Privacy Policy

1. Who we are

PostPanel is operated by Maggie Harrison trading as PostPanel (ABN 70 311 015 024).

PostPanel provides a service that allows customers to submit draft social media content and receive feedback from real people selected according to audience criteria chosen by the customer.

For privacy enquiries, requests or complaints, contact:

2. Information we collect

Depending on how you interact with PostPanel, we may collect the following categories of information.

Contact and customer information

This may include your first and last name, business name, email address, country and other information you provide when using PostPanel.

Content and submission information

When you request feedback, we may collect:

• images, videos and carousel content you upload;
• social media captions;
• the intended social media platform and post type;
• the purpose or goal of the post;
• target audience selections, such as country, age range, gender and parent status;
• descriptions you provide about your intended audience;
• specific feedback questions you choose to ask; and
• other information you voluntarily include in a submission.

Payment and transaction information

Payments may be processed by third-party payment providers such as Stripe. PostPanel may receive transaction information such as payment status, amount, currency, transaction or checkout identifiers and related purchase information.

Where payment details are collected directly by our payment provider, PostPanel does not receive or store your complete payment card number.

Reviewer information

We may collect ratings, written responses and other feedback submitted by reviewers, together with identifiers and information necessary to administer, validate and connect a review to the appropriate PostPanel submission.

Communications

We may collect information contained in emails, support requests or other communications you send to us.

Technical and usage information

When you interact with our website or services, PostPanel or our technology providers may collect technical information such as IP address, browser and device information, website activity, timestamps and other diagnostic, security or usage information.

3. How we collect information

We may collect information:

• directly from you when you complete a form, submit content, make a purchase or contact us;
• from reviewers when they provide feedback;
• from service providers involved in processing payments, recruiting reviewers or operating PostPanel;
• automatically through our website, application and supporting technology; and
• where otherwise permitted or required by applicable law.

Where information is identified as required, we may be unable to provide the relevant PostPanel service if you choose not to provide it. Optional information does not need to be provided unless you wish to do so.

4. How we use information

We may use personal information to:

• provide and operate PostPanel;
• process customer submissions;
• recruit or match reviewers according to selected audience criteria;
• display submitted content to selected reviewers;
• collect and organise reviewer ratings and written feedback;
• calculate PostPanel Scores and other report metrics;
• prepare feedback summaries and reports;
• process and verify payments;
• deliver completed results;
• send transactional and service-related communications;
• respond to enquiries and provide customer support;
• maintain and improve our services;
• secure PostPanel and prevent fraud, misuse or unauthorised activity;
• maintain appropriate business and transaction records; and
• comply with applicable legal and regulatory requirements.

5. Content you submit for review

PostPanel is designed to allow customers to obtain feedback on draft social media content before publication.

To provide this service, content submitted to PostPanel will be made available to a limited number of selected reviewers. This may include submitted images, videos, captions and information relevant to the intended audience or purpose of the content.

Reviewers require access to this information in order to provide the feedback requested by the customer.

Responsibility for submitted content

You are responsible for ensuring that you have all necessary rights, permissions, consents and lawful authority to upload and submit content to PostPanel and to allow that content to be processed and shown to reviewers for the purpose of providing the PostPanel service.

You must not submit sensitive personal information, confidential information or personal information about another person unless you are authorised and legally permitted to do so.

PostPanel may remove or decline to process content where we reasonably believe it may infringe another person's privacy, intellectual property or other rights, violate these requirements, or where processing the content may breach applicable law.

6. Sensitive information

PostPanel is not designed to collect sensitive or special category personal information, such as information concerning health, racial or ethnic origin, religious or philosophical beliefs, political opinions, sexual orientation, biometric information or other information afforded additional protection under applicable privacy laws.

Please do not intentionally submit this type of information unless PostPanel has expressly requested it and an appropriate lawful basis exists for its processing.

7. Reviewers

PostPanel may use third-party research and participant platforms, including Prolific, to recruit reviewers.

