https://modern-neosframe.replit.app/assets/privacy-Cotl1oFY.js

1import{j as e}from"./query-D4y9zq5Z.js";import{u as t,N as s,F as i}from"./index-yCMhFS_R.js";import"./react-CW9BFzQI.js";import"./icons-C2wfudFi.js";import"./motion-DWao6Sl3.js";function l(){return t("Privacy Policy | Neosframe.ai","Read the Neosframe Privacy Policy. Learn how we collect, use and protect your personal data in compliance with GDPR, UK GDPR and Australian privacy law."),e.jsxs("div",{className:"min-h-screen bg-background text-foreground overflow-x-hidden selection:bg-primary/20",children:[e.jsx(s,{}),e.jsx("main",{className:"pt-32 pb-24",children:e.jsxs("div",{className:"container mx-auto px-4 md:px-6 max-w-4xl",children:[e.jsx("h1",{className:"text-4xl md:text-5xl font-bold font-display mb-4",children:"Privacy Policy"}),e.jsx("p",{className:"text-xl text-gray-400 mb-2",children:"NEOSFRAME PTY LTD"}),e.jsx("p",{className:"text-gray-500 mb-12",children:"Last Updated: 11 May 2026"}),e.jsxs("div",{className:"prose prose-invert prose-lg max-w-none text-gray-400",children:[e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Introduction"}),e.jsx("p",{className:"mb-6",children:'Neosframe Pty Ltd (ACN 687 589 671) ("Neosframe", "we", "our" or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, store, share, and disclose your personal information in connection with our automated advertising video content platform (the "Platform"), our website, and related services (collectively, the "Services").'}),e.jsx("p",{className:"mb-6",children:"Neosframe provides a B2B SaaS platform that enables brands and their marketing teams to create automated advertising video content at scale. Our Platform is a white-glove managed service where clients work with production partners to generate unlimited ad variations from approved templates, incorporating AI-powered features, including voiceover generation and voice cloning technology."}),e.jsx("p",{className:"mb-6",children:`This Privacy Policy is designed to comply with the Australian Privacy Principles ("APPs") contained in the Privacy Act 1988 (Cth), and, to the extent that they apply to Neosframe's processing of personal information, the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the United Kingdom General Data Protection Regulation ("UK GDPR"). Additional information that applies to individuals located in the European Union, the European Economic Area or the United Kingdom is set out in the section of this Privacy Policy headed "EU/UK Privacy Rights" and should be read in conjunction with our Terms and Conditions. By using our Services or accessing our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.`}),e.jsx("p",{className:"mb-6",children:"Our Services are designed for business use and are not intended for individual consumers. This Privacy Policy primarily addresses the collection and handling of business contact information and data provided in the course of our commercial relationships."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Personal Information We Collect"}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Types of Personal Information"}),e.jsx("p",{className:"mb-4",children:"We define personal information as any information that relates to an identified or identifiable individual. In the context of our B2B services, the types of personal information we may collect include:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Account and Identity Information:"})," Your full name, job title, professional role, company name, and organisational details required to create and manage your Platform account."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Contact Information:"})," Business email address, business telephone number, and business mailing address."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Campaign and Brief Information:"})," Content submitted through briefs, campaign details, creative direction, brand guidelines, and advertising specifications."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Creative Assets:"})," Images, graphics, text, scripts, and other creative materials uploaded to or created within the Platform."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Voice Data:"})," Voice recordings and voice samples provided for AI voiceover generation and professional voice cloning purposes (see Voice Data and AI Services section for detailed information)."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Platform Activity Data:"})," Comments, approvals, review history, and activity logs generated through your use of the Platform."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Technical Information:"})," IP address, browser type, device information, operating system, and other technical data collected automatically when you access our Platform or website."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Marketing Information:"})," Contact details and preferences provided when you sign up to receive marketing communications via our website."]})]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Sensitive Information"}),e.jsx("p",{className:"mb-6",children:"We do not generally collect sensitive information as defined in the Privacy Act 1988 (Cth). Voice recordings provided for voice cloning purposes may be considered personal information but are collected only with your express consent and are used solely for the purpose of generating AI voiceovers for your advertising content. We will only collect sensitive information with your explicit consent or as otherwise authorised by law."