Privacy Policy

Effective date: June 2026 Last updated: June 2026

This Privacy Policy explains how SEO BY DESIGN (ABN 27 604 617 923) ("we", "us", "our"), the operator of ReviewProsper.ai (the "Service"), collects, uses, holds, discloses and protects personal information. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act"), the Australian Privacy Principles (APPs) and the Spam Act 2003 (Cth).

By using our website, our Service, or by receiving SMS or other electronic messages sent through the Service, you acknowledge that you have read and understood this Policy.

1. Who this Policy covers

This Policy applies to:

visitors to reviewprosper.ai and our related web properties;

businesses and individuals who purchase, subscribe to, or use the Service ("Clients"); and

individuals whose contact details are uploaded to the Service by our Clients and who receive messages sent through it ("Recipients").

ReviewProsper.ai is an SMS reactivation and customer re-engagement platform. In most cases, our Clients determine what messages are sent and to whom. Where we handle personal information on behalf of a Client, the Client is responsible for ensuring it has the necessary consent and authority for that information. Where we handle personal information for our own purposes (for example, managing your account or operating our website), we act as the entity responsible under the Privacy Act.

2. The personal information we collect

Depending on how you interact with us, we may collect:

Identity and contact details - name, business name, email address, phone number, postal address, job title.

Account information - login credentials, billing details, subscription plan, and support history.

Recipient contact data - phone numbers and related contact details uploaded by Clients for the purpose of sending messages.

Message and campaign data - message content, delivery status, replies, opt-outs, and engagement metrics.

Technical data - IP address, device and browser type, and usage data collected through cookies and analytics tools when you visit our website.

Payment data - processed through our third-party payment providers; we do not store full card numbers on our systems.

We do not intentionally collect sensitive information (as defined in the Privacy Act) and ask that you do not submit it through the Service.

3. How we collect personal information

We collect personal information:

directly from you when you enquire, register, subscribe, or contact us;

from our Clients when they upload contact lists or campaign data;

automatically through cookies and analytics when you use our website; and

from third-party service providers who help us operate, market or improve the Service.

Where it is reasonable and practicable, we collect personal information directly from the individual concerned.

4. Why we collect, hold, use and disclose personal information

We use personal information to:

provide, operate, maintain and improve the Service;

create and manage accounts, and process payments;

send and deliver SMS and other messages requested by our Clients;

provide customer support and respond to enquiries;

send you service-related communications;

send you marketing communications where permitted (see section 6);

detect, prevent and address fraud, abuse and security issues; and

comply with our legal obligations.

We will only use or disclose personal information for the purpose for which it was collected, a directly related secondary purpose you would reasonably expect, or as otherwise permitted by law or with your consent.

5. SMS, electronic messaging and consent

Because the Service sends commercial electronic messages, the Spam Act 2003 (Cth) applies. Under that Act, commercial electronic messages must:

be sent only with the recipient's consent (express or, in limited circumstances, inferred);

clearly identify the sender and how to contact them; and

include a functional unsubscribe facility that is honoured promptly.

Our Clients are responsible for ensuring they have a lawful basis and the required consent to message every Recipient on a list they upload, and for the content of those messages. Clients warrant this to us under our Terms and Conditions.

Recipients can opt out of messages at any time by following the unsubscribe instructions in the message (for example, replying STOP) or by contacting us using the details in section 14. Opt-out requests are actioned promptly.

6. Direct marketing

We may send you marketing about our own products and services where the law permits. You can opt out at any time by using the unsubscribe link in our messages or contacting us directly. We do not sell personal information, and we do not use or disclose personal information for the direct marketing purposes of unrelated third parties without your consent.

7. Disclosure to third parties

We may disclose personal information to:

service providers who support the Service (for example, messaging carriers and gateways, cloud hosting, payment processors, analytics and customer-support tools);

professional advisers such as lawyers and accountants;

a purchaser or successor in the event of a sale or restructure of our business; and

government, regulators or law enforcement where required or authorised by law.

We require our service providers to handle personal information consistently with this Policy and applicable law.

8. Overseas disclosure

Some of our service providers (including messaging and cloud infrastructure providers) may store or process personal information outside Australia, including in countries such as the United States and within the European Union. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the APPs, as required by APP 8.

9. Security of personal information

We take reasonable technical and organisational steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, as required by APP 11. These steps include access controls, encryption in transit, and restricting access to authorised personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Notifiable data breaches

We comply with the Notifiable Data Breaches scheme under the Privacy Act. If a data breach occurs that is likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, in accordance with our legal obligations.

11. Retention of personal information

We retain personal information only for as long as necessary to provide the Service, satisfy our legal and record-keeping obligations, resolve disputes and enforce our agreements. Where we no longer require personal information and are not legally required to retain it, we take reasonable steps to destroy or de-identify it. Client and Recipient data uploaded to the Service is retained and deleted in accordance with our agreement with the relevant Client.

12. Cookies and website analytics

Our website uses cookies and similar technologies to operate the site, remember preferences, and understand how the site is used. You can control cookies through your browser settings, though disabling some cookies may affect how the website functions. We may use analytics tools (such as web analytics and advertising pixels) that collect usage data in aggregate or pseudonymous form.

13. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading, in accordance with APP 12 and APP 13. To make a request, contact us using the details in section 14. We may need to verify your identity before responding. We will respond within a reasonable period. If we decline a request, we will explain why and how you can complain.

Where personal information was uploaded to the Service by one of our Clients, we may need to refer your request to that Client, who is responsible for that information.

14. Contact us and complaints

If you have a question about this Policy, want to access or correct your information, or wish to make a privacy complaint, please contact:

Privacy Officer - SEO BY DESIGN (ReviewProsper.ai)

Level 27, 101 Collins Street, Melbourne VIC 3000, Australia

Phone: 1300 667 241 or +61 489 083 592

We will acknowledge your complaint and aim to resolve it promptly. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992. Complaints relating to spam or unsolicited electronic messages may also be directed to the Australian Communications and Media Authority (ACMA) at acma.gov.au.

15. Changes to this Policy

We may update this Policy from time to time. The current version will always be available on our website, and the "Last updated" date will reflect the most recent changes. Material changes will be communicated where appropriate.