Privacy Policy

1. What Information We Collect

We collect the following categories of information:

• Account and contact information — your name, business name, email address, phone number, and password (stored in hashed form).
• Business profile information — information about your business that you provide or that we access from your Google Business Profile, such as business name, address, categories, hours, descriptions, photos, posts, reviews, and performance metrics.
• Google account data — where you connect your Google account, we access certain data via Google APIs (see section 6).
• Payment information — when you subscribe, payment is processed by a third-party payment provider. We do not store full card details on our systems; we retain limited billing records such as transaction history and the last four digits of your card.
• Usage and device information — information about how you use the Service, including log data, IP address, browser type, device information, pages visited, and actions taken, collected via cookies and analytics tools (see section 11).
• Communications— records of your correspondence with us, including support enquiries.

2. How We Collect Information

We collect information:

• directly from you when you register, subscribe, or contact us;
• automatically as you use the Service (e.g. via cookies and analytics);
• from Google APIs when you authorise a connection; and
• from third-party service providers, such as our payment processor.

Where reasonable and practicable, we collect personal information directly from you.

3. Why We Collect, Hold, and Use Your Information

We use your information to:

• provide, operate, and maintain the Service;
• create and manage your Account;
• generate AI suggestions, review responses, and posts on your behalf;
• connect to and manage your Google Business Profile as you direct;
• process payments and manage subscriptions;
• provide customer support;
• send service-related communications;
• send marketing communications where permitted (you can opt out at any time — see section 10);
• analyse and improve the Service; and
• comply with our legal obligations.

We will only use your information for the purposes for which it was collected, a related purpose you would reasonably expect, or as permitted or required by law.

4. Artificial Intelligence Processing

The Service uses AI models — including those operated by third-party AI providers — to generate content. To do this, relevant Customer Content (such as your business details and reviews) is sent to these providers to produce AI Output.

We do not permit your Customer Content or Google account data to be used to train third-party AI models, and we configure our integrations accordingly where such controls are available.

5. Disclosure of Your Information

We do not sell your personal information. We may disclose it to:

• Service providers and subprocessors who help us operate the Service, including cloud hosting and infrastructure providers, payment processors, AI providers, analytics providers, and email delivery providers;
• Google, when you direct us to update or post to your Google Business Profile;
• Professional advisers such as lawyers and accountants;
• Purchasers in connection with a sale or restructure of our business; and
• Authorities where required or authorised by law.

We require our service providers to handle personal information consistently with this Policy and applicable law.

6. Google User Data — Access, Use, Storage, and Limited Use

When you connect your Google account, we access certain Google user data through Google APIs (for example, your Google Business Profile information, reviews, posts, and performance insights).

How we use Google user data: solely to provide and improve the user-facing features of the Service that you have requested — such as auditing your profile, generating and (with your approval) publishing posts and review responses, and displaying performance data.

How we store it: Google user data is stored securely and only for as long as needed to provide the Service. You may disconnect your Google account at any time, after which we will cease accessing new data and delete or de-identify retained Google user data within a reasonable period, except where retention is required by law.

Limited Use commitment: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:

• use Google user data for serving advertising;
• transfer or sell Google user data to third parties except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger or acquisition; or
• allow humans to read Google user data unless we have your consent for specific messages, it is necessary for security or to comply with law, or the data has been aggregated and de-identified.

We do not use Google user data to train generalised or third-party AI/ML models.

7. Overseas Disclosure

Some of our service providers (including hosting and AI providers) may store or process your information outside Australia, including in the United States and the European Union. Where we disclose information overseas, we take reasonable steps to ensure recipients handle it consistently with the APPs.

8. Data Security

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification, or disclosure — including encryption in transit, access controls, and secure infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we will take reasonable steps to destroy or de-identify it.

10. Marketing and Communications

We may send you marketing communications about the Service where permitted by law. Every marketing email includes an unsubscribe link, and you can opt out at any time by following that link or contacting us. We will continue to send you service-related communications (such as billing and security notices) even if you opt out of marketing. Our practices comply with the Spam Act 2003 (Cth).

11. Cookies and Analytics

We use cookies and similar technologies to operate the Service, remember your preferences, and understand usage. We may use third-party analytics tools to help us measure and improve performance. You can control cookies through your browser settings, though disabling them may affect how the Service works.

12. Accessing and Correcting Your Information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, or misleading. Contact us using the details in section 15. We will respond within a reasonable period. In limited circumstances we may decline a request as permitted by law, and we will tell you why.

13. Complaints

If you believe we have breached the APPs or mishandled your personal information, please contact us first using the details in section 15, and we will investigate and respond within a reasonable time.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

14. Children

The Service is intended for businesses and is not directed at individuals under 18. We do not knowingly collect personal information from children.

15. Contact Us

For privacy questions, requests, or complaints, contact our Privacy Officer:

BIG BANG LABS PTY LTD
ACN 685 247 438
Email: bigbanglabsco@gmail.com

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date, and for material changes we will provide reasonable notice. Your continued use of the Service after changes take effect constitutes acceptance.