Terms of service for agencies

1. Who these terms are between

1.1 These terms are between Autodash AS (“we”, “us”), organisation number 937 911 203, Kalfarveien 78C, 5022 Bergen, Norway, registered in Foretaksregisteret, VAT registered (MVA), and the business that creates an agency in Adcato (“you”, “the agency”).

1.2 The person who creates the account accepts these terms for the agency and confirms that they may do so.

1.3 These terms include the data processing agreement at /legal/dpa and the pricing page. If they disagree about personal data we process for you, the data processing agreement wins.

1.4 These terms take effect when you accept them: [DATE THE TERMS TAKE EFFECT]. We keep which version you accepted, and when.

2. Who may use the service

2.1 Adcato is for businesses: agencies, consultants and freelancers who use it in their trade. It is not for consumers.

2.2 A sole trader may use it, as part of their business.

2.3 Do not create an account for private use.

3. Your account and your team

3.1 Each person has their own account, with their email address and a password, or with their Google or Facebook account. Keep your password to yourself. If you think someone else has used your account, change the password and tell us at support@adcato.com.

3.2 An agency has one or more owners and any number of members. The person who creates the agency is its owner.

3.3 Invites. An owner invites a colleague by email. An invite works once, for 7 days, and only for that address. The colleague joins as a member. An agency can send 20 invites a day.

3.4 Removing and leaving. An owner can remove a member. The member loses access to the agency at once; their own account stays, and what they made in the agency stays with the agency. A member can leave. The only owner cannot leave, and cannot delete their account while other people are in the agency.

3.5 Hand-over. An owner can hand the agency over to a member. The member becomes the owner and the old owner becomes a member. These terms stay with the agency, not with the person.

3.6 Only the owner can export the agency’s data or delete the agency (section 13).

3.7 You are responsible for what the people in your agency do in Adcato.

3.8 Give us correct information about your agency. Your clients see your agency’s name, so use your real name.

3.9 Verification. An agency can be verified in steps: email domain, a DNS record, the company register, Meta’s business verification. Today our staff verify an agency through the company register by hand, when it asks at support@adcato.com: they look its organisation number up in its country’s public business register and check its legal name. Changing the legal name, the country or the organisation number afterwards removes that verification. Asking a client for full control (“Admin”) needs company-register or Meta verification. [THE OTHER STEPS (EMAIL DOMAIN, DNS RECORD, META'S BUSINESS VERIFICATION): NOT BUILT YET]

3.10 Daily limit. An agency can create 20 links a day; one verified through the company register or Meta, 500. We may set a different limit for an agency. A link can be started by 50 client sessions in its life. Plans do not limit the number of links otherwise.

4. What the service does

4.1 Connect. An owner signs in with Facebook and with Google and picks the Business Managers and Google manager accounts that should receive access. We read their names from Meta and Google; you never type a business ID.

4.2 Create a link. You choose what to ask the client for, at which access level, and which of your connected accounts receives it. A client name is optional. Your choices are saved as a template.

4.3 The client. The client opens the link, sees who is asking and for what, and accepts our terms and privacy notice for clients. Then the client signs in on Meta’s and Google’s own pages, picks their own accounts and confirms. On that click we ask Meta and Google to give you the access the client chose.

4.4 Guided steps. Some steps the client has to do on Meta’s own screen. Adding a partner to a Meta ad account is always such a step. We show the client the steps and then read the platform again to check that it worked.

4.5 Your dashboard shows each client’s status, what is given, what still waits and why. If you switch it on, we mail you when a client has finished or is stuck.

4.6 The client’s sign-in is kept encrypted for at most 30 minutes. When the client finishes, or the time is up, we ask Meta or Google to revoke it and delete our copy. We keep no key that would let us, or you, back into the client’s accounts later.

4.7 The access lives on Meta and Google, not with us. It stays there until you or the client remove it on the platform. It does not depend on your plan, on your account with us, or on Adcato continuing to exist.

