 16.
Changes
We post changes here with a new date. If a change matters for how your data is used, we also email you.