Privacy Policy

AdPropix Pty Ltd is the data controller for personal information processed through the Service.

• Entity: AdPropix Pty Ltd (Australia)
• Registered address: Level 10, 14 Mason St, Dandenong VIC 3175, Australia
• Privacy contact: support@adpropix.io

Where you use AdPropix to process data about your own clients and leads, you are the controller of that data and AdPropix acts as your processor.

2.1 Account and billing information

Name, email address, phone number, agency or brokerage name, business address, licence or agent details you choose to add, profile photo, brand assets (logos, headshots, colours), subscription plan, and authentication identifiers returned by Google, Apple or Microsoft sign-in. Card details are collected and stored by our payment processor, not by AdPropix.

2.2 Listing and campaign content

Property addresses, listing photos and videos, prices, statuses, inspection or auction details, uploaded creative files, generated ad copy, targeting locations, budgets, and schedules. Listing data may be entered manually, imported from a URL you provide, or synced from a feed you authorise.

2.3 Data from connected Meta (Facebook and Instagram) accounts

Depending on the permissions you grant, this may include:

• Your Facebook user ID, name and email, for account linking.
• The Pages and Instagram Business accounts you manage, including IDs, names, profile pictures and Page access tokens.
• Content you publish through AdPropix (posts, captions, images, videos, scheduled times).
• Engagement and insights metrics for Pages, posts and Instagram media.
• Ad account IDs, business IDs, campaigns, ad sets, ads, creatives, audiences, budgets, delivery status and performance metrics created or managed through AdPropix.
• Lead form submissions from lead ads on Pages you have authorised.

We do not collect data from your personal Facebook profile, friends, messages, or any Page or ad account you have not explicitly connected.

2.4 Data from Google, Microsoft, LinkedIn and TikTok

With your authorisation we access Google Ads accounts and campaign data, Google Analytics (GA4) properties and data streams, Google Tag Manager containers and tag configurations, YouTube channels for video uploads used in Google Ads, Google Business Profile listings, Microsoft Advertising accounts and UET tags, and LinkedIn or TikTok ad assets where connected. Each Google product uses a separate OAuth client and the minimum scopes needed for the feature you enable; scopes are never merged across products.

AdPropix's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except where you request support, where required for security or legal reasons, or where the data is aggregated and anonymised.

2.5 Lead and customer data

Where you run lead generation campaigns, we receive lead records (typically name, email, phone number, and any answers to your form questions) and pass them to the CRM or destination you configure. Personal identifiers sent to advertising platforms for conversion measurement or audience matching are hashed (SHA-256) before transmission.

2.6 Usage, device and support data

Log data such as IP address, browser and device type, pages viewed, feature usage, timestamps and error traces; support tickets, chat transcripts with our in-app assistant, and audit records of administrator or support "shadow" sessions.

• Authenticate you and your team members and operate your workspace.
• Generate creative and ad copy, and build, publish and manage organic posts and paid campaigns on the platforms you connect, at your instruction.
• Retrieve and display performance reporting for those campaigns and posts.
• Deliver lead submissions to your nominated CRM and record conversion events back to the relevant platform.
• Provide support, including time-bound shadow sessions that an authorised specialist can run with your consent, with billing actions blocked and all activity logged.
• Process subscription billing, trials, refunds and retention offers via our payment processor.
• Send service, security, billing and product communications.
• Detect and prevent fraud, abuse and security incidents, and meet legal obligations.

AdPropix uses automated models to draft ad copy, suggest targeting, generate imagery and video elements, and power in-app support. Prompts may include listing details, brand information and campaign settings. We do not send lead personal data to those models for content generation, and content you submit through these features is not used to train third-party foundation models.

We share data only with:

• The advertising and social platforms you connect, to execute the campaigns and posts you instruct us to publish.
• Sub-processors that power the Service: cloud hosting and database/authentication infrastructure, media rendering and storage, transactional email delivery, payment processing, model providers, mapping and geocoding, and support tooling. Each is bound by a data processing agreement and processes data only on our instructions.
• Your team members and agency, where you have invited co-workers or where workspace roles grant access.
• Professional advisers or acquirers, in connection with a merger, acquisition or restructure, subject to confidentiality.
• Authorities, where required by law or valid legal process, or to protect rights, safety or property.

A current list of sub-processors is available on request from support@adpropix.io.

We use strictly necessary cookies and local storage for authentication, session state and security. We use first-party analytics to understand feature usage and diagnose errors. Our marketing site may use advertising and measurement tags (including Meta Pixel, Google Ads and GA4) where you consent. You can block or delete cookies in your browser, though the app will not function correctly without essential cookies.

• Account and billing records: for the life of your account and up to 7 years after closure for tax and accounting purposes.
• Connected-platform tokens: while the connection is active, deleted within 30 days of disconnection or account closure.
• Campaign content, creative assets, performance snapshots and reports: 24 months from creation, then archived or deleted.
• Lead submissions: forwarded to your CRM and retained in AdPropix for up to 90 days for delivery reliability, then deleted.
• Support correspondence and shadow-session audit logs: 24 months.
• Security and access logs: up to 12 months.

You can request deletion of your AdPropix account and all associated personal information at any time by emailing support@adpropix.io from the email address on your account. Verified deletion requests are actioned within 30 days. Disconnecting a platform inside AdPropix immediately revokes our access token and deletes the stored credentials for that connection.

Meta users can also remove AdPropix via Facebook Settings, Business Integrations. Google users can revoke access at myaccount.google.com/permissions. Revoking there ends our access; to also delete data already stored in AdPropix, contact us using the email above.

Depending on where you live, you may have the right to access, correct, port, restrict or delete your personal information, to object to certain processing, and to withdraw consent. Australian users have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles; EU and UK users have rights under the GDPR and UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any right, email support@adpropix.io. You may also complain to the Office of the Australian Information Commissioner or your local supervisory authority.

We use encryption in transit (TLS), encryption at rest for stored credentials, role-based access control, row-level security isolating each customer's data, hashed transmission of personal identifiers to third-party measurement APIs, multi-factor authentication for administrators, and audit logging on sensitive actions including support shadow sessions. See our Trust and Security page for detail. No system is perfectly secure; if a breach affects you we will notify you and any regulator as required by law.

AdPropix is operated from Australia. Sub-processors may process data in Australia, the United States and the European Union under appropriate safeguards, including standard contractual clauses where required.

The Service is intended for business use by people aged 18 or over. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be notified by email or in-app notice. The "Last updated" date above always reflects the current version.

AdPropix accounts (for example support@adpropix.io and demo@adpropix.io) are email-based logins to the AdPropix platform itself. They are not Facebook user accounts and cannot be invited into the Meta App Dashboard under App Roles. To exercise Meta permissions during App Review, an AdPropix team member signs in with their AdPropix email and, when prompted by Facebook Login, authenticates with their personal Facebook identity - the account listed under App Roles and assigned to the app in Meta Business Manager, with access to the AdPropix Page, Ad Account and Business Asset Group used in the screencast.

AdPropix Pty Ltd

Level 10, 14 Mason St
Dandenong VIC 3175, Australia
support@adpropix.io

The equivalent policy for the AdPropix platform is published at adpropix.app/privacy.