4.8 Status today. Meta and Google have not reviewed or approved the app. Until they do, Adcato works with simulated accounts and test accounts only, and sign-up is by invitation. [STATUS OF META AND GOOGLE APP REVIEW AT LAUNCH]

5. What the service does not do

5.1 It does not change or remove access anyone already has. It only adds the access the client confirms. If you already have access to a Google Ads account, an Analytics property or a Tag Manager container with a lower role than you asked for, we report that and do not raise it; the role is raised on Google’s own screen. If Meta says you are already a partner on an asset, we report the access you actually hold.

5.2 It does not remove a previous agency or anyone else today.

5.3 It keeps no copy of your client’s advertising data. It reads lists of assets (name, ID, status and the business that owns each one) and who has access to them. It does not read or store ad results, spend, audiences, creative material or reports.

5.4 It does not create, change or pause ads, budgets, billing or payment methods, and it does not post or send messages.

5.5 It never writes to an asset that another business portfolio owns (for example a Page a previous agency owns), whatever role the client has on it.

5.6 It does not give you the client’s password, sign-in or token, or the name and address of the person who signed in.

5.7 We cannot promise that Meta or Google accept a request. They can refuse, delay or reverse a change. We do not control their systems.

5.8 We are not affiliated with Meta or Google.

6. Your clients

6.1 Before signing in, the client accepts our terms for clients and reads our privacy notice for clients. We record which versions, and when. You are not a party to those terms.

6.2 You are not our agent, and we are not yours. Your agreement with your client is between the two of you.

6.3 Every grant is the client’s own click. You cannot give yourself access from your side.

6.4 Tell the client the link is coming before you send it, and show who you are: your agency’s real name and, if you have one, your logo.

6.5 Do not ask the client to skip a check, or to answer a question in the link wrongly.

6.6 You are responsible for what you ask for and for what you do with the access the client gives you.

6.7 The record of each client (what you asked for, what the client chose, what was given and when) is kept for you. Section 13 and the data processing agreement say how.

7. Rules for using the service

7.1 Send links only to businesses you work with, or are about to work with, and who expect the link.

7.2 Ask for the least access the work needs. A new link starts at “standard” for a Meta ad account, a Facebook Page, an Instagram account and Google Ads, and at “view” for everything else; change it only when the work needs more.

7.3 Do not pretend to be someone else, and do not use a link to get access a client did not mean to give. No phishing.

7.4 A note on a link cannot contain a web address. The service refuses it.

7.5 Do not put more personal data into a client name or a note than you need, and no sensitive data (health, beliefs and the like).

7.6 Do not try to get around the limits, the checks or the security of the service, and do not test its security without our written permission. Report security problems to abuse@adcato.com.

7.7 Do not use the service to build or sell lists of businesses, people or assets.

7.8 Follow the law, and the terms of Meta and Google (section 9).

7.9 Do not reverse engineer, decompile, disassemble or otherwise try to work out the source code, the structure or the inner workings of the service, and do not help anyone else do so. This applies only as far as the law allows: where the law gives you a right that cannot be taken away by agreement, you keep that right, but you may use it only for the purpose the law allows. [LAWYER: EEA AND NORWEGIAN RIGHTS OF A LAWFUL USER]

7.10 Do not copy, reproduce or imitate the service, its design, its texts or its workflows, and do not use the service, or anything you learn from it, to build, train, benchmark or improve a product or service that competes with it. Do not sign up for or use the service on behalf of a competitor without our written permission.

7.11 Do not scrape, crawl, frame or mirror the service or our website, and do not use robots or other automated means to create accounts or to use the service, except in the ways the service itself is built to be used. Every account is created by a person.

7.12 Do not resell, sublicense, rent or lend the service, and do not give anyone outside your agency access to your account. Your clients use the links you send them, as section 6 describes.

