Privacy Policy for Hype Society

Effective Date: 01/05/2023

At The Hype Society, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal information we gather from individuals in the course of our business. We adhere to the Australian Privacy Principles and the Privacy Act 1988 (Cth) (Privacy Act) to ensure your privacy is respected.

In this policy, “we,” “our,” or “us” refers to The Hype Society, an entity registered as The Hype Society Pty Ltd (ABN 77 652 173 610).

Personal information refers to any information about you that reveals your identity or can reasonably ascertain it. This may also include Sensitive Information, as defined below.

Sensitive Information includes details about a person’s racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, sexual preferences, health or medical information, or criminal records.

This policy covers Personal Information collected directly from you when you contact us, access our website at www.thehypesociety.com.au (Website), make an inquiry, or agree to receive our digital marketing services (Services).

We may modify or add to this policy from time to time.

Other Policies and Terms and Conditions

Please note that your use of our Website and Services is also subject to our General Terms and Conditions. You can find these General Terms and Conditions here: https://www.thehypesociety.com.au/general-and-service-terms/

Collection of Personal Information

We collect Personal Information about you at various stages, including:

Information necessary to provide our Services: When you sign up for our Services or make an inquiry, we collect information such as:

• Your name
• Address
• Telephone number
• Domain name
• Email addresses of your primary and secondary contacts
• Financial information, including credit card and debit card details

Non-personally identifying information: We may log the following information for statistical and marketing purposes:

• Server address
• Top-level domain name (.com, .gov, etc.)
• Date and time of visit
• Pages accessed
• Documents downloaded
• Referring site
• Type of browser

We will not record any identifying details (such as name and IP address) of individual users or their browsing activities unless directed to do so by law enforcement agencies.

For our staff, contractors, and job applicants, we collect Personal Information such as names, addresses, contact details, and work experience.

We may also collect demographic information.

We do not assume any responsibility for the privacy or security practices of other websites you may access through our site, or the level of our customers’ compliance with our code.

Use of Personal Information

We use your Personal Information to provide and improve our Services. We will use your Personal Information to:

• Provide sales and technical support
• Handle billing and credit control
• Offer product upgrades and information
• Send renewal notices
• Share maintenance notices and system changes
• Perform other functions relevant to the Services we provide

Additionally, we may use your Personal Information for related purposes, such as:

• Measuring your experiences with our products, Services, and Website to improve and develop them
• Contacting you regarding upgrades, special offers, newsletters, surveys, and individual service audits
• Using your responses to surveys or interactive communications to enhance our products and Services
• Identifying the source of new customers

Disclosure of Personal Information

We do not sell or rent your Personal Information to any third party. However, we may share your Personal Information with third parties for the following purposes:

• Providing and improving our Services
• Billing and credit control
• Legal compliance
• Enforcement of our General Terms and Conditions
• With your consent

We may disclose your Personal Information to our employees, contractors, and service providers who need to access the information to provide you with our Services.

We may also disclose your Personal Information to government agencies, regulators, and law enforcement agencies where required or authorised by law.

Where we provide automated marketing and performance Services (described in the “Automated marketing Services and data from your connected accounts” section below), Personal Information and connected-account data may be processed by overseas service providers necessary to deliver those Services. These include: Anthropic, PBC (United States) — which provides the artificial intelligence models we use to generate marketing content drafts and performance recommendations on your behalf; and our cloud database hosting provider (United States). All overseas processors are engaged under data-handling arrangements consistent with the Australian Privacy Principles. Other than these specific service providers, we do not disclose your Personal Information to overseas recipients.

Security of Personal Information

We take all reasonable steps to protect your Personal Information from unauthorised access, misuse, and disclosure. We use various security technologies and procedures to protect your Personal Information from unauthorised access, use, or disclosure.

Our employees and contractors are trained to handle Personal Information securely and are required to comply with our privacy policies and procedures.

Despite our efforts to protect your Personal Information, no data transmission over the Internet or any other public network can be guaranteed to be 100% secure. Therefore, we cannot guarantee the security of your Personal Information during transmission to our Website or while in storage on our systems.

Access and Correction

You have the right to request access to the Personal Information we hold about you and to ask us to correct it if it is inaccurate, incomplete, or out of date.

You may make a request for access or correction by contacting us using the contact details provided below.

We will respond to your request within a reasonable time, and we may charge you a reasonable fee for accessing your Personal Information.

Retention of Personal Information

We will retain your Personal Information for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

When we no longer require your Personal Information for any purpose, we will take reasonable steps to destroy or de-identify it.

