Rebrandless / Privacy policy
Privacy policy
Your business context is for your publication. Your client relationships stay yours.
Last updated
01
Haeeum and the agency boundary
Rebrandless grew out of the approach used for clients of Haeeum, the marketing agency also founded by Zach Kendall. We created Rebrandless to make managed publishing available to businesses that cannot afford a larger agency engagement.
Only the shared founder, Zach Kendall, has access across both businesses. No other Haeeum team member has access to Rebrandless systems or private customer information. We do not share or disclose your private business context, unpublished content or client information with Haeeum. We do not use it for Haeeum prospecting, marketing or client work.
Rebrandless service providers are a separate category, described below. Published articles are public; this commitment concerns information you have entrusted to us privately.
Agencies considering white-label arrangements can speak directly with Zach about an NDA before sharing confidential client details. Zach is willing to sign a separate agreement with strong confidentiality obligations, including agreed financial remedies for proven unauthorised sharing with Haeeum. The agreement must define the parties, protected information, proof and enforceable remedies; there is no automatic penalty or signed NDA created by this page.
02
Who handles your information
This policy covers the Rebrandless public website, enquiries, accounts and managed publishing service. The current operator and postal contact details are listed in one place in our Terms of service.
When an agency supplies client information, we use it to deliver that agency’s agreed Rebrandless service. The agency must have authority to provide it and remains responsible for its own privacy notices and client instructions.
03
What we collect
- Names, email addresses and messages when you contact us.
- Account and organisation details, domain information and service preferences when you sign up.
- Business context, brand assets, topic feedback and draft or published content supplied for your publication.
- Public information from your website when we research your business.
- Technical information such as IP addresses, browser details and security or error logs from website and account use.
- Order, invoice and transaction records when you purchase a service.
We collect information directly from you, your authorised representatives, your website and the services used to operate Rebrandless. Please only provide information needed for the work. Do not send passwords, payment-card details, sensitive personal information or confidential client lists through the general enquiry form.
If necessary information is not provided, we may be unable to reply, create your account or deliver part of the service.
04
Why we use it
We use information to respond to enquiries, authenticate accounts, understand your business, prepare your publication, manage publishing, handle feedback and orders, keep the service secure, troubleshoot problems and meet legal recordkeeping obligations.
Private briefs and customer records are not published as articles. We publish content under the scope and approval arrangements you agree with us. You should confirm that any personal or confidential information intended for publication is authorised for public use.
05
Service providers and AI
Rebrandless manages publication design, editorial review and publishing from Australia. Claude and ChatGPT support our work as AI tools. The services below handle information for specific technical purposes.
AI-assisted content preparation
- Claude / Anthropic and ChatGPT / OpenAI — tools we use for AI-assisted research, design and content preparation. Business context, instructions and unpublished drafts may be provided to these services. Anthropic privacy policy and OpenAI privacy policy.
AI data retention and model-improvement use depend on the product, account type and settings used. We do not make a blanket promise that all AI processing is excluded from training or retained for a fixed period. If you require particular confidentiality, retention or AI-use restrictions, agree them with us before supplying the material.
Hosting and accounts
- Cloudflare — website delivery, hosting, application storage and security. Cloudflare privacy policy.
- Clerk — account authentication in the Rebrandless app. Clerk privacy policy.
Payments and subscriptions
- Stripe — secure checkout, payment processing and recurring billing. Stripe receives the payment details you enter; we receive the order, billing and subscription information needed to manage your service. Our website does not receive your full card number. Stripe privacy policy.
Website enquiries only
- Web3Forms — delivers submissions from our website contact form: your name, email address, message and associated technical information. It has no role in creating, writing or operating your blog. Web3Forms privacy policy.
We may also disclose information when legally required or when reasonably necessary to address fraud, protect the service or establish or defend legal rights. We do not sell customer personal information or give it to Haeeum for its own purposes.
06
Processing outside Australia
Cloud services. Our publication service is managed from Australia. The technology providers we use for hosting, accounts and AI assistance may process or store information overseas, including in the United States and the European Economic Area. Locations depend on the service, settings and routing.
Website contact-form submissions only. When you submit an enquiry through our website, Web3Forms processes that submission. Web3Forms operates from India and uses international infrastructure, so information sent through that form may be handled outside Australia, including by its India-based operator. This is an enquiry-delivery service; it does not create content or run customer blogs. Its Data Processing Agreement describes its processing and infrastructure.
These provider arrangements mean we cannot promise Australian-only data processing or storage. If you require a particular processing location, contact us before supplying the information.
08
Storage, security and retention
We use access restrictions and the security features of our hosting and account providers to protect information. Access is for Rebrandless service purposes; the Haeeum boundary above applies. No online system can guarantee absolute security.
We keep information for as long as needed for the service, enquiries, records, disputes and applicable legal requirements, then delete or de-identify it when it is no longer needed. Provider logs and backups have their own retention cycles. Account closure does not necessarily erase every record immediately.
You can request deletion or ask what records are retained. We will explain any legal or operational reason that prevents deletion and take appropriate steps with relevant providers. If a data incident requires notification under applicable law, we will notify the relevant people and regulator.
09
Your choices, requests and complaints
You can ask to access or correct your personal information, request deletion, raise an objection or make a privacy complaint. Contact Zach Kendall through the contact form and start your message with “Privacy request”, or write to the postal address in our operator record.
We may need reasonable information to verify your identity before releasing or changing records. We aim to respond within 30 days. If a request takes longer, we will explain why and give you an update. Some requests may be limited by legal obligations or the rights of others.
If you are dissatisfied with our response, you can seek help from the Office of the Australian Information Commissioner where the matter falls within its jurisdiction, or another relevant regulator. This policy does not limit rights available under applicable privacy law.
10
Policy updates
We will update this policy when the service or our information-handling practices change. The date at the top identifies the current version. Where a change materially affects existing customers, we will provide appropriate notice and obtain any consent required by law.