7.13 If you break 7.9 to 7.12, we may suspend or close your account at once, as 8.4 describes.

8. Reports from clients, and what our staff may do

8.1 Every link page has “Report this request”. The client picks one of three reasons and may add a short line. The report goes to our staff. We do not tell you about a report.

8.2 Staff look at each report and either mark it handled, or turn the link off for good. A link staff turned off cannot be made active again: the client’s page in your dashboard says that staff turned it off, and gives the support address. Your client sees only that nothing can be shared through the link any more.

8.3 Access a client already gave stays where it is.

8.4 For serious or repeated misuse we may also suspend or close your account at once, and we may tell the client concerned. Where Meta’s or Google’s terms require it, we tell them too. [LAWYER: WHEN WE MAY TELL META, GOOGLE OR THE CLIENT] While your agency is suspended you cannot create links, a client who opens one of your links reads only that nothing can be shared through it, and your dashboard says why and gives the support address; nothing is deleted, and the owner can still export. Closing the agency deletes it as in 13.5.

8.5 Meta can require us to stop a client’s or an agency’s use of Meta through our app. If Meta asks, we must.

8.6 We keep a report until staff handle it, then 180 days, so that we can see a pattern.

8.7 If you think staff turned a link off by mistake, write to support@adcato.com.

9. Meta’s and Google’s terms

9.1 Your use of Meta and Google, and the access you receive through Adcato, is governed by your own agreements with Meta and Google, and your client’s. You agree to follow the Meta and Google terms and policies that apply to you.

9.2 Through Adcato you receive data that comes from Meta and Google: the names and IDs of your clients’ assets, the businesses that own them, and the status of each request. Use it only to manage the access and your work for that client. Do not sell it, do not use it for surveillance or to decide whether someone gets housing, a job, credit or similar, and do not use it to build profiles of people.

9.3 Meta and Google can change, limit or end what Adcato can do with their platforms. When that affects you, we tell you.

9.4 We have our own duties to Meta and Google, for example to keep their data secure, to delete it when asked and to report incidents. Meeting them can require us to act, for example to delete data or to stop a use.

10. Your branding and your own link domain

10.1 You can upload your logo and choose a button colour. Your clients see your name, logo and colour on the link page, and your name and logo in the preview card a chat app draws for the link.

10.2 You confirm that you have the right to use the name, logo and domain you give us, and that they cannot be taken for someone else’s (Meta, Google, us or another agency). You let us show them for the purpose of the service.

10.3 Your own link domain. [CUSTOM LINK DOMAINS WORK ONLY AFTER A CHANGE TO OUR HOSTING IS APPROVED AND APPLIED] You can serve your links from a domain of your own. You add two DNS records: a CNAME that points to us, and a TXT record with a value we make for your agency and that domain. We serve the domain only while both are in place, and only the client pages on it. If the TXT record disappears, we stop serving the domain at the next check. While your proof is in place, no other agency can use the domain.

10.4 When you remove the domain, or delete the agency, we stop serving it. A certificate already issued for it may stay on our server until it expires; nothing is served with it.

11. Availability, support and changes to the service

11.1 We work to keep Adcato available, but we make no uptime promise, and there is no public status page.

11.2 Adcato depends on Meta, Google, our hosting provider and our mail provider. When one of them fails or changes, parts of Adcato can stop working.

11.3 We may need to interrupt the service to maintain it. [NOTICE OF PLANNED INTERRUPTIONS, IF ANY]

11.4 Support is by email at support@adcato.com, [SUPPORT HOURS]. We do not promise a response time.

11.5 Adcato is in development. We may change, add or remove features. If we remove a feature you use, we tell you at least 30 days before, unless a platform, the law or a security problem forces a faster change.

12. Trial, plans and billing

12.1 Before billing is switched on. While billing is not switched on, Adcato is free to use with no limit on clients. When we switch billing on, we tell your agency’s owners by mail, and every agency that has never subscribed gets a new trial that starts that day.

