This Privacy Policy explains how we collect, hold, use, disclose and protect personal information, and how we handle data accessed through third-party APIs, including Google APIs.
Brainbow Industries is a business operated by COSTMEI Pty Ltd (ABN 34 643 789 646) (we, us, our). We operate the website at www.brainbowindustries.com (Website) and develop a suite of software products and tools (Products), including PRIME, our content marketing platform.
We are bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). By using the Website or our Products, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Website or Products.
Legal
Privacy Policy
1. Information we collect
Information you provide
When you contact us through the Website or engage with us about a Product, we may collect your name, business name, email address, phone number, and the content of your enquiry or correspondence.
Information collected automatically
When you visit the Website, we may collect technical information such as your IP address, browser type, device information, referring pages, and pages viewed. This is used to operate and improve the Website and to keep it secure.
Client and end-user data processed through our Products
Where a client engages us to use a Product on their behalf, we process data the client authorises us to access in order to deliver the service. For our PRIME platform, this includes marketing content, brand information, publishing schedules, engagement metrics, and, where the client connects their accounts, data from third-party platforms such as Google Business Profile and social media services. We process this data as the client's service provider, on their instructions.
2. Data accessed through Google APIs
Some of our Products connect to Google services (including Google Business Profile) on behalf of clients who explicitly authorise that connection through Google's OAuth consent flow. When a client grants access, we may access, store and process Google user data solely to provide the requested features, for example, to draft, schedule and publish approved posts to a client's Google Business Profile, and to retrieve related performance data.
Brainbow Industries' use and transfer of information received from Google APIs to any other application will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.
Specifically, data obtained through Google APIs:
is used only to provide or improve the user-facing features for which the user granted access
is not sold, and is not used or transferred for advertising, including retargeting or personalised/interest-based advertising
is not transferred to third parties except as necessary to provide or improve the features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with user notice and consent where required; and
is not read by humans unless we have the user's affirmative agreement for specific data, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymised for internal operations.
A client may revoke our access to their Google data at any time through their Google Account permissions, or by contacting us to disconnect the integration.
3. How we use information
We use personal information to:
respond to your enquiries and communicate with you;
provide, operate, maintain and improve the Website and our Products;
deliver services to clients in accordance with our agreement with them;
keep our systems and services secure and prevent misuse; and
comply with our legal obligations.
4. Disclosure of information
We do not sell personal information. We may disclose information to:
Service providers who help us operate our Website and Products (such as hosting, infrastructure and publishing providers), bound to use it only for the purposes we specify;
The relevant client, where the information is processed on their behalf;
Authorities or third parties where required or authorised by law; and
A successor entity in connection with a merger, acquisition or sale of assets, with notice and consent where required.
5. Storage and security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data retention and deletion
We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, to provide our services, and to meet legal, accounting or reporting requirements. Where we process data on a client's behalf, we retain it in accordance with our agreement with that client and delete or return it on request or when the engagement ends. You may request deletion of your personal information, or of Google data associated with a connected account, by contacting us using the details below.
7. Overseas disclosure
Some of our service providers may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure the information is handled consistently with the Australian Privacy Principles.
8. Access and correction
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period. In limited circumstances permitted by law we may decline a request, and if we do we will tell you why.
9. Cookies
The Website may use cookies and similar technologies to operate correctly and understand how it is used. You can control cookies through your browser settings; disabling them may affect how parts of the Website function.
10. Complaints
If you have a concern about how we have handled your personal information, please contact us first using the details below and we will endeavour to resolve it. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
11. Changes to this Policy
We may update this Policy from time to time. Changes take effect when we publish the updated version on this page, and we will revise the "Last updated" date accordingly. We encourage you to review this page periodically.
12. Contact us
For any question or request about this Policy or your personal information:
Brainbow Industries (COSTMEI Pty Ltd, ABN 34 643 789 646)
Email: hello@brainbowindustries.com
Or use the Contact link on our homepage.