}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Business Contact Information"}),e.jsx("p",{className:"mb-6",children:"Given our B2B service model, much of the personal information we collect consists of business contact information relating to employees, contractors, and representatives of our corporate clients. This information is collected and used in accordance with the employee records exemption and business contact provisions of the Privacy Act, where applicable."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Voice Data and AI Services"}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"AI Voiceover and Voice Cloning"}),e.jsx("p",{className:"mb-6",children:"Our Platform utilises artificial intelligence technology to generate voiceovers for advertising content. This includes professional voice cloning capabilities that allow clients to create AI-generated voiceovers from provided voice samples."}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Voice Data Collection"}),e.jsx("p",{className:"mb-4",children:"When utilising our voice cloning features, we collect:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsx("li",{children:"Voice recordings and samples provided by or on behalf of the client for the purpose of creating a cloned voice model;"}),e.jsx("li",{children:"Scripts and text content to be converted to speech; and"}),e.jsx("li",{children:"Generated audio files created using AI voiceover technology."})]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Voice Data Processing"}),e.jsx("p",{className:"mb-4",children:"Voice data is processed by our third-party AI service provider, ElevenLabs, under their terms of service and privacy policy. By providing voice data for our voice cloning services, you acknowledge and consent to:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsx("li",{children:"The transfer and processing of voice data by ElevenLabs for the purpose of creating and utilising voice models;"}),e.jsx("li",{children:"Voice data being processed on servers located outside Australia; and"}),e.jsx("li",{children:"The application of ElevenLabs' data handling practices to your voice data."})]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Consent and Authorisation"}),e.jsx("p",{className:"mb-6",children:"You represent and warrant that you have obtained all necessary consents and authorisations from any individual whose voice is provided for cloning purposes. You are responsible for ensuring that any voice recordings submitted to our Platform are provided with the voice owner's full knowledge and consent for AI voice cloning and generation purposes."}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Other AI Services"}

1),e.jsx("p",{className:"mb-6",children:"Our Platform may also utilise Google Gemini AI services for content generation and processing purposes. Information processed through these AI services is handled in accordance with this Privacy Policy and the applicable service provider's terms."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"How We Collect Personal Information"}),e.jsx("p",{className:"mb-4",children:"We collect personal information through various channels, including:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Direct Interactions:"})," When you or your organisation register for an account, submit briefs, upload content, use our Platform features, or correspond with us by email, telephone, or other means."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Platform Usage:"})," As you interact with our Platform, we automatically collect activity data, usage information, and technical data."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Website Interactions:"})," When you visit our website, complete contact forms, or sign up for marketing communications."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Automated Technologies:"})," We may collect technical and usage data via cookies and similar tracking technologies when you access our website."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Third Parties:"})," We may receive personal information from your employer or organisation, or from third parties such as business partners or referral sources."]})]}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Purpose of Collection and Use of Personal Information"}),e.jsx("p",{className:"mb-4",children:"We use your personal information for purposes directly related to the provision and improvement of our Services. These purposes include:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Service Delivery:"})," To provide, operate, and maintain our Platform; to process briefs and generate advertising content; to deliver AI voiceover services; and to fulfil our contractual obligations to your organisation."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Account Management:"})," To create and manage user accounts; to authenticate users; and to facilitate access based on assigned roles (Brand Manager, Client Manager, or Legal reviewer)."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Platform Improvement:"})," To analyse usage patterns; to enhance Platform functionality and performance; and to develop new features and services."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Communication:"})," To communicate with you regarding your account, campaigns, approvals, and our Services; to respond to inquiries; and to provide customer support."