Privacy Policy

About Made Connected

Made Connected helps businesses plan, create, review and manage marketing work. This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, register your interest, use our platform, connect another service or contact us.

Made Connected is operated by WILSON OPERATIONS PTY LTD (ACN 679 763 467), trading as Made Connected (“Made Connected”, “we”, “us” or “our”). Our address is Unit 2, 304 West Coast Highway, Scarborough WA 6019, Australia.

Personal information means information or an opinion about an identified person, or a person who can reasonably be identified. This can include business contact details and information contained in marketing content.

This policy describes our handling of personal information. It does not replace any separate consent we need to obtain. We handle personal information in accordance with the privacy laws that apply to us, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where applicable.

When a business uses Made Connected

We handle information about website visitors, account holders, team members, people who contact us and people whose information our customers upload or manage through the platform.

For our website, accounts, customer relationships and support, we decide how personal information is used for the purposes described in this policy.

When a customer uploads a contact list, creates a campaign or connects a business account, we handle that information to provide the services the customer requests. The customer is responsible for having permission or another lawful basis to collect and use the information, providing appropriate privacy notices and meeting its marketing obligations.

If your information was supplied by a business using Made Connected, that business’s privacy policy also applies. You can contact that business about its use of your information, or contact us and we will help identify the appropriate way to handle your request.

Information we collect

The information we collect depends on your interaction with Made Connected and the features enabled for your account.

• Website registrations and enquiries: your name, email address, company, interest in development updates or beta access, correspondence, and records of your communication preferences and consent.
• Account and team information: your name, email address, profile image if provided, authentication identifiers, organisation and brand memberships, invitations, roles and permissions.
• Workspace content and activity: campaign briefs, tasks, documents, images, files, comments, approvals, schedules, assignments and activity history. These records may contain personal information about team members or other people.
• Customer contacts and audiences: names, email addresses, phone numbers, addresses, business details, time zones, birthdays if supplied, custom fields, tags, notes, preferences, consent records, subscription status and suppression records. Customers may also record purchases, enquiries, bookings or other interactions.
• Connected account information: account and page identifiers, names, permissions, connection credentials, published content identifiers and performance information supplied by connected services.
• Email and campaign activity: recipient and message identifiers, delivery status, bounces, complaints, unsubscribes and, where tracking is enabled, opens, clicks, clicked links and event times.
• AI interactions: prompts, conversation history, selected reference material, relevant workspace context, generated responses and information about your use of AI features. If you use voice input, this includes the audio needed for transcription and any transcript you submit.
• Commercial and support information: business contact details, billing contact or address, tax references if supplied, subscription arrangements, support requests and related records.
• Technical information: information needed to operate and protect the services, such as IP addresses, browser and device information, request times, error information, session information and security logs.

We do not require sensitive information, such as health information or information about religious beliefs, for ordinary use of Made Connected. We also do not ordinarily require government identification documents. Please avoid providing these details unless they are necessary for an agreed purpose and you have the required authority or consent.

How we collect information

We collect information directly when you complete a form, create an account, use the platform, upload content, connect a service, make a request or communicate with us.

We may also receive information from your organisation, workspace administrators, other authorised users, authentication providers and services that you or your organisation connect. For example, a customer may import a contact list or invite a colleague to a workspace.

Some information is generated automatically when you use the services, when a connected platform returns results, or when a delivery provider reports campaign activity.

You can browse public website content without creating an account. You may contact us anonymously or using a pseudonym where practicable. We may need identifying information to provide an account, verify a request or deliver a particular service. If required information is not provided, we may be unable to provide that feature or respond fully.

How we use information

We use personal information to:

• provide accounts, authenticate users and manage access to brands and workspaces;
• support campaign planning, content creation, collaboration, approvals and scheduling;
• manage customer contacts, preferences, consent and suppression records;
• carry out authorised publishing or sending actions through enabled integrations;
• provide campaign reports and operational records;
• respond to enquiries, provide support and administer customer relationships;
• send requested development updates, beta invitations and other permitted marketing;
• provide account, security and service communications;
• operate, troubleshoot and improve the services;
• prevent misuse, investigate security issues and maintain appropriate audit records; and
• meet legal obligations, resolve disputes and protect legitimate rights.

Customer contact lists are used to deliver the services requested by that customer.

Access within your organisation

Made Connected is a shared work environment. Content and activity may be visible to other users according to brand membership, task access and role permissions. For example, authorised colleagues may see your name, comments, assigned work, approvals and changes.