We may receive participant identifiers and other information required to administer participation and connect feedback with the correct submission.

Customer-facing PostPanel reports identify reviewers generically, for example as "Reviewer 1", "Reviewer 2" and so on, rather than displaying reviewer names.

8. Artificial intelligence and automated processing

PostPanel uses automated technologies to assist in delivering parts of the service.

For example, artificial intelligence may be used to organise or summarise written feedback provided by human reviewers.

The underlying opinions and feedback provided through PostPanel come from human reviewers. Automated systems may assist with processing and summarising that information but do not replace the human reviewers who provide the underlying feedback.

PostPanel may use third-party artificial intelligence providers, including OpenAI, to provide these functions.

PostPanel may also use automated systems to calculate scores, organise results, manage workflows and deliver reports.

PostPanel does not use customer-submitted social media content to train a proprietary PostPanel artificial intelligence model.

9. Legal bases for processing — United Kingdom

Where UK data protection law applies, we process personal information where we have an appropriate lawful basis.

Depending on the circumstances, this may include:

The legal basis applicable to a particular activity depends on the nature and purpose of that processing.

10. Right to object — United Kingdom

Where UK data protection law applies, you may have the right to object to processing based on legitimate interests.

You also have the right to object at any time to the use of your personal information for direct marketing.

To exercise this right, contact support@postpanel.co.

11. Third-party service providers

PostPanel relies on third-party providers to operate and deliver the service.

These may include providers involved in:

• payment processing, including Stripe;
• reviewer recruitment and research participation, including Prolific;
• artificial intelligence and data processing, including OpenAI;
• email and business communications, including Microsoft;
• website, application, database, form and hosting infrastructure; and
• security, analytics and other technology services.

These providers may process information on our behalf or as otherwise necessary to provide their services.

We seek to limit information provided to third parties to information reasonably necessary for the relevant service.

Third-party providers may also be subject to their own privacy policies and legal obligations.

12. International processing and transfers

PostPanel is based in Australia and operates an online service across multiple countries.

Personal information may therefore be processed, stored or accessed outside the country in which you live, including in Australia and in countries where our service providers, infrastructure providers or reviewers operate.

Where required by applicable privacy law, we take reasonable steps or use appropriate safeguards in connection with international transfers of personal information.

For Australian users, personal information may be disclosed to overseas recipients where required to provide PostPanel's services.

For New Zealand users, where the New Zealand Privacy Act 2020 applies to an overseas disclosure, we will take steps required under that Act in relation to appropriate privacy safeguards.

Where UK data protection law applies to an international transfer, we will use an applicable transfer mechanism where required, which may include applicable adequacy regulations, contractual safeguards or another legally permitted mechanism.

You may contact us at support@postpanel.co if you would like further information about international processing relevant to your personal information.

13. Payments

Payments for PostPanel may be processed by Stripe or another payment provider.

The payment provider may collect payment card details, billing information and other information directly from you.

PostPanel may receive information about your transaction, including payment status, amount, currency and transaction identifiers, but does not receive or store your complete payment card details where those details are collected directly by the payment provider.

Payment providers handle information in accordance with their own privacy terms and legal obligations.

14. Cookies and similar technologies

PostPanel and providers supporting our website may use cookies and similar technologies where necessary to operate and secure the website, remember preferences, understand how the service is used or improve PostPanel.

Where applicable law requires consent for a particular cookie or similar technology, we will request that consent before using it.

You may also be able to manage cookies using your browser settings.

15. Data security

We take reasonable technical and organisational measures designed to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

Information may be stored or processed using third-party cloud and technology providers.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

16. Data breaches

If we become aware of a data breach involving personal information, we will assess and respond to the incident and provide notifications to affected individuals and/or relevant regulators where required by applicable law.