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Marketing:"})," To inform you about our Services, updates, or events that may be of interest to you, where you have consented to receive such communications."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Legal and Compliance:"})," To comply with legal obligations; to conduct audits; to resolve disputes; and to enforce our Terms and Conditions."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Security:"})," To verify user identity; to protect against unauthorised access; and to prevent fraud or other harmful activities."]})]}),e.jsx("p",{className:"mb-6",children:"We will only use or disclose your personal information for the primary purposes for which it was collected or for secondary purposes if: (a) you have consented to the use or disclosure; (b) you would reasonably expect such use or disclosure in relation to the primary purpose; or (c) the use or disclosure is required or authorised by law."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Disclosure of Personal Information"}),e.jsx("p",{className:"mb-4",children:"We may disclose your personal information to the following categories of recipients:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Production Partners:"})," Our production partner (3P Studio) and other service providers who assist in delivering our Platform services."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Technology Service Providers:"}

1)," Third-party providers who support our Platform infrastructure and services, including:",e.jsxs("ul",{className:"list-disc pl-6 mt-2 space-y-1",children:[e.jsx("li",{children:"Supabase (database hosting)"}),e.jsx("li",{children:"DigitalOcean (cloud infrastructure)"}),e.jsx("li",{children:"Amazon Web Services (cloud infrastructure)"}),e.jsx("li",{children:"Resend (transactional email services)"}),e.jsx("li",{children:"Mailchimp (marketing email services)"}),e.jsx("li",{children:"Google Gemini (AI services)"}),e.jsx("li",{children:"ElevenLabs (AI voiceover generation and voice cloning)"})]})]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Your Organisation:"})," Other authorised users within your client organisation who have access to the Platform."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Professional Advisers:"})," Lawyers, accountants, auditors, and insurers who require the information to provide professional services to us."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Regulatory Authorities:"})," Government agencies and regulators as required by law."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Business Transfers:"})," Third parties in connection with a merger, acquisition, restructuring, or sale of all or part of our business."]})]}),e.jsx("p",{className:"mb-6",children:"All third parties with whom we share your personal information are required to protect it in a manner consistent with this Privacy Policy and applicable privacy laws. We do not sell your personal information to third parties."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Client Confidential Information"}),e.jsx("p",{className:"mb-6",children:"In addition to personal information, we handle client confidential information including brand assets, creative materials, campaign strategies, and other proprietary business information."}),e.jsx("p",{className:"mb-6",children:"We maintain strict confidentiality obligations regarding client information and implement appropriate access controls to ensure that confidential materials are only accessible to authorised personnel and approved users within the Platform."}),e.jsx("p",{className:"mb-6",children:"Our handling of client confidential information is governed by our Terms and Conditions and any applicable confidentiality agreements with your organisation."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"International Data Transfers"}),e.jsx("p",{className:"mb-6",children:"While our primary operations are in Australia, your personal information may be transferred to and processed in countries outside Australia, including the United States, where our third-party service providers maintain servers and operations."}),e.jsx("p",{className:"mb-6",children:"When we transfer personal information outside Australia, we take reasonable steps to ensure that the recipient does not breach the APPs in relation to the information. This may include entering into contractual arrangements that require the recipient to handle personal information in accordance with the APPs or ensuring the recipient is subject to laws providing similar protection."}),e.jsx("p",{className:"mb-6",children:"By using our Services, you consent to the transfer of your personal information to these countries. You acknowledge that these countries may have different data protection laws than Australia."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Data Retention"}),e.jsx("p",{className:"mb-6",children:"We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, or reporting requirements."}),e.jsx("p",{className:"mb-4",children:"Specific retention periods may vary depending on the type of information and the nature of our relationship with your organisation:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Account Information:"})," Retained for the duration of the client relationship plus a period required by law (typically up to 7 years following termination)."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Campaign and Creative Assets:"})," Retained in accordance with our client agreements, typically for the duration specified or until deletion is requested."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Voice Data:"})," Retained for as long as necessary to provide the voice cloning service and as required by our third-party AI provider's policies, unless earlier deletion is requested."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Usage and Technical Data:"})," Retained for a period sufficient for analysis and service improvement, generally not exceeding 2 years."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Marketing Preferences:"}

