PRIVACY NOTICE

Last updated: 1 May 2026

This privacy notice describes how BRANDBOOST AI PTY LTD ("Company," "we," "us," or "our"), an Australian proprietary limited company, and our affiliate BrandBoost AI Solutions LLC (a Wyoming limited liability company), collect, store, use, and share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website
• Engage with us via SMS/text messaging or AI voice agents
• Receive marketing, transactional, or service-related messages, calls, or voicemails from us
• Engage with us in any sales, marketing, onboarding, or support activity

Primary data controller: BRANDBOOST AI PTY LTD is the primary data controller and the contracting entity for all customers. Our affiliate, BrandBoost AI Solutions LLC, does not currently process customer payments and is referenced in this notice only where US-specific obligations apply.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us using the details below.

WHO WE ARE

Primary Entity (Data Controller)

Affiliate Entity

Contact Details

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice. You can find more detail by using the table of contents below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.

Do we process any sensitive personal information? No.

Do we collect information from third parties? We may collect information from public databases, marketing partners, social media platforms, and other outside sources.

How do we process your information? To provide, improve, and administer our Services; to communicate with you; for security and fraud prevention; and to comply with law. We process your information only when we have a valid lawful basis to do so.

In what situations and with which parties do we share personal information? We share information with service providers (such as our messaging and CRM platform), affiliates, business partners, and where legally required.

Where is your information stored? Your information may be transferred to and processed in Australia, the United Kingdom, the United States, and other countries where our service providers operate.

What are your rights? Depending on where you live, you may have rights under the Australian Privacy Act 1988, UK GDPR, EU GDPR, and applicable US state privacy laws.

How do you exercise your rights? Contact us at [email protected].

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. LEGAL BASIS FOR PROCESSING
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. SMS/TEXT MESSAGING AND AI VOICE CALLING TERMS
6. COOKIES AND OTHER TRACKING TECHNOLOGIES
7. HOW DO WE HANDLE SOCIAL LOGINS?
8. INTERNATIONAL DATA TRANSFERS
9. HOW LONG DO WE KEEP YOUR INFORMATION?
10. DATA SECURITY
11. DO WE COLLECT INFORMATION FROM MINORS?
12. YOUR PRIVACY RIGHTS
13. AUSTRALIAN RESIDENTS
14. UK AND EU RESIDENTS
15. UNITED STATES RESIDENTS
16. CONTROLS FOR DO-NOT-TRACK FEATURES
17. UPDATES TO THIS NOTICE
18. HOW CAN YOU CONTACT US?
19. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register for our Services, express interest in obtaining information about us, participate in activities on the Services, or otherwise contact us. The personal information we collect may include:

• Names
• Phone numbers (mobile and landline)
• Email addresses
• Mailing and business addresses
• Business information (company name, role, industry, revenue range)
• Contact and communication preferences
• SMS/text messaging opt-in status
• Marketing preferences
• Payment information (processed by our payment processor — we do not store full card details)

Sensitive Information. We do not process sensitive personal information.

SMS/text messaging and voice calling information. When you opt in to receive messages or calls from us, we collect:

• Mobile phone number
• Carrier information
• Opt-in timestamp, source, and method
• Message and call interaction data
• Delivery and call-disposition records
• Voice call recordings, where lawful and disclosed

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In Short: Some information — such as your IP address and browser/device characteristics — is collected automatically when you visit our Services.

We automatically collect technical information when you use our Services, including:

• Log and usage data (IP address, browser type, pages viewed, referring URLs, timestamps)
• Device data (device type, operating system, language settings)
• Approximate location data (derived from IP)

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to deliver our Services, communicate with you, prevent fraud, and meet legal obligations.

We process your personal information for the following purposes:

• To deliver and operate our Services
• To send service-related communications and account updates
• To fulfill and manage your orders and contracts
• To send marketing and promotional communications (with appropriate consent)
• To deliver targeted advertising
• To send SMS/text messages and place voice calls in line with your consent and preferences
• To prevent fraud, secure our Services, and enforce our terms
• To comply with legal obligations under Australian, UK, EU, and US law

3. LEGAL BASIS FOR PROCESSING

We process personal information on one or more of the following lawful bases:

• Consent: where you have given clear consent (e.g. opt-in to marketing messages or AI voice calls)
• Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering a contract
• Legitimate interests: where processing is necessary for our legitimate business interests (such as fraud prevention, network security, and service improvement) and not overridden by your rights
• Legal obligation: where processing is required to comply with applicable law

For Australian residents, we collect and handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information with our service providers, affiliates, business partners, and where legally required.

Service providers (data processors)

We share personal information with third-party vendors who provide services on our behalf. These include:

• HighLevel — CRM, messaging, and automation platform
• Telecommunications carriers and SMS aggregators — to deliver messages and calls
• Payment processors — to handle billing and subscriptions
• Analytics and advertising providers — including Meta (Facebook/Instagram) and Google
• Cloud infrastructure and hosting providers
• Email delivery and scheduling tools

These providers are contractually required to protect your personal information and only use it for the purposes we specify.

Other sharing situations

• Business transfers: in connection with any merger, sale of company assets, financing, or acquisition.
• Affiliates: we may share information between BRANDBOOST AI PTY LTD and BrandBoost AI Solutions LLC, where each affiliate is required to honour the protections of this notice.
• Business partners: with our partners to offer products, services, or promotions.
• Legal compliance: where required by law, regulation, court order, or to protect our legal rights.

We do not sell personal information.

