Privacy Policy

Last Updated: March 22, 2026

This Privacy Policy describes how NakedNoodle ("we," "us," or "our") collects, uses, and discloses your personal information when you use our social media management platform (the "Service").

We operate in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), the Queensland Information Privacy Act 2009, and global standards including the GDPR and CCPA.

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Information").

• Account Data: Name, email address, and billing information.
• Social Media Data: When you connect a social media account (e.g., TikTok, Instagram, YouTube), we collect access tokens and profile information provided by those platforms via their APIs.
• Content Data: The posts, images, and schedules you create or manage through our Service.
• Usage Data: IP addresses, browser types, and interaction logs.

2. How We Use Your Information

We use your data to:

• Provide and maintain the Service.
• Facilitate the posting of content to connected social media platforms.
• Process payments and prevent fraud.
• Comply with legal obligations under Australian and international law.

3. Third-Party Social Media Platforms

Our Service enables you to interface with third-party platforms. Your use of these platforms is governed by their respective terms and privacy policies.

• By connecting a Google account (YouTube), you are also bound by the Google Privacy Policy.
• We do not store your social media passwords. Access is managed via secure OAuth tokens.

4. International Data Transfers

We are based in Queensland, Australia. However, your data may be processed in other countries (e.g., via Cloudflare infrastructure). We ensure all overseas recipients are bound by standard contractual clauses or similar protections that meet Australian and GDPR adequacy standards.

5. Your Rights & Choices

Depending on your location, you have the right to:

• Access & Correction: Request a copy of your data or correct inaccuracies.
• Erasure: Request that we delete your personal information.
• Data Portability: Receive your data in a machine-readable format (per 2026 Data Act requirements).
• Withdraw Consent: Disconnect social media accounts at any time via your settings.

6. Data Security

We implement industry-standard encryption (AES-256) for data at rest and TLS for data in transit. OAuth tokens are stored encrypted and never exposed in plaintext.

7. Contact Us

For privacy inquiries or to lodge a complaint, contact our Privacy Officer via our contact page.

Address: Queensland, Australia