Authorised brand administrators may have access to workspace tasks, including tasks in a personal workspace. A group or billing role does not, by itself, give access to every brand’s content.

AI conversations are available to the person who created them within the product. Content that you choose to save from a conversation into a shared task, document or other workspace record follows that record’s access permissions.

Made Connected personnel and service providers may access information where needed for authorised support, service operation, security or legal purposes. Leaving a team or closing an individual account does not necessarily remove work or audit history held in the organisation’s workspace.

Facebook and Instagram connections

If your organisation enables our Meta integration, an authorised user can connect supported Facebook Pages and Instagram professional accounts.

We receive the selected business, page and account identities, granted permissions and access credentials. We use these to maintain the connection, publish or schedule authorised content, retrieve available account and post performance information, and maintain security and workflow records.

Publishing sends the selected text, media and associated information to Meta. Published content may become public, depending on the destination and its settings. This integration does not provide access to a personal messaging inbox.

Connection credentials are encrypted on our server. A brand manager can disconnect an account through Settings → Social accounts. Disconnecting removes usable connection credentials and stops future activity through that connection. It does not remove posts already published on Facebook or Instagram.

To request deletion of information held by Made Connected, email privacy@madeconnected.com and identify the relevant brand and connected account. Do not send passwords or access tokens. A deletion request may require verification and review; a request acknowledgement is not confirmation that all information has been deleted. We will explain the outcome and any information that needs to be retained. Use the relevant platform’s own controls to manage content or information it holds independently.

AI features and voice input

When you use an AI feature, your request and relevant information may be sent to our AI service provider, currently OpenAI, to produce a response. This can include your messages, selected reference material and workspace information you are authorised to access.

The assistant is not given general access to customer contact lists or recipient lists through its workspace tools. However, text or reference material you choose to submit may itself contain personal information. Please include only what is needed for the task.

If you enable web research, the AI provider may use search queries derived from your request to retrieve information from external search services. Avoid placing confidential or unnecessary personal information in requests that use this feature.

Voice input is optional and user initiated. Audio is processed for transcription. Made Connected does not retain the recording; a transcript you send is retained as part of the conversation.

Deleting a conversation removes its stored conversation content from the application. Workspace records you have confirmed or saved, along with associated audit and usage records, may remain.

OpenAI states that information submitted through its API is not used to train its models by default, unless the API customer opts in to sharing it for that purpose. For assistant requests, we switch off OpenAI’s optional response storage. OpenAI may still retain information for abuse monitoring, security and legal purposes under its applicable terms, generally for up to 30 days for relevant requests and potentially longer for legal or safety reasons. OpenAI’s published retention table lists no retention for audio transcription requests. See OpenAI’s API data controls for current details. Deleting information from Made Connected does not necessarily delete copies held by a provider under these arrangements.

AI-generated material can be inaccurate. Users should review it before relying on it, sharing it or taking an action.

Marketing and campaign tracking

If you sign up for Made Connected updates or beta communications, we use your details for the communications you requested or otherwise permitted by law. You can withdraw your consent by contacting us or using the unsubscribe option provided in a marketing message. We will action marketing unsubscribe requests within five working days.

Essential account, security and service messages may still be sent where needed to provide the service.

Messages sent by a business using Made Connected are that business’s communications. The business is responsible for the audience, consent and content. Use the unsubscribe instructions in its message or contact the sender about its marketing.

Where an enabled email service uses open or click tracking, a tracking image or tracked link can report interactions with a message. Made Connected uses the resulting information to provide campaign reporting and manage delivery, preferences and suppression. Blocking remote images may limit open tracking; clicking a tracked link can still record the interaction. Email privacy settings and automated security checks can affect the accuracy of these reports.

Cookies and browser storage

Our website and platform use browser storage and cookies to support sign-in, security, preferences and continuity between pages. For example, the website remembers whether you selected development updates or beta interest. The app may also temporarily save unfinished forms, contact details, campaign briefs or other drafts in your browser so that work can be recovered after navigation or interruption.

You can manage cookies and local storage through your browser. Blocking or clearing them may affect sign-in or remove locally saved work. On a shared device, sign out and clear site data when you finish, particularly if you have entered customer or confidential information.

Who we share information with

We disclose personal information where needed for the purposes described in this policy, including to:

• authorised users and administrators of the relevant organisation;
• providers of hosting, databases, file storage, authentication, email delivery, AI processing and other operational services;
• connected platforms when an authorised user requests an action or enables a connection;
• professional advisers where needed for advice, compliance or a dispute;
• regulators, courts, law enforcement or other parties where required or authorised by law; and
• parties involved in a proposed business sale, restructure or transfer, subject to appropriate confidentiality and privacy arrangements.