12.2 The trial. Every agency starts with a free trial, with no card, counted from the day the agency is created. It lasts [7] days, or longer if you signed up with a partner’s code [PARTNER PROGRAMME: NOT BUILT YET (W7)]. The Billing page shows when your trial ends. Nothing is charged when the trial ends: to go on creating links, choose a plan. Each Meta business portfolio and Google Ads manager account gets one free trial: if you connect one that has already had a trial in another workspace, your trial ends then, and so that we know this after a workspace is deleted we keep only a keyed hash of its ID and the date of its trial, for [2] years.

12.3 Plans and prices. The plans, what each includes and the prices are on the pricing page and on the Billing page in Settings. Plans are paid monthly, in advance. Prices are in the currency the pricing page shows, and without VAT. [VAT: WHETHER IT IS ADDED AT PAYMENT, TO BE DECIDED WITH THE ACCOUNTANT]

12.4 Active clients. You pay for active clients. A client is active once their link has given you access (a grant that landed by the API, by a manager link, or a guided step we confirmed), until you archive it. We count every client that was active at any time in a billing period, once. Archiving a client after access landed does not take it out of that period, and access that lands on an archived link brings the client back.

12.5 Extra active clients. Each plan includes a number of active clients. We never refuse a client because you went over: each extra active client in a billing period costs the amount on the pricing page, and is charged at the end of that period, on the next invoice. Extra clients during the trial cost nothing. The Billing page shows how many active clients you have in the period so far.

12.6 Payment. Payments are handled by Stripe. We never see or store your card number; Stripe does. Stripe emails a receipt for each payment and each refund.

12.7 When a payment fails. While Stripe tries the payment again, everything works as before, and we mail your agency’s owners. If the payment has still not gone through 14 days after it first failed, your subscription ends, and 12.9 applies.

12.8 Cancelling. You can cancel your plan at any time from the Billing page (“Manage billing”). It ends at the end of the period you have paid for. [REFUNDS: PROPOSED NONE FOR A STARTED PERIOD, EXCEPT IN 17.3, 18.3 AND DPA CLAUSE 7.4]

12.9 When the trial or a subscription ends:

• You cannot create new links.
• Your dashboard stays readable, and you can still export and delete your data.
• A client who has already started on a link can always finish.
• Links you made before the end take new clients for 30 more days. After that they are paused until you choose a plan; a client who opens a paused link is told so.
• Access your clients already gave you on Meta and Google is never touched.
• We do not delete your data because a plan ended. [OWNER DECISION: WHETHER AGENCIES WITH NO PLAN AND NO SIGN-IN FOR A LONG TIME ARE DELETED, AND AFTER WHAT NOTICE]
• Choosing a plan lets you create links again, and lets paused links take new clients.

12.10 Price changes. We tell you at least 30 days before a price change applies to your plan. If you do not accept it, cancel before it applies.

12.11 Partner codes. [THE PARTNER PROGRAMME IS NOT BUILT YET (W7). CHECK THIS SECTION AGAINST THE CODE WHEN IT IS] If you sign up with a partner’s code, the partner learns that a workspace signed up with it, whether it is in trial or pays, and the dates. The partner does not learn your agency’s name. To check that a partner does not refer itself, we compare the members and the payment card fingerprint (not the card) of the workspaces involved. The partner terms are published with the programme.

13. Your data

13.1 Who is responsible for what. For the record of your clients that you keep in Adcato (links, what you asked for, what each client chose, what was given and when, status), you are the controller and we are your processor; the data processing agreement applies. For your accounts, billing, security and misuse prevention, and for your client’s own sign-in during a session, we are the controller; our privacy policy and the privacy notice for clients describe that. The data processing agreement explains why.

13.2 What we keep for you. Your links, clients, grants and their history are kept while your agency exists, until you delete them or the agency. We do not delete them on a schedule.

