Privacy policy

Last updated 25 August 2025

Brolly Australasia Pty Ltd (“Brolly”, “we”, “us”, “our”) is committed to protecting the privacy and confidentiality of information it collects from customers, website users, providers and contractors.

This privacy policy covers both:

• our communication, sales and marketing channels including the Brolly website, our email newsletter and the Brolly social media channels; and
• the Brolly social media archiving platform (“Brolly”).

This policy is subject to change by us from time to time. Any such change will be uploaded to our website, so you should review this policy periodically.

Collection

Website and communications

In most circumstances we collect information directly from you. This may occur through information submitted to our website, information obtained during interaction with our website, correspondence, email, in person or by telephone. We may also obtain information from third parties such as previous providers and credit references.

Personal information held by us may include your name, date of birth, current and previous addresses, telephone or mobile phone number, email address, ABN, bank account or credit card details, occupation, driver’s licence number, username or password. We may also hold details of products or services you have purchased from us, as well as certain details about your personal interests.

You may also provide personal information about other individuals to us (for example authorised representatives or team members). If so, we rely on you to inform those individuals that you are providing their personal information to us and to advise them about this privacy policy.

Brolly platform

In order to use the Brolly platform we may require you to provide certain information. This includes information required to create an account unique to you (such as your name and email address) and preference information.

We use this information to provide you with social media archiving, compliance and related services, including alerts and notifications necessary for the service to function correctly.

How we collect your information

If you choose not to provide certain information, we may not be able to provide you with the products or services you require, or the level of service on which we pride ourselves.

Website and communications

We may collect your information in a number of ways, including:

• directly from you (such as by email, post, telephone, face-to-face interactions, through our reseller channel including wholesalers and partners, or when you interact with our website or social media channels);
• from third parties such as related entities, business partners, credit reporting bodies, other customers or your representatives;
• from publicly available sources;
• from records relating to your use of our products or services; and
• where legally authorised or required to do so.

Brolly platform

Within the Brolly platform we collect information when you:

• sign up for a trial;
• subscribe to a paid plan;
• connect third party services; or
• invite team members into your Brolly account.

Purpose of collection

Information may be collected to provide you with our goods and services and to support the ongoing provision of those services.

We may also use your information:

• to maintain and improve our products and services;
• to communicate with you;
• to provide support and account management;
• to conduct billing and payment processing;
• to comply with legal and regulatory obligations;
• for security, fraud prevention and service monitoring;
• for internal analytics and product improvement; and
• to provide marketing communications where permitted by law.

Use and disclosure of information

We use and disclose your information for the primary purpose for which it was collected and for related purposes reasonably expected by you.

Purposes for which we may use or disclose your information include:

• maintaining and improving website functionality and services;
• customer support and relationship management;
• invoicing and debt recovery;
• responding to enquiries;
• sending technical, administrative or legal notices;
• conducting market research and surveys;
• marketing communications, events and promotions;
• maintaining business operations; and
• changes to our business structure or ownership.

We may disclose your information to:

• your authorised representatives;
• service providers, contractors and suppliers;
• payment processors and cloud service providers;
• professional advisers including accountants, auditors and lawyers;
• related entities and business partners;
• government, regulatory and law enforcement authorities where required or authorised by law; and
• organisations involved in the management or transfer of our business.

We do not sell User Data.

We only process User Data obtained through third-party social media platforms (including Meta, Google/YouTube, X/Twitter and LinkedIn) for purposes clearly described in this policy and in accordance with each platform’s applicable terms and policies.

Use of cookies

We may collect statistical information about website usage through cookies and related technologies. Cookies help us improve our website and user experience.

You may configure your browser to refuse cookies, however some parts of the website may not function correctly if cookies are disabled.

Third-party advertisers or partners may also use cookies over which we have no control.

Use of third parties to provide services

Website and communications

We may use third-party providers to host services, process payments, send communications, conduct analytics and support our operations. This may involve transmitting, storing or processing information outside Australia.

By using our services, you consent to such transfers where permitted by law.

Brolly platform

To provide archiving and compliance services, Brolly accesses third-party social media services using APIs (Application Programming Interfaces).

These APIs allow Brolly to retrieve and process information from the social media accounts you connect to Brolly.

Each third-party provider maintains its own privacy policy:

• Google Privacy Policy (YouTube services): https://policies.google.com/privacy
• Meta (Facebook and Instagram) Privacy Policy: https://www.facebook.com/privacy/policy/
• X (formerly Twitter) Privacy Policy: https://x.com/en/privacy
• LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Data obtained from Meta platforms

Brolly only accesses Meta-owned accounts and content that the customer has explicitly authorised through Meta’s authentication and permission systems.

When you connect a Facebook Page, Instagram business account or other Meta-owned property to Brolly, Brolly uses Meta’s Graph API and related developer APIs to retrieve content and metadata associated with the accounts you have authorised.

This may include:

• posts, comments, reactions and replies published on the connected Page or account;
• images and videos attached to those posts or comments;
• account, Page and post metadata including post IDs, creation and last-modified timestamps, and visibility status; and
• Facebook Page inbox messages (Messenger conversations) where you have explicitly authorised access through Meta’s permission system.

This data is retrieved solely to provide the archiving and compliance-related services you have subscribed to.

Where Facebook Page inbox messages are archived, they are stored separately from public content within the Brolly platform and are subject to the same retention, deletion and access controls as other archived data.

Brolly processes Meta Platform Data solely for purposes permitted under the Meta Platform Terms and applicable law.

We do not use Meta-sourced data to build advertising profiles, and we do not sell or share Meta-sourced data with third parties for their own marketing purposes.

YouTube and Google account permissions

If you use Brolly to archive YouTube records, you may revoke Brolly’s access to your Google account at:

https://myaccount.google.com/permissions

Data retention

We retain personal information and archived content for as long as you maintain an active subscription to the relevant service, plus any additional retention period configured within your account settings.

When your subscription ends, or when you request deletion under the section below, we will delete or anonymise relevant data within a reasonable timeframe unless we are required by law to retain it for a longer period.

Security of information

The secure storage and handling of information is important to us and we take reasonable steps to protect information from misuse, interference, loss, unauthorised access, modification or disclosure.

However, no method of transmission or storage is completely secure and we cannot guarantee absolute security.

All staff with access to personal information are subject to confidentiality obligations.

For more information about security measures within the Brolly platform, please refer to our Security and Compliance page.

Accuracy of personal information

We take reasonable steps to ensure the information we collect is accurate, complete and up to date.

If your circumstances change or you believe information we hold is inaccurate, incomplete or outdated, please contact us and we will take reasonable steps to correct it.

Access

You may request access to personal information we hold about you.

Access may be limited where permitted or required by law. If access is denied, we will provide reasons where required by applicable law.

A reasonable fee may apply for providing access to records.

Meta Platform Data Deletion Instructions

If you wish to request deletion of your personal information or Meta Platform Data, you may do so by:

• emailing privacy@brolly.com.au with the subject line “Data Deletion Request”; or
• contacting our customer support team and providing details of your request.

If you have connected a Facebook or Instagram account to Brolly, you may also revoke Brolly’s access directly through your Meta account settings.

We will respond to verified deletion requests within a reasonable timeframe and will permanently delete or anonymise applicable data unless retention is required by law.

Contacting us

If you have any questions, concerns or complaints regarding this privacy policy or our privacy practices, please contact:

privacy@brolly.com.au

We aim to respond to privacy enquiries within 48 hours.