Our providers include Render for hosting and databases, Cloudflare for file storage, Clerk for authentication, Resend for enabled email delivery, OpenAI for AI features and Meta for enabled Facebook and Instagram connections.

A provider may also handle information for its own purposes under its privacy policy, particularly where you hold an account directly with that provider. Our disclosure to a provider does not remove our own responsibilities for the information we handle.

Overseas storage and processing

Made Connected is operated from Australia. We use service providers in Australia and overseas. Our current website, application and database hosting is configured in Singapore. Clerk and Resend store relevant authentication and email-service data in the United States. Cloudflare provides file storage through international infrastructure, and AI requests are processed through OpenAI’s API services.

Overseas processing therefore includes Singapore and the United States. Information may also be handled in other countries where our providers and their authorised subcontractors operate, including for support, security and service delivery. Selecting a hosting or sending region does not determine every location in which information is handled.

Further information about provider locations and international processing is available from Render, Clerk, Resend, Cloudflare and OpenAI. You can also contact privacy@madeconnected.com for information about the overseas handling relevant to your use of Made Connected.

Where applicable, we take reasonable steps required by Australian privacy law to protect personal information disclosed overseas. We do not treat your use of the service as blanket consent to waive those protections.

Security and retention

We use authentication, access permissions and technical controls designed to protect information against unauthorised access, misuse, loss and disclosure. Access is limited according to the role and purpose involved. No online service can guarantee absolute security.

If a data breach occurs, we will assess it, take appropriate steps to contain and address it, and notify affected people and regulators where required by law.

We retain personal information for as long as reasonably needed for the purpose for which it was collected. Retention depends on the service provided, the instructions of the organisation responsible for a workspace, the need to maintain consent and suppression records, and applicable legal, accounting, security and dispute-resolution requirements.

Different records may need different retention periods. Removing a user, archiving a contact, disconnecting a service or deleting a conversation does not necessarily delete all associated records. For example, an unsubscribe record may be needed to prevent further marketing, and shared campaign or approval history may remain part of an organisation’s records.

When information is no longer needed and there is no legal requirement to retain it, we will take reasonable steps to delete or de-identify it. Information removed from active systems may remain in backups until those backups are replaced or expire. Backup retention depends on the service provider and type of record. Registrations from an earlier version of our website may remain in the systems used for that version while we manage those registrations or respond to privacy requests.

Your requests and choices

You can email privacy@madeconnected.com or write to the address below to request access to personal information we hold about you, ask us to correct it, request deletion, withdraw a consent or raise a concern. Some details and preferences can also be updated through your account.

Please give us enough information to locate the relevant records, such as your account email address, organisation and the nature of your request. We may need to verify your identity or authority, but you should not send passwords or unnecessary identity documents.

We will respond within a reasonable period, generally aiming for 30 days. If we cannot provide access, make a correction or delete information, we will explain why, subject to any legal restriction, and explain how you can complain. Deletion may be limited by legal obligations, the rights of others or a continuing need to retain particular records.

Where information is held on behalf of a customer, we may coordinate with that customer to handle your request. You can still contact us directly about our own handling of your information.

Other privacy rights may apply depending on your location and the laws that apply to your relationship with Made Connected.

Privacy concerns and complaints

If you believe we have mishandled your personal information, email privacy@madeconnected.com or write to the address below. Please describe the concern, when it arose and how you would like us to resolve it.

We will acknowledge your complaint, investigate the relevant circumstances and aim to provide a substantive response within 30 days. If more time is needed, we will explain the reason and expected timing.

If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner where the matter falls within its jurisdiction. Information is available on the OAIC privacy complaints page. You may also have access to a relevant regulator in your country.

Changes to this policy

We may update this policy as our services, data practices or legal obligations change. The current version will be made available through our website or platform with an updated effective date.

For material changes, we will provide additional notice where appropriate or required by law. If a change requires a new consent, we will seek that consent separately.

Contact us

For privacy enquiries, access or correction requests, deletion requests or complaints, contact:

Privacy contact: Made Connected
Legal business name: WILSON OPERATIONS PTY LTD
ACN: 679 763 467
Email: privacy@madeconnected.com
Address: Unit 2, 304 West Coast Highway, Scarborough WA 6019, Australia