17. How long we retain information

We retain personal information and submitted content for as long as reasonably necessary for the purposes for which it was collected, including providing PostPanel services, maintaining appropriate transaction and business records, responding to disputes, maintaining security and complying with legal obligations.

Retention periods may vary depending on the type of information, the reason it is held and applicable legal requirements.

When information is no longer reasonably required, we may delete, destroy or de-identify it, subject to legal, technical and operational requirements.

18. Your privacy rights

Your privacy rights may vary depending on where you live and which privacy laws apply.

Australia

Where applicable, you may request access to personal information we hold about you and request correction of inaccurate or out-of-date information. You may also raise a complaint about our handling of personal information.

New Zealand

Where the New Zealand Privacy Act applies, you may have rights including the right to request access to and correction of personal information held about you and to raise a privacy complaint.

United Kingdom

Where UK data protection law applies, you may have rights including, subject to applicable conditions and exceptions:

• the right to access your personal information;
• the right to request correction;
• the right to request deletion;
• the right to request restriction of processing;
• the right to object to certain processing;
• the right to data portability in applicable circumstances;
• rights relating to certain automated decision-making; and
• the right to withdraw consent where processing is based on consent.

You may also have the right to lodge a complaint with the UK Information Commissioner's Office.

United States

Depending on the state in which you live and whether the relevant law applies to PostPanel, you may have rights relating to your personal information, such as rights to access, correct or delete certain information or obtain information about how it is used or disclosed.

We will respond to valid privacy requests as required by applicable law.

To make a privacy request, contact support@postpanel.co. We may need to verify your identity before completing a request.

19. Sale of personal information

PostPanel does not sell personal information in exchange for money.

If our practices change, or if applicable law defines "sale", "sharing" or similar concepts more broadly in a way that applies to our activities, we will update our disclosures and provide any rights or choices required by law.

20. Marketing communications

If PostPanel sends marketing communications, we will do so in accordance with applicable requirements.

Where required, we will obtain consent before sending electronic marketing.

You can unsubscribe from marketing communications using the unsubscribe option provided in the communication or by contacting us.

Service-related communications, such as payment confirmations, review updates and completed feedback reports, are separate from marketing communications and may still be sent where necessary to provide the service.

21. Other circumstances in which information may be disclosed

We may disclose personal information where reasonably necessary to comply with applicable law, regulation, legal process or lawful governmental request; to establish, exercise or defend legal rights; to investigate fraud, security issues or misuse of PostPanel; or to protect the rights, property or safety of PostPanel, our users or others.

If PostPanel or its business or assets are sold, transferred, merged, reorganised or otherwise involved in a business transaction, information may be transferred as part of that transaction, subject to applicable privacy requirements.

22. Children

PostPanel is intended for businesses, creators, marketers and other adult users. It is not intended for use by children.

Customers should not submit personal information relating to children unless they have the necessary authority and an appropriate legal basis to do so.

23. Privacy complaints

If you have a concern about PostPanel's handling of personal information, contact:

support@postpanel.co

Please provide enough information for us to understand and investigate your concern.

We will endeavour to acknowledge and respond to privacy complaints within a reasonable period and in accordance with applicable requirements.

Depending on where you live, you may also have the right to contact your local privacy or data protection regulator.

In Australia, this may include the Office of the Australian Information Commissioner (OAIC).

In New Zealand, this may include the Office of the Privacy Commissioner.

In the United Kingdom, this may include the Information Commissioner's Office (ICO).

24. UK representative

If PostPanel is required under UK data protection law to appoint a representative in the United Kingdom, the representative's contact details will be made available in this Privacy Policy or otherwise as required by law.

25. Third-party links

Our website may contain links to websites or services operated by third parties.

PostPanel is not responsible for the privacy practices of independent third parties. We encourage you to review their privacy information when interacting with their services.

26. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to PostPanel, our service providers, our information-handling practices or applicable laws.

The current version will be published on our website and will show the date it was last updated.

27. Contact us

Questions, requests or complaints relating to privacy can be directed to: