01 — Overview
Our commitment to your privacy
bycaptur.io ("we", "us", or "our") provides AgencyPro, an AI-powered marketing platform for business owners, and suiteOS, a social media management tool used by agencies to manage the social accounts of the businesses they work for. Both are powered by Cortex and operated by Lion Tech Group Pty Ltd, a subsidiary of Lion Ventures Group. We are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our platform and services.
By using bycaptur.io, you agree to the collection and use of information as described in this policy.
This policy complies with the Australian Privacy Act 1988 (Cth) and the APPs, as well as the GDPR for EEA users.
02 — Data collection
Information we collect
Name, email, phone, company name, billing address.
Subscription tier, payment method type, billing history. Card details handled by PCI-DSS compliant processor.
Features accessed, campaigns, landing pages, automation flows, AI interactions.
Prompts, inputs, and outputs from Cortex-powered modules.
IP address, browser type, OS, device identifiers, session data.
Messages via support tickets, email, live chat.
Where you connect an advertising or social account you own, the access token that platform issues, the account and page identifiers you choose, and the performance figures for what runs through them. See Connected accounts.
03 — Purpose of use
How we use your data
04 — Third parties
Sharing & third parties
We do not sell your personal information.
Cloud hosting, payment processing, email delivery, analytics.
In mergers or acquisitions, data may transfer to successor entity.
Only where Australian law compels us, or to prevent a serious threat to life or safety. See our Government Data Requests policy.
05 — Connected accounts
Connected advertising & social accounts
Some features work by connecting an account the business already owns on another platform. Connecting is always done by the account owner, through that platform's own sign-in, and can be undone at any time. In suiteOS the business connects its accounts so the agency it works with can manage them on its behalf.
The platforms that can be connected, and what we do with each:
Publish posts the business has approved, read comments, messages and Page insights, and reply to comments and messages on the business's behalf.
Publish approved posts, reels and carousels, read comments, direct messages and account insights, and reply on the business's behalf.
Read the connected profile and publish approved posts.
In AgencyPro, create and manage campaigns the owner asks for in their own ad account. In suiteOS, read ad spend and results for reports only.
Publish approved posts and read the engagement on the page's posts.
Read the connected account's display name and avatar, and post videos the business has approved, with the privacy settings chosen at posting.
Read the connected Google account's name and email to identify the connection, publish posts to the Business Profile and read its performance.
For each connection we store:
The token the platform issues when you connect. It is kept on our servers so the service can carry out what you ask for. It is never shown in a browser, never shared with third parties and never used for anything else.
The identifiers and names of the accounts, Pages and profiles you choose to connect. We do not act on accounts you have not connected.
The posts we publish for you, the comments and messages on your accounts that are shown in the inbox, and daily figures such as reach, impressions, followers and engagement. We keep a copy because platforms stop serving history after a limited window and reports have to keep working.
Every post published and every campaign created on your behalf, with a timestamp, so any action can be traced.
Data from connected accounts is used only to provide the features listed above to the business that connected them and the agency it works with. It is not sold, not used for advertising, not shared with third parties except the service providers who host it for us, and never used to train or improve AI models, including Cortex.
Google user data. bycaptur.io's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request only the Google scopes the features above need, and no person at bycaptur.io reads Google user data except with your consent, for security, to comply with the law, or where it has been aggregated and anonymised for internal operations.
Disconnecting. You can disconnect any account from Brand Hub in suiteOS or from your portal in AgencyPro, or by removing the app in that platform's own settings. Either deletes the access token and the connection, and we can no longer reach the account. Posts already published and campaigns already created stay on your accounts, because they are yours.
Deleting the data. To have a connected account's data deleted, use the data deletion option in your Facebook settings, or email us (see Contact). We delete the connection, the account identifiers, the cached content and figures within 30 days and confirm when it is done. The record of campaigns already created and paid for is kept, because it is the receipt for money you spent.
06 — Cookies
Cookies & tracking
Authentication, session management, security.
Usage patterns, aggregated and anonymised.
Language, display, notification settings.
07 — Retention
Data retention
We retain data while your account is active. After closure, deleted within 90 days unless legally required.
08 — Your rights
Your privacy rights
Access, rectification, erasure, objection, portability, restrict processing, withdraw consent, complain to OAIC or EU DPA.
Contact: privacy@captur.com.au
09 — Security
How we protect your data
10 — International
International data transfers
We use SCCs for EEA transfers and comply with APP 8 for overseas recipients.
11 — Children
Children's privacy
bycaptur.io is for individuals aged 18+. We do not knowingly collect data from children.
12 — Updates
Changes to this policy
We will notify you of material changes via in-platform notice and email.
13 — Contact
Contact us
Privacy & Data Team
We respond within 5 business days.