13.3 Export. The owner can download the agency’s data at any time as one JSON file (Settings > Agency data > Export, 10 times an hour). It holds the agency, its members with names and addresses, the connected Business Managers and manager accounts, who connected Meta and Google (not the sign-in itself), branding with the logo, the link domain, templates, each client (where its access goes, what was asked, the accounts chosen, what was given and when, what still waits) and the agency’s log. It never holds a sign-in token, a secret, a hash or the links’ addresses.

13.4 Archive. Any member can archive a client. It is hidden from Clients and no longer counts as active from then on; the link still works. Move it back the same way.

13.4a Deleting a client. An owner or admin can delete one client from its page (Delete client). The link stops working at once, and everything recorded about that client goes: its sessions, the accounts chosen, what was given and what waits. It cannot be undone. Access the client gave you on Meta and Google is not touched. If it was an active client in the current billing period, it still counts in that period (12.4).

13.5 Deleting the agency. The owner can delete the agency by typing its name. It cannot be undone. If the agency has a subscription, we cancel it at Stripe first, at once: the period’s extra clients are not charged, and the rest of the period is not refunded. Everything that identifies the agency goes, for everyone in it: links, clients, sessions, grants, connections, templates, branding, domains, invites and mail. Every link stops working at once. We revoke the agency’s live Meta and Google sign-ins where we can, and the clients’ live tokens. Members keep their own accounts. Access your clients gave you on Meta and Google is not touched.

13.6 Deleting your account. Anyone can delete their own account with their password (an account without one: after signing in with Google or Facebook again). An agency where you are the only person is deleted with it; you leave the others. If you are the only owner of an agency with other people in it, you must make one of them owner first. Your own Meta and Google sign-ins are deleted and revoked.

13.7 What stays after a deletion, and why:

• Our log of what was done stays, because it is how we can show what happened and investigate misuse. It holds IDs and counts, not names, addresses or tokens. After a deletion it is detached: a random reference takes the agency’s place, and a deleted person is shown as a deleted user. No entry can be changed or deleted otherwise.
• Reports from clients about your links stay for staff, with that reference instead of the agency, until 180 days after staff handled them.
• Paid invoices stay with us for bookkeeping, without the agency and without the card’s fingerprint, until the end of the fifth year after the year they were paid [TO BE CONFIRMED WITH OUR ACCOUNTANT]. Then we delete them, and your customer record at Stripe with them. Stripe keeps its own records under its own terms.
• Backups: [BACKUP RETENTION: TO BE SET WHEN BACKUPS EXIST].
• A logo a browser already loaded may stay in that browser’s cache, and a certificate for your link domain on our server until it expires.

13.8 Your own Meta and Google sign-ins. When you connect, we keep your sign-in, encrypted, so that we can list your Business Managers and manager accounts and confirm access that waits (a Google Ads request, or a step a client finished on Meta’s own screen after leaving the box). Meta’s sign-in lasts about 60 days, then Connections asks you to sign in again. When the same person signs in again, the new sign-in replaces the old one; a colleague’s sign-in is kept beside it. A sign-in is deleted when the agency is deleted or when that person deletes their account, and the owner can disconnect Facebook or Google at any time on Connections (Disconnect): we delete every sign-in of that platform kept for the agency, and revoke each at Meta or Google unless the same person’s sign-in is still in use in another agency; the connected Business Managers and manager accounts stay. Anyone can also end their own by removing Adcato’s access in their Facebook or Google account settings. A sign-in that stops working is deleted 30 days after it stopped.

14. Messages we send you

14.1 We send mail that is part of the service: about your account (sign-up, password, email change, a Google or Facebook account connected), your team (invites, hand-over), your clients (finished or stuck, if you switched it on), your plan (billing switched on, a trial ending or ended, a failed payment, a subscription that ended, links about to pause; to the owners, once billing is switched on), and a Google sign-in your links need that stopped working. These carry no advertising.

