1. What Information We Collect

1.1 Information You Provide

When you create an account or use the Platform, we may collect:

·       First name, surname and email address at registration.

·       For Pro subscriptions purchased through the Platform, payment-related information. Payments are processed by Stripe and we do not directly store your payment or card details.

·       Brand copy, brand guidelines and any other content you upload to the Platform for analysis ("Your Content").

·       Account preferences, including whether you have chosen to receive marketing communications.

1.2 Information Collected Automatically

When you visit or use the Platform, technical information may be generated or processed as necessary to operate, secure and maintain the service, including session and authentication information and technical information associated with your use of the Platform. We also collect analytics data via Google Analytics to measure site visits, page interactions and usage patterns (see section 5).

2. How We Use Your Information

We use personal information to:

·       Create, authenticate and manage your account.

·       Provide the brand voice analysis and other Platform services you request.

·       Process Pro subscription payments and send billing-related communications.

·       Send transactional communications such as account, authentication, password reset and service notifications. These are initiated through Base44 and delivered using the Resend API.

·       Send product updates, tips, offers or other marketing communications where you have chosen to receive them. You may withdraw that choice at any time.

·       Operate, secure, maintain and improve the Platform.

·       Comply with legal obligations and protect our legal rights.

We do not use Your Content to train our own AI or machine learning models or for unrelated commercial purposes.

3. Your Content and AI Processing

When you submit content for a Check, relevant content is transmitted to the Anthropic API to generate the analysis and results requested by you. This processing is necessary to provide the service.

Anthropic processes commercial API data under its Commercial Terms and Data Processing Addendum. Under Anthropic's current terms for its commercial API services, API inputs and outputs are not used to train its models by default. Anthropic's standard API retention practices provide for automatic deletion of API inputs and outputs from its backend systems within 30 days, subject to limited exceptions described in Anthropic's applicable terms and policies.

Your Content and Check results may also be stored within the BrandVoice Platform so that they remain available through your account. You may delete individual Checks or close your account through Account Settings.

4. Disclosure of Your Information

We do not sell your personal information. We may disclose or make personal information available where reasonably necessary to operate the Platform, comply with law or protect legal rights.

4.1 Service Providers

·       Base44: Platform infrastructure, application hosting, authentication and related services.

·       Anthropic: AI processing used to analyse content submitted for BrandVoice Checks and generate results.

·       Stripe: Payment processing for Pro subscriptions purchased through the Platform. Stripe processes payment card information; BrandVoice does not directly store full payment card details.

·       Resend: Email delivery infrastructure used through Base44 for transactional communications and, if you have opted in, marketing communications.

Our service providers may process information in countries outside Australia. Further information about overseas processing is set out in section 6.

4.2 Legal Requirements

We may disclose personal information where required or authorised by law, court order or a government or regulatory authority, or where reasonably necessary to establish, exercise or defend legal rights or protect the rights, property or safety of BrandVoice, our users or others.

4.3 Business Transfers

If our business or relevant assets are involved in a merger, acquisition, restructure or sale, information may be transferred as part of that transaction, subject to applicable law.

5. Cookies and Similar Technologies

BrandVoice uses the following types of cookies and similar technologies:

Essential cookies: Required for authentication and session management. The Platform cannot function without these.

Analytics cookies (Google Analytics): We use Google Analytics to measure site visits, page interactions and usage patterns. Google Analytics sets cookies that send data to Google's servers in the United States. We have configured Google Analytics to anonymise IP addresses. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout or by adjusting your browser settings. Disabling analytics cookies will not affect your ability to use the Platform.

If we introduce additional non-essential cookies in the future, we will update this Privacy Statement and implement consent controls where required by applicable law.

We do not currently use Google Analytics. If we introduce optional analytics or other non-essential cookies in the future, we will update this Privacy Statement and implement consent controls where required by applicable law.

6. Overseas Processing

BrandVoice is operated from Australia. The following service providers process information outside Australia, including in the United States: Base44 (platform infrastructure), Anthropic (AI processing), Stripe (payment processing), Resend (email delivery) and Google (analytics). We take reasonable steps required by applicable Australian privacy law when disclosing personal information to overseas service providers, including under APP 8. Specifically: Base44 is SOC 2 Type II and ISO 27001 certified and we have a Data Processing Agreement in place with Base44, which is incorporated into their Terms of Service and includes Standard Contractual Clauses (SCCs) and coverage under the EU-US Data Privacy Framework. Anthropic's Data Processing Addendum is incorporated into their Commercial Terms of Service and includes recognised international transfer mechanisms including the European Commission Standard Contractual Clauses. Anthropic has confirmed in writing that API inputs and outputs are not used to train its models by default and are deleted from backend systems within 30 days. We will update this section if our service provider arrangements materially change.

7. Data Retention and Deletion

We retain personal information for as long as reasonably necessary to provide the Platform, meet legal and accounting obligations, resolve disputes and enforce agreements.

·       Account information and account preferences are generally retained while your account remains active.

·       Your Content and Check results are generally retained while associated with your active account unless you delete them earlier.

·       Payment and transaction records may be retained for periods required by Australian tax, accounting or other applicable laws.

·       When you close your account, BrandVoice initiates deletion of account content from active application records. Some information may remain temporarily in backups, logs or service-provider systems in accordance with their retention processes or where retention is required by law.

Before closing your account, you can download a copy of information associated with your account through Account Settings.

8. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. BrandVoice uses authentication and access controls and keeps API credentials server-side rather than exposing them to users. Our service providers also maintain security controls applicable to their services.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of an eligible data breach or other security incident affecting personal information, we will assess and respond to it in accordance with applicable law, including notification obligations where required.

9. Your Privacy Rights and Choices

Depending on where you are located and the privacy laws that apply to you, you may have rights in relation to your personal information. BrandVoice provides account holders with the ability to:

·       Access and download a copy of information associated with their account through Account Settings.

·       Correct certain account information.

·       Close their account and request deletion of associated content, subject to information we are required or permitted to retain.

·       Withdraw from marketing communications at any time using the unsubscribe mechanism or notification preferences.

You may also contact us to request access to or correction of personal information we hold about you, or to exercise any other privacy right available to you under applicable law. For Australian users, we handle access and correction requests in accordance with the Privacy Act 1988 (Cth) and the APPs where applicable.

10. Children

The Platform is not directed to persons under 18 and you must be at least 18 to create an account. If we become aware that personal information has been collected from a person who is not eligible to use the Platform, we will take appropriate steps.

11. Changes to This Privacy Statement

We may update this Privacy Statement from time to time. Where changes are material, we will take reasonable steps to notify registered users before the changes take effect. The current version is available at brandvoice.com.au/privacy.

12. Complaints

If you have a complaint about how we have handled your personal information, contact us first using the details below. We will investigate and respond within a reasonable period.

If you are not satisfied with our response and the Australian Privacy Act applies, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Contact Us

For privacy-related questions, requests or complaints: privacy@brandvoice.com.au

Website: brandvoice.com.au