1)," Retained until you opt out or request deletion."]})]}),e.jsx("p",{className:"mb-6",children:"We securely destroy or de-identify personal information when it is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to retain it."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Your Rights and Choices"}),e.jsx("p",{className:"mb-4",children:"Under Australian privacy law, you have the following rights regarding your personal information:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Access:"})," You have the right to request access to the personal information we hold about you."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Correction:"})," You may request that we correct any inaccurate or incomplete information about you."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Deletion:"})," In certain circumstances, you may request that we delete your personal information."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Objection:"})," You have the right to object to our processing of your personal information in certain circumstances."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Withdrawal of Consent:"})," Where we rely on your consent to process your personal information, you may withdraw that consent at any time."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Opt-out of Marketing:"})," You have the right to opt out of receiving marketing communications from us at any time."]})]}),e.jsx("p",{className:"mb-6",children:"To exercise these rights, please contact us using the details provided in the Contact Us section. We will respond to your request within a reasonable timeframe, usually within 30 days."}),e.jsx("p",{className:"mb-6",children:"Please note that there may be circumstances where we are not required to provide access to your personal information or comply with your request, such as where it would have an unreasonable impact on the privacy of others or relate to existing or anticipated legal proceedings. In such cases, we will provide you with a written explanation."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Security Measures"}),e.jsx("p",{className:"mb-4",children:"We take commercially reasonable steps to protect your personal information from unauthorised access, modification, disclosure, or loss. Our security measures include:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Encryption:"})," Use of industry-standard encryption (SSL/TLS) for data in transit and encryption at rest for stored data."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Access Controls:"})," Implementation of role-based access controls and authentication measures to restrict access to personal information to authorised personnel only."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Infrastructure Security:"})," Use of reputable cloud infrastructure providers with robust security certifications and practices."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Regular Reviews:"})," Regular review and updating of our security practices and procedures."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Staff Training:"})," Ongoing security awareness and training for our staff."]})]}),e.jsx("p",{className:"mb-6",children:"While we strive to protect your personal information, no security system is impenetrable, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth)."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Cookies and Tracking Technologies"}

1),e.jsx("p",{className:"mb-4",children:"Our website uses cookies and similar tracking technologies to collect information about your browsing activities. This helps us improve our website performance and user experience."}),e.jsx("p",{className:"mb-4",children:"Types of cookies we use:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Essential Cookies:"})," Necessary for the proper functioning of our website and cannot be switched off."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Performance Cookies:"})," Allow us to collect information on how visitors use our website, helping us enhance its performance."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Functionality Cookies:"})," Enable the website to remember your preferences and provide enhanced functionality."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Marketing Cookies:"})," May be used to build a profile of your interests and display relevant information."]})]}),e.jsx("p",{className:"mb-6",children:"You can adjust your browser settings to manage or block cookies. However, please note that some parts of our website may not function properly if cookies are disabled."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Links to Third-Party Websites"}),e.jsx("p",{className:"mb-6",children:"Our website and Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites and encourage you to review their privacy policies before providing any personal information."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Changes to This Privacy Policy"}),e.jsx("p",{className:"mb-6",children:"We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons."