Your information.
Handled with care.
Privacy policy. Updated 28 October 2026.
This notice explains the information used to assess and manage a PlacementOne service. The information collected depends on the features you use and the services that have been activated.
What we collect
When you request the free guide, we collect your email address and an optional first name if you provide it. We record the request time, guide and privacy notice versions, and delivery status. This signup does not create a workspace account or subscribe you to a newsletter. We use the information to provide the guide you requested and a related link to our campaign services.
For a campaign fit assessment we collect your contact details, business name, website, country, offer, target customers, campaign objective, intended advertising budget, advertiser account readiness and website-measurement access.
If you create a workspace, we also keep your verified account identity, organisation memberships, business brief, brand assets, advertiser account reference, onboarding progress, campaign versions, approvals, budget authorisations, measurement evidence, reporting imports and service records. Approvals include who approved a particular version and when.
We record service payment identifiers and subscription status. Your payment card details are entered with Stripe for PlacementOne fees or with OpenAI for advertising spend. Do not send passwords, full card details or sensitive personal information through the workspace or enquiry form.
Why we use it
We use this information to assess suitability, deliver agreed campaign services, obtain your approvals, provide reports, manage service billing and respond to support or privacy requests. Requesting a guide or sending an assessment does not subscribe you to a marketing list. We do not sell your information.
Our service providers
- Cloudflare hosts the website and backend and provides operational security. Free-guide requests, consent records, email delivery jobs and any legacy website enquiries are held privately in Cloudflare D1.
- Resend processes your email address and the requested guide email when email delivery is active. The email contains a link to download the guide. Provider acceptance is recorded as a delivery-processing status, not a guarantee of inbox arrival. We do not add guide requests to marketing audiences or send an automated marketing sequence.
- Supabase provides workspace authentication, database and private file storage when workspace services are active.
- Stripe processes PlacementOne setup and management payments and provides invoices and subscription management when billing is active.
- OpenAI operates your advertiser account, campaign delivery and advertising billing under its own terms and privacy practices. Your OpenAI login is separate from your PlacementOne login.
These providers may process information outside Australia. Access to workspace records and files is restricted to authorised members and PlacementOne operators who need it to deliver the service.
Advertising and reporting data
We may import Ads Manager reports to explain campaign performance. Reporting identifies its source, currency, period and update time. Platform-attributed conversions, website enquiries and customer-confirmed sales are kept distinct. Access to your website or analytics is limited to what the agreed campaign work needs.
AI tools may assist us in drafting ad creative or report commentary. We review the work before using it. We do not include passwords, payment details or unnecessary personal information in those tools, and we do not use your records to train our own AI models.
Cookies and account sessions
The marketing website does not use advertising pixels or third-party marketing analytics. An active workspace uses HttpOnly session cookies to maintain your authenticated session. Our providers may use cookies or similar measures needed for authentication, payments, security and service operation. Stripe and OpenAI apply their own policies when you visit their services.
Retention and security
We keep records while they are needed for the service, support, accounting or legal obligations, then delete or de-identify them. Campaign approvals and billing records may need to be retained after cancellation. We use access controls and private storage; no online service can promise absolute security.
Your choices
You may ask to access, correct or delete information you have provided, withdraw permission for further contact, or raise a privacy concern. Use the support route in your workspace, or the website assessment form with your request clearly identified as a privacy request. We may need to verify your identity first. Some records must be retained to meet legal obligations.
If you are dissatisfied with our response, you can contact the Office of the Australian Information Commissioner.
Changes to this notice
We update this notice when the service or information handling changes. The date above identifies this version.