Privacy Policy

1. About This Policy

mySMB.com Pty Ltd ABN 42 679 542 208 respects your privacy.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you interact with us or use our websites, Platforms, Communities, Workspace, Marketplace, products or services.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.

Some Communities, partner arrangements or services may also include a short collection or privacy notice explaining how personal information is handled in that particular setting.

In this Policy, "Platform" means our websites, software products and other digital environments through which our products and services are accessed; "Community" means the online communities and discussion spaces available through our Platform; "Workspace" means our collaboration and workflow tools; and "Marketplace" means the area through which you may access or purchase products or services made available by us or third-party providers.

2. Information We Collect and Why

Personal information is information or an opinion about an identified person, or a person who is reasonably identifiable.

Depending on how you interact with us, we may collect:

• your name, contact details, account and profile information;

• your role, organisation, industry, membership or eligibility information;

• Community posts, comments, reactions, attendance and engagement information;

• direct messages sent through the Platform;

• purchase, subscription, billing and transaction information;

• Workspace content, tasks, files, workflows, prompts, inputs and outputs;

• information received through integrations or connections you authorise;

• event, webinar and learning participation information;

• support requests, feedback, reports and complaints;

• login, device, usage, analytics, security and diagnostic information.

Payment-card details may be collected and processed by our payment providers rather than stored directly by us.

We may collect information directly from you, through your use of our Platforms and services, from an organisation that provides or administers your access, through an authorised integration, from service providers or from publicly available sources.

We use personal information to:

• create and administer accounts;

• provide our Platforms, Communities, Workspace, Marketplace, products and services;

• manage subscriptions, purchases and payments;

• support Community participation, events and learning;

• provide customer success and technical support;

• operate integrations, AI tools and automations;

• personalise content and recommend relevant resources;

• administer and moderate Communities;

• manage security and prevent misuse;

• communicate with you;

• improve our products and services;

• manage customer and partner relationships;

• comply with legal and regulatory obligations;

• send marketing communications where permitted.

We may also use personal information for a related purpose where you would reasonably expect us to do so, where you have consented, or where otherwise permitted or required by law.

Where appropriate, we may provide a separate collection notice at or around the time information is collected.

Some information you provide to us may include sensitive information. We only collect sensitive information with your consent, or where otherwise permitted or required by law.

3. Communities, Workspace and Organisational Access

Posts and other contributions are visible to members who have access to the relevant Community, space or discussion.

You should not post personal, confidential or sensitive information that you do not want other members of that Community or space to see.

Content may also be available across connected spaces or Communities in accordance with the applicable access, content and visibility arrangements.

Designated Community Administrators and moderators may access member profiles, attendance information and engagement analytics where relevant to their roles and to the Community they administer or moderate.

Direct messages are visible only to the participants by default. A limited number of authorised personnel may access them only where reasonably necessary for support, safety, security, moderation, legal compliance, investigating a reported concern or maintaining the service.

Direct messages are not ordinarily available to Community Administrators or moderators unless access is authorised for one of these purposes.

Where an organisation provides or manages your access, its authorised administrators may be able to access information relevant to administering its account. This may include your profile, access status, attendance, learning progress, engagement information and relevant Workspace account or usage information.

Where a Community or service is provided with another organisation, a separate notice may explain which organisation is involved, what information it may access and why.

4. Sharing, Marketplace and Third Parties

We may share personal information with:

• our employees and authorised personnel;

• service providers that help us operate our business;

• hosting, cloud, security, payment, communications, analytics and support providers;

• organisations involved in providing or administering your access;

• Community Administrators and authorised moderators;

• Marketplace providers and service-delivery partners;

• professional advisers, insurers and auditors;

• regulators, courts, law-enforcement agencies or other authorities where required or permitted by law;

• a purchaser or successor in connection with a business sale or restructure.

We only share information where it is reasonably required for the relevant purpose or otherwise permitted or required by law.