Automated marketing Services and data from your connected accounts

The Hype Society develops and operates automated marketing and performance tools — including the use of artificial intelligence — to aid and assist in delivering our digital marketing Services to our customers. This section applies in addition to the general data-handling described above, and sets out our specific commitments where you have engaged us to manage your marketing through these automated Services.

Data we collect from your connected third-party accounts

When you connect your Google Business Profile, Facebook Business Page, Google Ads account, Meta Ads account, or other supported third-party service to our Services, you authorise us — via the standard OAuth consent flow of each provider — to access specific data from that account on your behalf. The data we access is limited to what is necessary to deliver the Services you have subscribed to.

From connected Google Business Profile accounts, we read and store: business name, address, phone number, hours, categories, services, attributes, photos, descriptions, posts, customer reviews (including the review text and rating but excluding reviewer email or phone where Google does not expose them), and profile-performance metrics (impressions, calls, direction requests, website clicks, search-keyword impressions).

From connected Facebook Business Pages, we read and store: Page metadata (name, address, hours, category, description, photos), posts, customer reviews and recommendations, and Page insights (impressions, reach, engagement, follows).

From connected Google Ads and Meta Ads accounts, we read and store: campaign structure, ad creative content, budget and bid settings, audience targeting, and performance metrics including spend, clicks, impressions, and conversions.

What we do with this data

We use the data we access from your connected accounts solely to deliver our Services to you. Specifically:

• To propose and (where authorised) execute changes to your marketing presence — updating business hours, publishing posts, drafting replies to customer reviews, adjusting ad budgets, and equivalent actions.
• To produce performance reports and recommendations within your account dashboard.
• To inform our automated and AI-assisted tools’ decisions — for example, using your Google Business Profile keyword performance to seed Google Ads keyword research.

We do not:

• Sell, lease, or share your connected-account data with third parties for advertising or marketing purposes.
• Aggregate your data with that of other customers in a way that would allow your specific data to be re-identified.
• Use your data to train any general-purpose AI model. We do use it as in-context input to the Claude artificial intelligence service for the duration of generating responses on your behalf, but no model is fine-tuned on your data.

Retention and deletion of connected-account data

We retain data from your connected accounts for as long as you remain a customer and the relevant third-party account remains connected. When you disconnect a third-party account, or when your engagement with us ends:

• All data we hold from that account is queued for deletion within 30 days.
• You may request immediate deletion at any time by contacting us using the contact details below.
• We retain a minimal audit log (action timestamps and action types, with no third-party-account content) for 12 months for security and dispute-resolution purposes, then permanently delete it.

How to revoke access

You can revoke our access to your connected accounts at any time, in any of three ways:

• Within our Services — go to your Connections page and click “Disconnect” next to the relevant account.
• Within Google — visit myaccount.google.com/permissions and remove The Hype Society.
• Within Facebook / Meta — visit Facebook Settings → Business Integrations → The Hype Society → Remove.

Revoking access stops us from accessing the relevant account immediately and triggers the 30-day deletion workflow described above.

Who has access to your connected-account data inside The Hype Society

Your connected-account data is accessed only by:

• You and any team members you have explicitly invited to your account.
• The automated and AI-assisted tools that operate on your behalf, running in our secure infrastructure.
• The Hype Society Pty Ltd staff (named individuals only) when responding to support requests you have initiated, when investigating a suspected security incident affecting your account, or when required by Australian law.

We do not allow any third-party service to access your connected-account data except where strictly necessary to deliver the Services (the Claude artificial intelligence service for generating content drafts and performance recommendations on your behalf; our cloud database hosting provider; and the third-party services you have explicitly connected).

Compliance with the Australian Consumer Law and Spam Act 2003

The Hype Society is committed to compliance with the Australian Consumer Law in respect of customer reviews. When we draft or publish replies to reviews on your behalf, the replies will not contain false claims, defamatory language, retaliatory content, or admissions of liability without your explicit approval. You retain the ability at all times to pause, edit, or delete any review reply via your account dashboard.

We do not solicit reviews in exchange for incentives, and our review-solicitation features comply with ACCC guidance on incentivised reviews. We will never send a review solicitation in a manner that breaches the Spam Act 2003, and all solicitations identify your business by legal name and ABN as required.

Contact Us

If you have any questions or concerns about our privacy policies or practices, please contact us at:

The Hype Society

Email: [email protected]

We will respond to your request or complaint within a reasonable time and may require additional information from you to help us respond to your request or complaint.

If you are not satisfied with our response to your complaint, you may contact the Office of the Australian Information Commissioner (OAIC) for further assistance.

Last updated: 30 May 2026