Draft for review. Not reviewed by a lawyer, and not in force. What is undecided, or does not exist yet, is marked like this: [ADDRESS]

Terms for clients

These terms apply when an agency sends you a request link and you use Adcato to give that agency access to your advertising accounts. You accept them before you sign in with Meta or Google.

Version 2026-11-15.draft2

The short version

Nothing changes in your accounts unless you click. We read first, then you decide.
We only add the access you confirm. We never remove or lower anyone’s access.
Your sign-in is kept for at most 30 minutes. Then it is revoked and deleted.
The access you give lives on Meta and Google, not with us. You can remove it there at any time.
We cannot give the agency an asset that another business owns. Only that business can.

Who this is between

These terms are between you and Autodash AS (organisation number 937 911 203, Kalfarveien 78C, 5022 Bergen), the company behind Adcato. “We” means that company.

“You” means the business that owns the accounts, and the person who signs in for it. By continuing you confirm that you are allowed to manage access to these accounts on behalf of that business.

The agency that sent you the link is our customer. It is not a party to these terms and does not act for us. What you have agreed with the agency is between the two of you.

Using Adcato through a request link costs you nothing.

What we do in your accounts

You sign in on Meta’s and Google’s own pages. We never see your password. Meta or Google then gives us a temporary key (an access token) that lets us do the following, and only this:

Read which pages, ad accounts and other assets you can manage, who owns each one, and whether the agency already has access to it. Reading changes nothing.
Give the agency the access shown on the screen, on the assets you pick, when you click to do so.
Check that a step you did on Meta’s own screen worked, also if you close this page before it is confirmed, while the key is still valid.

Some steps cannot be done for you. Meta, for example, requires that a partner is added to an ad account on Meta’s own screen. For those we show you the steps and afterwards check whether it worked.

We do not create, change or pause ads. We do not change budgets, billing or payment methods. We do not post or send messages, and we do not read your ad results, audiences or creative material.

What the tool cannot do

It only adds access. It does not remove or lower anyone’s access, and it does not remove a previous agency. If the agency already has access with a lower role than it asked for, we show that and do not raise it; that is done on the platform’s own screen.
It cannot give access to an asset that someone else owns. If an ad account, a pixel or a Page sits in another business’s portfolio, often a previous agency’s, only that business can share it or hand it over.
It only sees what Meta and Google show to your sign-in.
Some changes need a second approval on the platform, or have to be accepted by the agency. Until we can confirm them, the screen shows them as waiting.
Meta and Google can refuse, delay or reverse a change. We do not control their systems or their decisions.

The access token is stored encrypted for at most 30 minutes.
When you finish, or when the 30 minutes are up, we ask Meta or Google to revoke it and we delete our copy.
We do not ask for, or keep, a key that would let us back into your accounts later.
After that we cannot read or change anything in your accounts. If something is still waiting, the agency checks it from its own side.

Where the access lives

The access you give the agency is recorded at Meta and Google, not with us. It stays in place until you or the agency remove it there. It does not depend on the agency remaining our customer, or on Adcato continuing to exist.

You can remove it at any time in Meta’s Business settings, in Google Ads, in Google Analytics or in Tag Manager. The last step of the link shows what was given, and to whom.

Who is responsible for what

You decide what to give, and you make sure you may give it for the business.
The agency is responsible for what it asks for, and for what it does with the access you give it.
We are responsible for doing what the screens say and nothing else, and for deleting your sign-in as described here.
Meta and Google are responsible for their own platforms, and their terms apply to your accounts. We are not affiliated with either of them.

Limits on our liability

[LIABILITY CLAUSE TO BE SET IN LEGAL REVIEW] What it is meant to say: the tool is free for you and provided as it is. We are not liable for indirect loss or lost revenue, or for the effects of a decision by Meta, Google or the agency. Nothing in these terms limits liability that the law does not allow us to limit.

If something looks wrong

If you do not recognise the agency, or the request asks for more than you expected, stop. Nothing has changed. Choose “Report this request” on the link page: our staff look at every report and can turn the link off. The agency is not told. You can also write to abuse@adcato.com.

Law, changes and contact

[GOVERNING LAW AND COURT TO BE CONFIRMED IN LEGAL REVIEW] Proposed: Norwegian law, with Oslo District Court as the court of first instance.
These terms carry a version. We store the version you accepted and when you accepted it. If the terms change, the next link you open shows the new version.
Questions: support@adcato.com.