14.2 We send marketing mail only if you have said yes to it, and every such mail lets you stop it.

15. Our rights, your rights, and confidentiality

15.1 Adcato and everything in it, apart from your content, belongs to us. You may use it for your business while these terms apply.

15.2 Your content (your name, logo, notes, client names) stays yours. You let us use it to provide the service.

15.3 Each of us keeps the other’s non-public information confidential, and uses it only for this agreement.

15.4 Adcato’s software, design, texts, guides, templates and name are protected by copyright and other rights. Using the service gives you no right to them beyond what 15.1 says.

16. Liability

16.1 Adcato is provided as it is, within what these terms say it does.

16.2 We are not liable for indirect loss, such as lost profit, lost revenue or lost business.

16.3 We are not liable for:

• decisions by Meta or Google, including refusing, delaying or reversing a change, or restricting, suspending or closing an account;
• what a client chooses to give or not to give, or a wrong answer a client gives;
• what you do with the access you receive;
• something a client’s or your own account at Meta or Google could not do, or that the platform hid from the person who signed in.

16.4 Our total liability to you in any 12 months is limited to what you paid us in the 12 months before the claim. [LAWYER: A MINIMUM AMOUNT FOR AGENCIES IN A TRIAL OR ON A FREE PERIOD, WHO HAVE PAID NOTHING]

16.5 What these limits do not cover: loss we cause by intent or gross negligence, and any liability the law does not let us limit. [LAWYER: CONFIRM UNDER NORWEGIAN LAW]

16.6 You cover our costs and losses, including reasonable legal costs, when a client, Meta, Google or anyone else makes a claim against us because you misused the service or broke section 7 or section 9.

16.7 A claim must be made in writing within [12] months after the claimant learned of it. [LAWYER]

17. Changes to these terms

17.1 We tell the owners of your agency by email, and in Adcato, at least 30 days before a change takes effect.

17.2 If you go on using the service after that date, the new terms apply. If you do not accept them, cancel before that date.

17.3 If a change is to your disadvantage and you cancel because of it, we refund what you paid for the part of the period after the change. [OWNER: CONFIRM]

17.4 A change can take effect sooner when the law, Meta or Google requires it, or when it only adds something for you. We still tell you.

17.5 Each version of these terms has a version number. We keep which version your agency accepted, and when.

18. Ending the agreement

18.1 You can cancel your plan at any time (12.8) and delete your agency at any time (13.5). Deleting the agency ends these terms.

18.2 We can end the agreement with 30 days’ notice by email to the owners, without giving a reason.

18.3 If we end it under 18.2, we refund what you paid for the part of the period after the end.

18.4 We can suspend or end it at once if you seriously or repeatedly break section 7 or section 9, if Meta or Google require it, or if the law requires it. A link staff turned off after a report is covered by section 8.

18.5 When the agreement ends:

• access your clients gave you on Meta and Google stays where it is;
• your links stop taking clients [AT ONCE / AFTER THE 30 DAYS IN 12.9: TO BE DECIDED FOR AN ACCOUNT WE CLOSE];
• the owner can still export the agency’s data for [30] days, unless we ended it because of section 7 or the law forbids it;
• after that we delete the agency in the same way as 13.5, with the same exceptions as 13.7.

18.6 Sections 13.7, 15.3, 16 and 19 go on applying after the end.

19. Law and courts

19.1 These terms are governed by Norwegian law.

19.2 Disputes go to [OSLO DISTRICT COURT (OSLO TINGRETT), OR THE DISTRICT COURT FOR THE COMPANY'S REGISTERED OFFICE: TO BE CONFIRMED] as the court of first instance. We will first try to solve a disagreement by talking.

20. Contact and notices

• Autodash AS, organisation number 937 911 203, Kalfarveien 78C, 5022 Bergen.
• Support and questions: support@adcato.com.
• Misuse and security problems: abuse@adcato.com (also in /.well-known/security.txt).
• We send notices to the email addresses of your agency’s owners. Send notices to us at support@adcato.com.