Exposure Agency Pty Ltd (ABN 19 675 173 396) ("Exposure", "we", "us" or "our") is committed to protecting the privacy of personal information collected from clients, website visitors, creators and advertising audiences. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the data requirements of the advertising platforms we use.
This Policy explains how we collect, use, disclose and safeguard personal information when we provide creative, advertising and analytics services, when you use our website at www.exposure.com.au, and when you use our client portal at app.exposure.com.au (together, the "Service"). By using the Service, you agree to the handling of information as described here.
1. Information We Collect
Client & business information. Name, business name, contact and billing details, and (where authorised) login credentials or platform access permissions.
Client portal accounts. Where we provide access to our client portal, we collect account details (name, email address and authentication data) and activity within the portal, such as briefs submitted, approvals given, feedback provided and files uploaded.
Payment information. Payments are processed by our payment provider, Stripe. We receive confirmation of payment, billing details and the last digits and type of your card, but we do not store full card numbers on our systems. Stripe handles card data under its own privacy policy and security certifications.
Creator information. Where we source, engage or manage content creators, we collect information such as name, contact details, social media profiles, portfolio content, rates, communications with us, and the content they produce (including their voice, image and likeness in commissioned material). Some of this information may be collected from publicly available sources, such as public social media profiles, rather than directly from the creator. See section 2.
Website & usage data. Collected automatically through cookies, pixels, tags and SDKs, including IP address, device and browser information, behavioural data (pages visited, time on page, conversion events), approximate geo-location, and referral/campaign data (e.g. UTM parameters).
Advertising platform data. Through integrations with Meta, Google and TikTok we may process custom-audience data, conversion-tracking events, and aggregated or anonymised performance metrics (impressions, clicks, conversions), under each platform's data and advertising terms.
First-party client data. Where a client uploads audience or customer lists, we may process email addresses, phone numbers, and purchase or attribution data, securely and only under that client's instruction.
2. Creators
We maintain a network of content creators we work with or may approach for client projects. Creator information is collected directly from creators (for example, when they apply to work with us or communicate with us), from the platforms we use to engage them, and from publicly available sources such as public social media profiles.
We use creator information to assess suitability for briefs, match creators to projects, manage production and payment, and maintain records of past work. A creator's voice, image and likeness appear only in content produced under an agreement with that creator, and usage of that content is subject to the terms of that agreement.
If you are a creator and would like to know what information we hold about you, have it corrected, or have your details removed from our network, contact us using the details below.
3. How We Use Your Information
- To provide, maintain and improve the Service and deliver campaigns and creative work;
- To manage your account, requests and our contractual relationship;
- To process payments and manage billing;
- To source, engage and manage creators for client projects;
- To contact you about your engagement, including service and security updates;
- To measure and improve advertising performance and our offering;
- To send you relevant updates or offers, which you can opt out of at any time;
- To meet legal obligations and protect our legal rights.
4. AI-Assisted Production
We use AI-assisted tools and automation as part of our production workflow, for purposes such as research, transcription, script drafting, image and video generation, voiceover generation and editing. This means that materials connected to an engagement, such as briefs, scripts, product information, footage and performance data, may be processed by third-party AI service providers (for example, providers operated by Anthropic, Google and ElevenLabs) under their respective terms.
We take reasonable steps to limit what is shared with these tools to what is needed for the task, and we use commercial service tiers where the provider commits not to train its publicly available models on customer content. We do not use AI tools to make decisions that have a legal or similarly significant effect on individuals.
5. Legal Bases for Processing
Depending on the information and context, we rely on your consent, the performance of a contract, our legitimate business interests, and compliance with law.
6. Cookies, Pixels & Tracking
We use cookies and similar technologies (including the Meta Pixel and Conversions API, Google Analytics 4 and Google Ads tags, the TikTok Pixel and Events API, and first-party/server-side tracking) to operate the Service, remember preferences, and measure advertising. You can manage cookies through your browser settings, platform opt-out tools and any consent controls we display. Some features may not work if you disable essential cookies.
7. Advertising Platform Compliance
When running campaigns we comply with the relevant platform terms, including the Meta Business Tools Terms and Custom Audiences Terms, the Google Ads and Analytics Data Processing Terms (and consent-mode requirements where applicable), and the TikTok Business Products (Data) Terms. We hash or encrypt customer data on upload where required, use client data only for that client's authorised audiences, never share audiences between clients, and delete data when it is no longer required.
8. How We Disclose Information
We may share personal information with:
- Advertising platforms, as required to deliver campaigns;
- Our payment provider (Stripe), to process payments;
- Analytics, CRM and marketing-automation tools;
- Cloud hosting, storage, security and IT providers;
- AI service providers, as described in section 4;
- Contractors, creators and subcontractors who support our Services under confidentiality;
- Acquirers or successors in connection with a business sale or restructure;
- Authorities where required by law.
We do not sell your personal information to unrelated third parties.
9. International Data Transfers
Some of our service providers, including our hosting, storage, payment and AI providers, store or process data in the United States, Europe or Asia. Where personal information is transferred overseas, we take reasonable steps to ensure safeguards consistent with the Privacy Act 1988 and the APPs are applied.
10. Data Security
We use measures including encrypted storage and transmission, access controls and authentication, restricted internal access, and routine review of our integrations. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Data Retention
We retain personal information only for as long as necessary for the purposes in this Policy, to comply with legal obligations, resolve disputes and enforce our agreements. Usage data is generally retained for shorter periods unless needed for security or functionality.
12. Your Rights
You may request access to, correction of, or deletion of the personal information we hold about you, and may opt out of marketing at any time. Some information may need to be retained where we have a legal obligation or lawful basis. To make a request, contact us using the details below. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
13. Children's Privacy
The Service is not directed at anyone under 18, and we do not knowingly collect information from minors. If you believe a minor has provided us personal information, please contact us and we will take reasonable steps to delete it.
14. Links to Other Sites
The Service may link to sites we do not operate. We are not responsible for their content or privacy practices and recommend you review their policies.
15. Changes to This Policy
We may update this Policy from time to time. We will post the updated version here and change the "Last updated" date, and where appropriate notify you by email or a notice on the Service. Please review it periodically.
16. Contact
Exposure Agency Pty Ltd
ABN 19 675 173 396
gabe@exposure.com.au
exposure.com.au