Privacy Policy

Customers are businesses that sign in and use AdToCart to build landing pages and ads for their own products.

Visitors are members of the public who arrive on a landing page AdToCart published for one of those businesses. A visitor’s details belong to that business, not to us. We hold them on its behalf.

• An email address and password, to sign in.
• The product page address you give us, and the contents of that page — its description, images, price and any customer reviews shown publicly on it.
• The campaigns, landing pages and ad copy the app produces for you.
• A record of what was generated and what it cost, so spending against your limit can be shown to you.

We do not take payment details on this site, and we do not store card numbers anywhere.

A landing page published by AdToCart collects nothing at all unless the visitor fills in the enquiry form. If they do, we store exactly four things: name, phone number, email address if given, and the message they wrote — along with which page they were on, so the business knows which of its ads produced the enquiry.

Separately, each landing page keeps two running counts: how many times it was viewed, and how many times its button was clicked. These are numbers only. They are not tied to a person, a device or an address, and they cannot be traced back to any individual visitor.

AdToCart’s own landing pages set no cookies and run no advertising or analytics trackers. A business using AdToCart may choose to add its own Meta pixel to its pages; where it has, that business is responsible for disclosing it, and Meta’s own privacy terms apply to what the pixel collects.

To run the service: to sign you in, to build the pages and ads you asked for, to pass you the enquiries your pages produce, and to show you what you have spent. We do not use customer content or visitor enquiries to train models of our own, and we do not sell or rent personal information to anybody.

AdToCart sends data to a small number of processors, and only what each one needs to do its job:

• Supabase — the database and file storage holding everything described above.
• Vercel — hosting, which handles the web requests themselves.
• OpenAI — receives the product information you supply, in order to write the pages and ad copy. It never receives visitor enquiries.
• KIE.ai — receives the image and video instructions the app writes, in order to generate the pictures. It never receives visitor enquiries.
• Meta Platforms — only when you connect an ad account, and only as described below.

Some of these operate outside Australia, so information you give us may be processed overseas.

Connecting Meta is optional, and AdToCart works without it. If you do connect one, the app reads the list of ad accounts, Facebook Pages and pixels you already have access to, so it can show them to you in a dropdown.

When you publish, the app creates a campaign, ad sets, creatives and ads in the ad account you chose, from the copy and pictures you approved. Every one of them is created paused. AdToCart never starts an ad running and never changes a budget on an ad it did not create.

We do not read your Meta advertising results, your customer lists, your audiences or your Page messages, and we never post to your Page other than the ad creatives you approved.

Campaign content is kept for as long as your account is open. Visitor enquiries are kept until the business that received them deletes them or closes its account. When an account is deleted, its campaigns, pages, generated files and enquiries are deleted with it.

Email david@uconnect.com.au from the address on the account, or — if you are a visitor who filled in a form — from the address you used, saying what you want removed.

We will confirm within 7 days and complete the deletion within 30. Deletion removes the records from the live database and from file storage. Where a landing page was published publicly, it is taken down at the same time.

You can also ask for a copy of what we hold, or ask us to correct it, the same way.

Data is held in access-controlled databases, and the keys that can reach it are held server-side only — they are never sent to a browser. No system is perfect, and we do not claim otherwise; if a breach ever put personal information at serious risk we would notify the people affected and the Office of the Australian Information Commissioner, as the Privacy Act requires.

AdToCart is a business tool and is not directed at anybody under 18. We do not knowingly collect information from children.

If you think we have mishandled your information, write to david@uconnect.com.au and we will respond within 30 days. If you are not satisfied with our answer you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes, the date at the top changes with it. Material changes affecting customers will also be told to customers by email.