}),e.jsx("p",{className:"mb-6",children:'Any material changes will be communicated by updating the "Last Updated" date on this Privacy Policy and, where appropriate, by notifying you directly or through your organisation.'}),e.jsx("p",{className:"mb-6",children:"We encourage you to review this Privacy Policy periodically to stay informed about our information practices and your privacy rights."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"EU/UK Privacy Rights"}),e.jsx("p",{className:"mb-6",children:"This section provides additional information that applies to the processing of personal information about individuals located in the European Union (EU), the European Economic Area (EEA) or the United Kingdom (UK), to the extent that the GDPR or the UK GDPR applies to Neosframe's processing of that personal information. This section supplements, and does not replace, the rest of this Privacy Policy. In the event of inconsistency between this section and the balance of this Privacy Policy, this section prevails in relation to personal information protected by the GDPR or the UK GDPR."}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Controller and Contact Details"}),e.jsxs("p",{className:"mb-6",children:["Neosframe Pty Ltd (ACN 687 589 671) is the controller of the personal information described in this Privacy Policy, except where it acts as a processor on behalf of a customer. Neosframe can be contacted in relation to data protection matters at ",e.jsx("a",{href:"mailto:[email protected]",className:"text-primary hover:underline",children:"[email protected]"}),"."]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"EU and UK Representative"}),e.jsxs("p",{className:"mb-6",children:["Where required by Article 27 of the GDPR or Article 27 of the UK GDPR, Neosframe will appoint a representative established in the EU and/or the UK and will publish that representative's contact details in this Privacy Policy. Until any such representative is appointed, all data protection enquiries should be directed to ",e.jsx("a",{href:"mailto:[email protected]",className:"text-primary hover:underline",children:"[email protected]"}),"."]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Legal Bases for Processing"}),e.jsx("p",{className:"mb-4",children:"Where the GDPR or the UK GDPR applies, Neosframe will only process personal information where it has a lawful basis to do so under Article 6 of the relevant regulation. The legal bases on which Neosframe relies are as follows:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Performance of a contract (Article 6(1)(b)):"})," We process account, contact, campaign, creative-asset, platform-activity and similar information to provide the Services to the customer and to perform our obligations under the customer's agreement with us."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Legitimate interests (Article 6(1)(f)):"})," We process technical and usage information to maintain the security and integrity of the Platform, to prevent fraud and abuse, to improve and develop the Platform, to administer our business and to provide direct marketing to existing business contacts where lawful."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Consent (Article 6(1)(a)):"})," We process voice recordings for AI voice cloning and AI voice generation, certain marketing communications, optional cookies and similar technologies, and any sensitive data, only where the relevant individual has provided explicit consent. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Legal obligation (Article 6(1)(c)):"})," We process personal information where necessary to comply with a legal obligation to which Neosframe is subject, including taxation, recordkeeping and responding to lawful requests from regulators or law-enforcement authorities."]})]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Rights of EU/UK Data Subjects"}),e.jsx("p",{className:"mb-4",children:"In addition to the rights described above, individuals to whom the GDPR or the UK GDPR applies have the following rights:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right of access (Article 15):"})," The right to obtain confirmation as to whether Neosframe processes personal information about the individual and to receive a copy."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right to re

1ctification (Article 16):"})," The right to have inaccurate personal information corrected and incomplete personal information completed."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right to erasure (Article 17):"})," The right to require Neosframe to erase personal information in certain circumstances."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right to restriction of processing (Article 18):"})," The right to require Neosframe to restrict its processing of personal information in certain circumstances."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right to data portability (Article 20):"})," Where processing is based on consent or contract and carried out by automated means, the right to receive personal information in a structured, commonly used and machine-readable format."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right to object (Article 21):"})," The right to object to processing based on Neosframe's legitimate interests, including profiling, and an absolute right to object to processing for direct marketing purposes."