Legal
Privacy Policy
Last updated: 20 September 2026
This Privacy Policy describes how Operato (operated by Noam Marketing, ABN 13 647 115 510, Australia) collects, uses, and protects your information when you use our platform.
1. Information We Collect
We collect information you provide directly to us, information collected automatically when you use the service, and information from third-party services you connect (such as Google and Meta advertising accounts).
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, to communicate with you, to monitor and analyze usage, and to comply with legal obligations.
3. Data Sharing and Disclosure
We do not sell your personal information. We may share information with the service providers listed below who perform services on our behalf, when required by law, or in connection with a business transfer.
4. Use of Google and Meta Account Data
When you connect a Google account (Google Ads or Google Analytics) or a Meta account, Operato reads data from those accounts only to provide features to you inside Operato, such as scoring client health and drafting actions for your approval. Operato never posts, changes, or spends anything in your connected accounts. Operato’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for advertising and we do not sell it. You can disconnect any connected account at any time, which stops further access and removes the stored connection.
5. Service Providers (Sub-processors)
We use a small number of trusted providers to run Operato. Each processes data only to provide its service to us and is bound by its own security and privacy obligations. Our current providers are Supabase (database, authentication and backend), Vercel (application hosting), Resend (transactional email), and Anthropic and OpenAI (AI features). We will update this list as our providers change.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.
7. Your Rights, Deletion and Export
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to ask us to restrict how we use it. To make any of these requests, email us at admin@operato.app and we will action it. Disconnecting a connected account removes its stored connection and associated data.
8. Data Security
We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Each agency’s data is isolated at the database level, connection tokens are encrypted, and access is controlled per user. You can read a plain overview on our Security page.
9. International Users and Data Location
Operato is operated from Australia. Your information, and the data from your connected accounts, is stored and processed on cloud infrastructure that is independently certified to SOC 2 Type II and may be located outside your country. By using the service, you consent to such transfers.
10. Children's Privacy
Our service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at admin@operato.app.