5. SMS/TEXT MESSAGING AND AI VOICE CALLING TERMS

In Short: When you opt in, we may send SMS and place AI voice calls in line with your preferences and applicable law.

Consent and opt-in

By providing your mobile phone number and opting in to our messaging and calling program, you expressly consent to receive communications from us, including:

• Marketing and promotional messages and calls
• Appointment reminders and confirmations
• Account alerts and updates
• Transactional notifications
• Customer service communications
• AI-assisted follow-up calls

We obtain express written consent before sending marketing messages and maintain records of consent for the periods required by applicable law.

Message frequency and charges

• Message frequency varies based on your interactions and preferences.
• Message and data rates may apply.
• You are responsible for any message and data charges from your wireless carrier.
• We will not charge you for the messages we send.

Opt-out instructions

You may opt out of receiving SMS or calls from us at any time:

• Text STOP to any message to cancel future messages
• Text HELP for help and information about our messaging program
• Tell any caller (human or AI) that you wish to opt out
• Email [email protected] or call any of our regional numbers

Opt-out requests are processed promptly and confirmed where applicable.

Compliance with calling and messaging laws

We comply with applicable laws governing electronic communications, including:

• Australia: Spam Act 2003 and Do Not Call Register Act 2006
• United Kingdom: Privacy and Electronic Communications Regulations (PECR) 2003
• United States: Telephone Consumer Protection Act (TCPA) and related FCC rules

Specifically:

• We obtain and document express consent before sending marketing communications
• We maintain consent records for the legally required period
• We honour all opt-out requests promptly
• We only send messages between 8 AM and 9 PM recipient's local time
• We provide clear identification in all messages

Privacy of your phone number

• Phone numbers collected for SMS or calls are not sold or shared with third parties for their marketing purposes.
• We use industry-standard security measures to protect your contact data.

6. COOKIES AND OTHER TRACKING TECHNOLOGIES

In Short: We use cookies and similar technologies to operate, secure, and improve our Services.

We use cookies, web beacons, pixels, and similar tracking technologies to operate our Services, remember your preferences, analyse usage, and deliver targeted advertising. UK and EU visitors will see a cookie consent banner allowing you to manage non-essential cookies.

7. HOW DO WE HANDLE SOCIAL LOGINS?

In Short: If you log in via a social media account, we may receive certain profile information.

If you choose to register or log in using a third-party social account (such as Facebook or Google), we may receive profile information from that provider. We use this information only as described in this notice or as otherwise made clear at the time of login.

8. INTERNATIONAL DATA TRANSFERS

In Short: Your information may be transferred and processed across Australia, the UK, the US, and other countries.

Because we operate across multiple jurisdictions and use international service providers, your personal information may be transferred to and processed in countries other than your own, including Australia, the United Kingdom, the European Union, and the United States.

Where required by law, we put in place appropriate safeguards for international transfers, including:

• Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office
• Reliance on adequacy decisions where applicable
• Other lawful transfer mechanisms under UK GDPR, EU GDPR, and the Australian Privacy Act

9. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information only as long as necessary for the purposes described or as required by law.

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

SMS/messaging and call records:

• Opt-in consent records: retained for a minimum of 4 years from the opt-in date
• Opt-out requests and suppression list entries: retained indefinitely to ensure compliance
• Message and call history: retained for 4 years or as required by law

10. DATA SECURITY

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, alteration, and disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to anyone under 18.

Our Services are intended for users aged 18 and over. We do not knowingly collect data from, or market to, children under 18. If we learn that we have collected personal information from someone under 18, we will delete it promptly.

12. YOUR PRIVACY RIGHTS

In Short: You may have rights to access, correct, delete, or restrict the use of your personal information.

Depending on where you live, you may have the following rights:

• Right to access the personal information we hold about you
• Right to correct inaccurate or incomplete information
• Right to request deletion of your personal information
• Right to restrict or object to certain processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a regulatory authority

To exercise any of these rights, contact us at [email protected].

13. AUSTRALIAN RESIDENTS

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to our handling of your personal information. You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Make a complaint about how we have handled your personal information

If you are not satisfied with our response to a complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.

14. UK AND EU RESIDENTS

If you are located in the United Kingdom or the European Economic Area, the UK GDPR / EU GDPR applies. In addition to the rights listed above, you have the right to:

• Object to processing based on legitimate interests or for direct marketing
• Not be subject to automated decisions producing legal or similarly significant effects without human review
• Lodge a complaint with your supervisory authority

UK residents may complain to the Information Commissioner's Office (ICO) at ico.org.uk or by phone on 0303 123 1113.

EU residents may complain to their national data protection authority. A list is available at edpb.europa.eu.

15. UNITED STATES RESIDENTS

TCPA rights

All US residents have rights under the Telephone Consumer Protection Act (TCPA), including:

• The right to revoke consent for automated calls or texts at any time
• The right to be placed on our internal Do-Not-Call list
• The right to file complaints with the Federal Communications Commission (FCC)

State privacy rights

Residents of certain US states (including California, Colorado, Connecticut, Utah, and Virginia) have additional rights, such as:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [email protected] or +1 872-312-2777.

16. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. As no uniform standard has been adopted, we do not currently respond to DNT browser signals.

17. UPDATES TO THIS NOTICE

In Short: We will update this notice as needed to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top. Where required by law, we will notify you of material changes.

18. HOW CAN YOU CONTACT US?

If you have questions or comments about this notice, contact us at:

19. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

You may have the right to request access to the personal information we hold about you, request corrections, or request deletion. To do so, contact us at [email protected] or by phone using the numbers above. We will respond within the timeframes required by applicable law.