We do not sell personal information.

Our Marketplace may allow you to discover, enquire about, purchase or access offerings supplied by third parties.

Where you request an introduction, submit an enquiry or purchase or access a third-party offering, we may provide the relevant provider with the personal information reasonably required to respond to your request or deliver the offering.

Where personal information is to be provided to a third-party provider for its own purposes, we will identify the provider and explain the relevant disclosure at or before the point where you submit your information or provide your consent.

Once a provider receives personal information for its own purposes, it handles that information under its own privacy policy and applicable obligations.

We may also provide providers with aggregated or de-identified information about Marketplace activity.

Our services may link to, integrate with or provide access to third-party services. Those services may handle information under their own terms and privacy policies.

Where we disclose personal information to a service provider, we take reasonable steps appropriate to the circumstances to protect that information and support compliance with applicable privacy requirements.

We are not responsible for the independent privacy practices of a third-party service that you choose to access or connect directly. This does not limit our own obligations in relation to personal information we collect, hold, use or disclose.

5. AI, Automation and Automated Decisions

We may use AI and automated systems to support our products, services, customer support, moderation, security and service improvement. These systems do not currently independently make decisions that significantly affect a person’s rights or interests.

Where required by privacy law, we will provide further information about our use of automated decision-making.

We do not use identifiable personal information to train external AI models without your consent. We may use aggregated or de-identified information to improve our products, services and AI-enabled features.

6. Overseas Access and Storage

Some personal information may be accessed, stored or processed outside Australia, including in the Philippines, the United States, the European Union, the United Kingdom, New Zealand and Singapore.

Overseas access is limited to what is reasonably required and is subject to appropriate privacy, confidentiality, security and access controls.

Where applicable, we take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles.

7. Cookies and Marketing

We use cookies and similar tools to operate our websites and Platforms, remember preferences, support login and security features, understand how our services are used and improve performance and functionality.

You can manage cookies through your browser settings. Some functionality may not work properly if cookies are disabled.

We may use personal information to send information about our products, services, updates, events and relevant third-party offerings that we distribute or support.

You can opt out at any time by using the unsubscribe link, updating available preferences or contacting us.

We do not provide personal information to another organisation for its independent marketing without consent or another lawful basis.

We may still send necessary administrative, account, service or security communications.

8. Security and Retention

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Our safeguards may include access controls, authentication, security monitoring, staff requirements and incident-response procedures.

No electronic system is completely secure. You are responsible for keeping your account, password, devices and connected services secure.

If we become aware of a suspected data breach, we will assess and respond to it in accordance with our legal obligations. Where an eligible data breach occurs, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

We keep personal information for as long as reasonably necessary to provide the relevant product or service, manage our relationship with you, meet legal, accounting, security or recordkeeping obligations, or resolve complaints and disputes.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

Some information may remain after access ends, including transaction records, security and audit records, learning records, support and complaint records, Community contributions forming part of an existing discussion, backups and records required by law.

We may use aggregated or de-identified information for analytics, reporting, research, service improvement and product development.

9. Access, Correction and Complaints

You can ask to access or correct personal information we hold about you.

We may need to verify your identity before responding.

We will respond within a reasonable period. We may refuse access or correction where permitted by law. If that happens, we will generally explain why and tell you about available complaint options.

If you have a concern about how we handle personal information, please contact us and provide enough information for us to investigate.

We aim to respond within 30 days. If we need more time, we will let you know.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

10. Changes and Contact

We may update this Privacy Policy when our practices, services or legal obligations change.

The current version will be available through our website or relevant Platform.

Where a change is material, we will take reasonable steps to notify affected individuals.

Privacy questions, requests and complaints can be directed to:

mySMB.com Pty Ltd
Attention: Privacy Officer
Level 12, 50 Carrington Street
Sydney NSW 2000

Email:legal@mysmb.com

Version 2.0
Effective 25 Aug 2026