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right to withdraw consent:"})," Where processing is based on consent, the right to withdraw that consent at any time."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Right to lodge a complaint:"})," The right to lodge a complaint with the relevant supervisory authority in the EU member state of habitual residence or (in the case of UK residents) with the UK Information Commissioner's Office (ICO)."]})]}),e.jsxs("p",{className:"mb-6",children:["Neosframe does not carry out solely automated decision-making within the meaning of Article 22 of the GDPR or the UK GDPR that produces legal or similarly significant effects. To exercise any of these rights, please contact ",e.jsx("a",{href:"mailto:[email protected]",className:"text-primary hover:underline",children:"[email protected]"}),". Neosframe will respond within one (1) month of receipt."]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"International Transfers of Personal Information"}),e.jsx("p",{className:"mb-4",children:"Where Neosframe transfers personal information out of the EEA or the UK to a country without an adequacy decision, Neosframe relies on the following safeguards:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Standard Contractual Clauses (SCCs):"})," The European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), incorporated into our agreements with sub-processors located outside the EEA."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"UK addendum / IDTA:"})," The UK Information Commissioner's International Data Transfer Addendum to the EU Commission's SCCs, or the UK International Data Transfer Agreement (IDTA), for transfers from the UK."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"EU-US and Swiss-US Data Privacy Frameworks:"})," Where applicable, for transfers to certified recipients in the United States."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Supplementary measures:"})," Including technical and organisational measures such as encryption in transit and at rest, access controls, and contractual restrictions on government-access requests."]})]}),e.jsxs("p",{className:"mb-6",children:["Data subjects may request a copy of the relevant transfer safeguards by contacting ",e.jsx("a",{href:"mailto:[email protected]",className:"text-primary hover:underline",children:"[email protected]"}),"."]}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Shopify Integration"}),e.jsx("p",{className:"mb-6",children:"This section applies to merchants who install the Neosframe Retail Automation app on a Shopify store. It supplements the rest of this Privacy Policy and prevails to the extent it relates to data ingested from a Shopify store."}),e.jsx("p",{className:"mb-6",children:"The Neosframe Retail Automation app ingests product, variant and inventory data from a merchant's connected Shopify store and uses that data to generate advertising creative inside the Neosframe platform."}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Data We Collect from Your Shopify Store"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Connection metadata:"})," The shop's myshopify.com domain, a display name, the OAuth access token (stored encrypted at rest), the OAuth scopes granted, and the current connection status with timestamps."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Product catalogue data:"})," The product's Shopify identifier, title, description, product category, SKU, image URL, product URL, status, tags, and additional product metadata."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Variant data:"})," The variant's Shopify identifier, SKU, title, description, price, available quantity, location, image URL and status."]})]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Data We Do Not Collect from Your Shopify Store"}),e.jsx("p",{className:"mb-4",children:"The Neosframe Retail Automation app does not collect, store, process or transmit any of the following:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsx("li",{children:"Customer names, email addresses, phone numbers or postal addresses;"}),e.jsx("li",{children:"Customer order history, cart, checkout or payment information;"}),e.jsx("li",{children:"Customer personally identifiable information of any kind; or"}),e.jsx("li",{children:"Shopify staff or merchant-employee personal data beyond what is needed to authenticate the merchant's Neosframe account."})]}),e.jsx("p",{className:"mb-6",children:"This limitation is enforced at the technical level: the OAuth scopes we request from Shopify do not include access to customer or order data."}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Permissions We Request from Shopify Merchants"}),e.jsx("p",{className:"mb-4",children:"The Neosframe Retail Automation app requests only the following Shopify Admin API access scopes:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"read_products"})," — to read product catalogue information used to generate advertising creative; and"]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"read_inventory"})," — to read variant-level inventory levels so that advertising creative can reflect in-stock status."]})]}),e.jsx("p",{className:"mb-6",children:"We do not request scopes that would grant access to customer data, orders, financial data or write access to the merchant's store."