Privacy Policy

1. Who this Policy applies to

This Policy applies to:

• Account holders / managers — social media managers and agencies who create an account and use the Service.
• Clients / reviewers — people who review content via a magic link (typically a business contact of an account holder).
• Website visitors — anyone who visits our website.

If you are a client reviewing content, the account holder who invited you is responsible for the content they share with you; we process that information on their behalf.

2. What personal information we collect

We only collect personal information that is reasonably necessary for our functions and activities. Depending on how you use the Service, this may include:

• Account information: your name, email address, and a securely hashed password.
• Business / profile information: your company or agency name, location, team size, role, and the goals you tell us during onboarding.
• Billing information: your billing name and address, ABN (if provided), and subscription details. We do not store your full card details — card payments are processed securely by our payment provider, Stripe (see Section 6).
• Content you upload: images, short videos, captions, hashtags, scheduling details and notes you add to posts, and the email addresses of clients you invite to review content.
• Communications: messages, feedback, and support requests you send us.
• Technical and usage information: IP address, device and browser type, operating system, pages visited, referring pages, and how you interact with the Service (see Section 7).

We do not intentionally collect sensitive information (such as health, racial, political or religious information). Please do not upload sensitive information unless it is necessary and you have a lawful basis to do so.

3. How we collect personal information

• Directly from you — when you create an account, complete onboarding, upload content, subscribe to a paid plan, or contact us.
• Automatically — through cookies and similar technologies when you use our website and platform (see Section 7).
• From third parties — for example, our payment provider may confirm a successful payment, and if you connect your Google or Microsoft account to send email, we receive limited information from that provider to enable that feature.

Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym; however, we generally cannot provide the Service without an account.

4. Why we collect, hold, use and disclose your information

We use your personal information to:

• create and manage your account and verify your email address;
• provide, operate, maintain and improve the Service;
• process payments and manage subscriptions;
• send content-approval requests, reminders, and transactional emails;
• respond to your enquiries and provide customer support;
• understand how the Service is used and improve usability and performance;
• protect the security and integrity of the Service and prevent fraud or misuse; and
• comply with our legal obligations.

We will only use or disclose your personal information for the purpose for which it was collected, a related purpose you would reasonably expect, or as otherwise permitted or required by law.

5. Direct marketing

We may occasionally send you product updates or marketing communications about features that may be of interest to you. You can opt out at any time by using the unsubscribe link in the email or by contacting us. We will not use sensitive information for direct marketing, and we do not sell your personal information.

6. Disclosure to third parties and service providers

We do not sell your personal information. We disclose personal information to trusted service providers who help us operate the Service, only as needed to perform their functions, and under obligations of confidentiality and data protection. These include:

• Stripe — payment processing and subscription billing.
• Resend — sending transactional and notification emails.
• Vercel — website and application hosting, performance and analytics.
• Supabase — database hosting.
• Cloudflare R2 — storage of uploaded images and files.
• Mux — video processing and delivery.
• Microsoft Clarity — product analytics and session replay (see Section 7).
• Google / Microsoft — only if you choose to connect your email account to send notifications from your own address.

We may also disclose personal information where required or authorised by law, to enforce our terms, or to protect the rights, property or safety of OK Social, our users, or others.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling some cookies may affect functionality.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors use OK Social so we can improve it. Clarity is a product analytics and session-replay service provided by Microsoft Corporation. It uses cookies and similar technologies to capture how you interact with our site — including mouse movements, clicks, scrolling, and pages visited — and combines this into aggregated heatmaps and anonymised session recordings.

This data helps us identify usability issues and improve the experience. We configure Clarity to mask text and form inputs, so information you type (such as your name, email address, password, or payment details) is not captured in recordings.

Clarity may collect technical information such as your device type, browser, operating system, approximate location (derived from your IP address), and referring pages. Microsoft processes this information as described in the Microsoft Privacy Statement and the Clarity terms.

You can opt out of analytics tracking by using your browser's privacy settings or a "Do Not Track" / cookie-blocking tool. Disabling these cookies will not affect your ability to use OK Social.

Other analytics

We also use Vercel Analytics and Speed Insights to measure traffic and performance in an aggregated, privacy-friendly way.

8. Overseas disclosure

Some of our service providers (including those listed in Section 6) store and process information on servers located outside Australia, including in the United States and other countries. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, and we only use reputable providers with appropriate data-protection commitments.

9. How we store and protect your information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include encryption of data in transit, hashing of passwords, access controls, and use of reputable infrastructure providers.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a data breach likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

10. How long we keep your information

We keep personal information only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Approved content may be retained for a limited rolling period (for example, a 30-day download archive) and then deleted. When you close your account, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain it by law.

11. Accessing and correcting your information

You have the right to request access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading. You can manage much of your information directly in your account settings, or contact us using the details below. We will respond to your request within a reasonable time. There is generally no charge to access your information, though we may charge a reasonable fee for substantial requests.

12. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first using the details in Section 14 so we can try to resolve it. We will acknowledge your complaint and respond within a reasonable time.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

13. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. If we make material changes, we will take reasonable steps to notify you, for example by posting a notice on our website or emailing you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

If you have any questions about this Policy or how we handle your personal information, please contact us:

Basic Solutions (OK Social)
ABN 50 730 200 902
82 Marine Parade, Southport QLD 4215, Australia
Email: support@basicsolutions.com.au