Privacy Policy

Last updated: 9 August 2026

This Privacy Policy explains how Ramp Up App Pty Ltd (ABN 31 686 434 891, ACN 686 434 891) trading as Brandmojo ("Brandmojo", "we", "us") collects, uses, discloses and protects personal information.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where applicable, the UK and EU General Data Protection Regulation and the California Consumer Privacy Act.

1. Information we collect

Account information. Your email address. We do not collect or store passwords.

Information you provide. Your answers to the questions we ask about your business, and the design choices you make.

Audio recordings. If you choose to answer by voice, we collect the recording in order to transcribe it.

Generated content. The brand assets we produce for you.

Transaction information. A record of your purchase. Card details are held by our payment processor and are not accessible to us.

Technical and usage information. IP address, browser and device information, pages viewed, and usage counts, collected automatically.

2. How we use your information

We use personal information to:

• provide, operate and improve the service;
• generate and store your brand assets and make them available for download;
• authenticate you;
• process payments and maintain financial records;
• send service-related communications;
• send marketing communications where you have consented;
• prevent fraud and abuse and enforce our terms; and
• comply with our legal obligations.

Where you opt in, we may also display your brand name, tagline, industry, logo and colour palette publicly in our showcase gallery. No other information is displayed. You may withdraw this consent at any time in your account settings.

3. Legal bases for processing

Where the UK or EU GDPR applies, we rely on the following legal bases:

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

4. Artificial intelligence processing

We use a third-party artificial intelligence provider to generate brand assets from the information you provide, and may change provider from time to time. In every case our contractual arrangements require that the provider:

• does not use your information to train its models;
• deletes inputs and outputs within 30 days; and
• does not sell or otherwise disclose your information onward.

A provider may retain information for longer where required by law or where its abuse-detection systems identify content for review. We do not train any model of our own on your information.

5. Disclosure of your information

We disclose personal information to the following categories of service providers, who may use it only to perform services for us:

• cloud hosting and database providers;
• artificial intelligence generation providers;
• speech-to-text providers;
• payment processors;
• email delivery providers;
• analytics providers; and
• web font providers.

Where you consent to advertising cookies, we also allow advertising platforms to collect information about your visit. The information involved is limited to online identifiers, device and browser information, and the pages you viewed. Under the California Consumer Privacy Act this is treated as "sharing" for cross-context behavioural advertising, and may also be treated as a "sale". We do not otherwise sell your personal information, and we do not sell or share the personal information of anyone we know to be under 16.

We may also disclose personal information where required by law, in connection with legal proceedings, to enforce our terms, or in connection with a merger, acquisition or sale of assets.

6. International transfers

We are based in Australia and our service providers operate in a number of countries, including the United States. Where personal information is transferred out of the United Kingdom or the European Economic Area, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

7. Data retention

We retain personal information for as long as necessary for the purposes described in this Policy, and thereafter as follows:

• audio recordings are deleted once transcription is complete;
• account information and generated brand assets are retained while your account remains open;
• financial records are retained for seven years, as required by section 286 of the Corporations Act 2001 (Cth); and
• technical logs and analytics data are retained for a limited period and deleted on a rolling basis.

If you delete your account we will delete the associated personal information within 30 days, other than information we are required to retain by law. Deleting your account also ends your access to download the brand assets you have purchased. Your licence to use those assets is unaffected, but we will no longer hold a copy, so you should download your files first.

8. Security

We maintain administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest and restricted internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may request access to the personal information we hold about you, request correction of inaccurate information, request deletion of your information, obtain a copy of your information in a portable format, withdraw consent, and unsubscribe from marketing communications.

If the UK or EU GDPR applies to you, you may also object to or request restriction of processing, and lodge a complaint with a supervisory authority.

If you are a California resident, you may request disclosure of the categories of personal information collected in the preceding twelve months, request deletion or correction, opt out of the sale or sharing of your personal information, and exercise these rights without discriminatory treatment. To opt out, use the "Do Not Sell or Share My Personal Information" link on our website or decline advertising cookies in our banner. We also honour Global Privacy Control signals sent by your browser.

We will respond within 30 days. Where a request is complex, we may extend this period as permitted by applicable law and will notify you within the initial period.

10. Cookies

We use cookies that are strictly necessary to operate the service, including maintaining your session. With your consent we also use analytics cookies, and advertising cookies and pixels that allow advertising platforms to measure and target our campaigns. You can accept or decline non-essential cookies through the banner on our public pages, and change your choice at any time. Advertising cookies are not set unless you consent to them.

11. Children's privacy

The service is intended for business users and is not directed to children. You must be at least 16 years of age to create an account. We do not knowingly collect personal information from children, and will delete it if we become aware that we have.

12. Changes to this Policy

We may update this Policy from time to time. The date at the top of this page indicates when it was last revised. Where changes materially affect how we handle personal information we already hold, we will notify account holders before those changes take effect.

13. Contact us

For questions about this Policy, or to exercise any of your rights:

Email: contact@brandmojo.io

Post: Ramp Up App Pty Ltd, 8/126 Albert Street, East Melbourne VIC 3002, Australia

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au), the UK Information Commissioner's Office (ico.org.uk), or your local supervisory authority in the European Economic Area.