Privacy Policy

This Privacy Policy explains how Microsite handles personal information, account information, uploaded content, analytics data, cookies, advertising data, and technical records when you use microsite.com.au, account features, public share pages, recording tools, upload tools, profile pages, email features, and related services.

1. Who this policy applies to

This policy applies to account owners, team members, people who upload or record content, people who view shared links, people who submit forms, people who comment or react on video pages, people who receive emails sent through Microsite, and visitors to Microsite marketing pages.

If you upload, publish, or share personal information about another person, you are responsible for making sure you have a lawful basis, permission, and authority to do so. Do not upload sensitive personal data, regulated records, confidential client material, health information, government identifiers, financial records, children's information, or other high-risk information unless you are authorised and have considered the consequences of online processing and sharing.

2. Information we collect

We collect information you provide directly, including email addresses, account details, display names, profile settings, brand settings, team invitations, uploaded files, recorded videos, page titles, descriptions, CTA settings, comments, replies, reactions, lead forms, support messages, and billing-related details you submit through the service.

We collect content and metadata needed to operate shared links, including file names, file sizes, content types, upload times, expiry settings, passwords or password hashes, slugs, thumbnails, generated video renditions, transcripts, captions, chapters, manifests, custom themes, logos, page settings, and share-page configuration.

We collect usage and technical information, including IP-derived location signals, device and browser information, referrers, page views, clicks, watch progress, downloads, revisit counts, form submissions, email delivery events, comments, reactions, upload events, render events, security logs, errors, and other diagnostic information.

We may receive information from service providers, including payment status from Stripe, delivery or security signals from Cloudflare, advertising or measurement signals from Google, and email or infrastructure records needed to operate the service.

3. How we collect information

We collect information when you create or access an account, request a login code, upload files, record video, publish a page, configure a share link, invite a team member, submit a lead form, comment, react, reply, download content, open an email, use billing features, contact us, or visit a page that runs analytics or advertising scripts.

We also collect information automatically through server logs, cookies, local storage, browser APIs, analytics events, queue messages, storage metadata, video processing systems, security tools, and third-party integrations used to provide the service.

4. Why we use information

We use information to provide and maintain Microsite, including authentication, uploads, recording, storage, video processing, playback, public links, password-protected links, lead capture, comments, analytics, account pages, profiles, branding, billing, email delivery, team access, abuse handling, security monitoring, debugging, backups, and customer support.

We use information to improve the product, understand usage, diagnose issues, prevent abuse, enforce limits, detect malicious activity, comply with legal obligations, respond to requests, reconcile billing, measure engagement, and communicate with users about account, operational, lifecycle, security, or product matters.

5. Public links and viewer information

When you publish a public share page, hosted page, profile, or achievement page, the content and metadata you choose to publish may be visible to anyone with the link and may be indexed or previewed by search engines, social platforms, messaging apps, crawlers, AI systems, or other third parties. Public pages may include video, files, names, branding, thumbnails, social metadata, CTAs, comments, reactions, lead forms, and other page elements configured by the account owner.

When someone views a shared page, Microsite may record analytics such as view time, watch progress, clicks, downloads, lead submissions, comments, reactions, referrers, approximate country, browser details, and revisit signals. These analytics may be shown to the account owner or used to provide notifications and engagement summaries.

6. Cookies, local storage, analytics, and advertising

Microsite uses cookies and local storage for account sessions, unlock tokens, referrals, preferences, app state, security, analytics, and product functionality. Some cookies are necessary for features such as login, password-protected links, lead-gated links, upload flows, and interface preferences.

We use Google advertising services on some eligible public pages. Google and other third-party vendors may use cookies, web beacons, IP addresses, or other identifiers to collect information, serve ads, measure ads, detect fraud, and personalize ads where permitted. Learn more about how Google uses data when you use our site.

Advertising and analytics may be limited, disabled, or changed depending on your region, consent requirements, browser settings, page type, policy requirements, account configuration, or platform approval status. For users in regions requiring additional consent for advertising cookies or personalised ads, we may withhold advertising scripts until an appropriate consent mechanism is available.

7. Payments and billing

Paid plan payments are processed by Stripe or another payment provider. We do not store full card numbers. We may store or receive billing metadata such as customer IDs, subscription status, plan information, invoice status, payment success or failure, renewal dates, and billing portal links so that we can provide account access, billing support, and plan enforcement.

8. Disclosure to service providers

We disclose information to service providers where needed to run Microsite. These providers may include Cloudflare for hosting, Workers, storage, queues, video delivery, security, email, and AI features; Stripe for payments; Google for advertising, analytics, fonts, indexing, and measurement; and other providers used for email, monitoring, debugging, support, or product operations.

We may also disclose information if required by law, to enforce our terms, to investigate abuse or security incidents, to protect rights or safety, to respond to complaints, to handle payment disputes, or as part of a business transfer, merger, acquisition, restructuring, or sale of assets.

9. Overseas disclosure

Microsite is operated online and uses global cloud, payment, advertising, analytics, email, and infrastructure providers. Information may be processed, stored, or accessed from Australia, the United States, and other countries where our providers or their subprocessors operate. Privacy protections and government access rules may differ between countries.

10. Retention

We retain information for as long as needed to provide the service, comply with law, maintain security, resolve disputes, enforce agreements, support billing, investigate abuse, and operate backups or logs. Uploads and shared links may expire or be deleted according to plan limits, user settings, account status, retention rules, abuse handling, or technical requirements.

Some records may remain in backups, logs, analytics aggregates, email records, billing records, security records, or abuse records for a limited period after deletion from the main product. We may retain de-identified, aggregated, or non-personal information for product, security, reporting, and operational purposes.

11. Security

We use technical and organisational measures designed to protect information, including access controls, encrypted transport, platform security controls, rate limits, file validation, password hashing where applicable, security headers, logging, and provider-level protections. No online service can guarantee perfect security. You should avoid uploading high-risk information unless necessary, keep your account access secure, and tell us if you believe a link, account, or upload has been exposed unexpectedly.

12. Access, correction, deletion, and complaints

You may ask to access, correct, export, or delete personal information associated with your account, subject to identity verification, technical limits, legal requirements, billing records, abuse records, security records, and legitimate retention needs. Account owners can also delete or update many uploads, links, profile details, and settings inside the product.

To make a privacy request or complaint, email privacy@microsite.com.au with enough detail for us to identify the relevant account, email address, link, upload, form submission, or event. We will review the request and respond as reasonably practicable. If you are in Australia and are not satisfied with how we handle a privacy complaint, you may have the right to contact the Office of the Australian Information Commissioner.

13. Children

Microsite is not designed for children and should not be used to upload or share children's personal information unless the uploader has all required authority and consents. We may remove or restrict content if we believe it creates risk for a child or violates law, policy, or these terms.

14. Changes to this policy

We may update this Privacy Policy when our product, providers, legal obligations, advertising configuration, analytics, payment flows, or information-handling practices change. The updated version will be posted on this page. If a change is material, we will try to provide reasonable notice through the service or by email.

15. Contact

For privacy requests, email privacy@microsite.com.au. For abuse, copyright, malware, impersonation, or unlawful content reports, email abuse@microsite.com.au.