Privacy Policy

Effective date: 30 May 2026

Curatebase Pty Ltd ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose personal information when you use Curatebase ("Service"). We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

1. Who We Are

Curatebase Pty Ltd is an Australian-registered company operating the Curatebase platform. Our primary point of contact for privacy matters is: hi@curatebase.com

2. Information We Collect

We collect the following categories of personal information:

Account Information:

• Name and email address
• Company name
• Password (stored as a one-way hash — we cannot read it)

Billing Information:

• Payment card details (processed and stored by Stripe — we do not store raw card data)
• Billing address and invoice history

Social Media Account Data:

• OAuth tokens for connected social media accounts (LinkedIn, X, Instagram, Facebook, Bluesky), held by Zernio on our behalf
• Social profile identifiers and connected page/account names

Content Data:

• Posts you create, draft, schedule, or publish through the Service
• Post analytics data including impressions, reach, engagement, clicks, and Earned Media Value
• Engagement data from third-party sources including Trigify

Usage and Technical Data:

• IP address, browser type, operating system, and device identifiers
• Pages viewed, features used, and actions taken within the Service
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use your personal information to:

• Create and manage your account and workspace
• Provide, operate, and improve the Service
• Process payments and manage billing
• Send transactional emails including receipts, trial reminders, and payment failure alerts (via Resend)
• Provide customer support
• Analyse usage patterns to improve the Service
• Comply with legal obligations

We do not use your content to train AI models, and we do not sell your personal information to third parties.

4. AI Processing

The Service uses AI to power features including content remixing and generation. When you use these features, your content (posts, brand voice settings, and related inputs) is processed by AI systems. This processing occurs:

• To generate or rewrite content as requested by you
• Only in the context of your specific request
• Without being used to train or improve AI models

AI processing may involve transmission to third-party AI infrastructure providers. These providers are contractually bound to process your data only for the purpose of delivering the requested service.

5. How We Share Your Information

We share personal information only with the following third-party service providers, strictly for the purpose of delivering the Service:

Zernio

Handles social media account connections and publishing. Processes OAuth tokens and content on our behalf.

Stripe

Processes all payment transactions. Stores payment card data under PCI-DSS compliance. Subject to Stripe's Privacy Policy

Analytics Providers

We use analytics tools including Google Analytics and similar services to understand how the Service is used. These tools may collect anonymised usage data via cookies. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

We do not share your personal information with any other third parties, and we do not sell personal information.

6. Data Retention

We retain your personal information for as long as your account is active. Specifically:

• Account data, post content, and analytics data are retained for the duration of your workspace.
• When a workspace is deleted, all associated data is permanently deleted within 30 days.
• Billing records may be retained for up to 7 years to comply with Australian taxation and financial record-keeping obligations.
• Server logs are retained for up to 90 days for security and troubleshooting purposes.

7. Cookies and Tracking

We use cookies and similar technologies on our website and within the Service for the following purposes:

• Essential cookies: required for the Service to function, including authentication and session management.
• Analytics cookies: used to understand how visitors use our website (e.g. Google Analytics).
• Preference cookies: used to remember your settings and preferences.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit using TLS
• Encryption of data at rest
• Access controls limiting employee access to personal data
• Regular security reviews

No system is completely secure. If you believe your account has been compromised, contact us immediately at hi@curatebase.com.

9. Your Rights

Under the Australian Privacy Act and Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request deletion of your personal information (subject to legal retention obligations)
• Complain about how we handle your personal information

To exercise any of these rights, contact us at hi@curatebase.com. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Cross-Border Data Transfers

Some of our service providers (including Stripe, Resend, and AI processing infrastructure) are located outside Australia. When we transfer personal information to these providers, we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles, including contractual protections.

11. Children

The Service is not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us at hi@curatebase.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email to your registered address. The updated policy will be effective from the date specified in the notice. Continued use of the Service constitutes acceptance of the updated policy.

13. Contact Us

For any privacy questions, access requests, or complaints:

Curatebase Pty Ltd

Email: hi@curatebase.com

These documents were last updated on 30 May 2026. They do not constitute legal advice. We recommend consulting a qualified Australian lawyer before publishing these on your website.