}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Data Retention and Deletion for the Shopify Integration"}),e.jsx("p",{className:"mb-4",children:"The Neosframe Retail Automation app implements eager, automatic deletion when a merchant ends the integration. There are three triggers:"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:'Merchant clicks "Disconnect" inside Neosframe:'})," Within seconds of the disconnect, the merchant's Shopify access token is revoked with Shopify, all product and variant rows are hard-deleted, and the connection record is soft-deleted."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Merchant uninstalls the app from the Shopify Admin:"})," When Shopify sends the app/uninstalled webhook, Neosframe performs the same cleanup as the merchant-initiated disconnect."]}),e.jsxs("li",{children:[e.jsx("strong",{className:"text-white",children:"Shopify sends a shop/redact webhook:"})," By the time this webhook arrives, the merchant's data has already been deleted. The webhook is acknowledged with a 200 response and any residual data is removed as a defence-in-depth measure."]})]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Security for Shopify Data"}),e.jsxs("ul",{className:"list-disc pl-6 mb-6 space-y-2",children:[e.jsx("li",{children:"Access tokens issued by Shopify are encrypted at rest using AES-256-GCM. The encryption key is held in a secrets manager and is never written to logs."}),e.jsx("li",{children:"Webhook authenticity is verified using constant-time HMAC-SHA256 comparison against the Shopify shared secret."}),e.jsx("li",{children:"Database access is gated by row-level security policies that scope every query to the requesting merchant's organisation."}),e.jsx("li",{children:"Outbound calls to Shopify are restricted to validated *.myshopify.com hostnames."})]}),e.jsx("h3",{className:"text-white mt-8 mb-3 text-xl font-semibold",children:"Sub-processors Involved in the Shopify Integration"}),e.jsxs("p",{className:"mb-6",children:["Catalogue data ingested from Shopify is stored and processed by our sub-processors. For the Shopify integration specifically, the relevant sub-processors are Amazon Web Services, Inc. (AWS), Sydney region, and Supabase, Inc., Ireland region. Please refer to ",e.jsx("a",{href:"https://neosframe.ai/subprocessors",className:"text-primary hover:underline",children:"neosframe.ai/subprocessors"})," for the full and current list."]}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Direct Marketing"}),e.jsx("p",{className:"mb-6",children:"We may use your contact information to send you marketing communications about our Services, updates, events, or other information that we believe may be of interest to you. We will only do so with your consent or where otherwise permitted by law."}),e.jsx("p",{className:"mb-6",children:"You can opt out of receiving marketing communications at any time by following the unsubscribe instructions in any communication, by adjusting your preferences in our communications centre, or by contacting us using the details below."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Anonymity and Pseudonymity"}),e.jsx("p",{className:"mb-6",children:"Where practicable, we provide you with the option of not identifying yourself or using a pseudonym when dealing with us. However, given the nature of our B2B services, certain interactions and services will require you to provide your personal information for account creation, service delivery, and contractual purposes."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Government Identifiers"}),e.jsx("p",{className:"mb-6",children:"We do not use government identifiers (such as tax file numbers or Medicare numbers) as a means of identifying individuals in our records."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Contact Us"}),e.jsx("p",{className:"mb-6",children:"If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer at:"}),e.jsxs("p",{className:"mb-6",children:[e.jsx("strong",{className:"text-white",children:"Neosframe Pty Ltd"}),e.jsx("br",{}),"Attn: Privacy Officer",e.jsx("br",{}),"Email: ",e.jsx("a",{href:"mailto:[email protected]",className:"text-primary hover:underline",children:"[email protected]"}),e.jsx("br",{}),"Address: 29 Black St, Milton QLD, Australia"]}),e.jsx("p",{className:"mb-6",children:"We will endeavour to respond to your enquiry within 30 days."}),e.jsx("h2",{className:"text-white mt-12 mb-4 text-2xl font-bold",children:"Complaints"}),e.jsx("p",{className:"mb-6",children:"If you believe that we have breached this Privacy Policy or the APPs, you may lodge a complaint with our Privacy Officer using the contact details above. We will investigate your complaint and respond to you in writing within a reasonable time, usually within 30 days."}),e.jsx("p",{className:"mb-6",children:"If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at:"}),e.jsxs("p",{className:"mb-6",children:[e.jsx("strong",{className:"text-white",children:"Office of the Australian Information Commissioner"}),e.jsx("br",{}

1),"GPO Box 5218, Sydney NSW 2001, Australia",e.jsx("br",{}),"Phone: 1300 363 992",e.jsx("br",{}),"Email: ",e.jsx("a",{href:"mailto:[email protected]",className:"text-primary hover:underline",children:"[email protected]"}),e.jsx("br",{}),"Website: ",e.jsx("a",{href:"https://www.oaic.gov.au",target:"_blank",rel:"noopener noreferrer",className:"text-primary hover:underline",children:"www.oaic.gov.au"})]}),e.jsx("p",{className:"mt-12 mb-6 text-gray-500",children:"By using our Services or visiting our website, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein. This Privacy Policy forms part of the contractual arrangements between you and Neosframe Pty Ltd."})]})]})}),e.jsx(i,{})]})}export{l as default};