Last Updated: August 31, 2026
Effective Date: August 31, 2026
1. Introduction
Good Brains (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you:
-
Visit our website at www.goodbrains.pro
-
Engage our services (SaaS engineering, video production, AI studio services, programmatic automation, or post-production)
-
Use any SaaS platform, application, or digital product we have built or host on your behalf
-
Communicate with us via email, phone, or contact forms
We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and, where applicable, the General Data Protection Regulation (GDPR) for users in the European Economic Area.
By accessing our website or using our services, you consent to the practices described in this Privacy Policy.
2. Who We Are
Good Brains
A hybrid creative technology studio based in Melbourne, Victoria, Australia.
A hybrid creative technology studio based in Melbourne, Victoria, Australia.
If you have questions about this Privacy Policy or wish to access, correct, or delete your personal information, please contact us using the details in Section 16.
3. What Personal Information We Collect
We collect personal information that is reasonably necessary for our business operations. This may include:
3.1 Information You Provide Directly
-
Identity Data: Name, job title, company name
-
Contact Data: Email address, phone number, business address
-
Project Data: Details about your business, brand assets, creative briefs, and project requirements
-
Financial Data: Billing address, payment information (processed securely via third-party payment processors; we do not store full credit card details)
-
Account Data: Login credentials, user preferences, and profile information for SaaS platforms we build or manage
3.2 Information Collected Automatically
-
Technical Data: IP address, browser type and version, operating system, device identifiers
-
Usage Data: Pages visited, time spent on site, referral source, clickstream data
-
Communication Data: Records of correspondence, meeting notes, and support tickets
3.3 Client Content and Assets
When you engage us for video production, AI studio services, or SaaS development, you may provide:
-
Brand assets (logos, images, video footage)
-
Customer databases or user lists (for programmatic video or SaaS migration)
-
Proprietary business data, scripts, or creative materials
We treat all client content as confidential and process it strictly in accordance with our service agreements.
4. How We Collect Personal Information
We collect personal information through:
-
Direct interactions: Contact forms, email, phone calls, video meetings, and contracts
-
Automated technologies: Cookies, server logs, and analytics tools (see Section 7)
-
Third parties: Business referrals, partner agencies, and publicly available professional profiles (e.g., LinkedIn)
-
SaaS platforms: If we have built a platform for you, user data may be collected in accordance with your own privacy policy and our data processing terms
5. Purpose of Collection
We collect, hold, use, and disclose personal information for the following primary purposes:
-
To provide, operate, and improve our services (SaaS development, video production, AI studio services, automation, and post-production)
-
To communicate with you regarding projects, proposals, and support
-
To process payments and manage accounts
-
To personalize user experiences on platforms we build
-
To generate programmatic or AI-driven content where you have explicitly provided data for this purpose
-
To comply with legal obligations, resolve disputes, and enforce agreements
-
To send marketing communications (only where you have consented, or where permitted by law)
We will not use your personal information for purposes unrelated to our services without your consent, unless required or permitted by law.
6. AI, Automated Processing, and Client Data
Given the nature of our AI studio and programmatic services, the following applies:
6.1 AI-Generated Content
When you engage our AI character design, virtual studio, or AI video creation services:
-
We may use your brand assets, scripts, or reference materials as inputs to generative AI models
-
We employ seed-locked architectures and proprietary prompt engineering to ensure consistency and control
-
We do not use your confidential business data to train public AI models without explicit written agreement
6.2 Programmatic Video and Automation
For data-driven video generation and SaaS automation:
-
We process data you provide (e.g., customer names, locations, product data) solely for the purpose of rendering your requested outputs
-
All data processing occurs within secured, access-controlled environments
-
We can configure data deletion protocols post-render upon request
6.3 No Sale of Data to AI Companies
We do not sell, license, or transfer your personal information or proprietary content to third-party AI model trainers, data brokers, or advertising networks.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
-
Ensure website functionality and security
-
Analyze traffic and user behavior (via Google Analytics or similar)
-
Remember user preferences
Types of Cookies We Use:
| Type | Purpose |
|---|---|
| Essential | Required for website operation (e.g., security, form submissions) |
| Analytics | Help us understand how visitors interact with our site |
| Functional | Remember preferences and settings |
You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
8. Third-Party Services and Disclosure
We may disclose personal information to:
-
Service Providers: Hosting providers (e.g., AWS, Vercel), payment processors, email platforms, project management tools, and analytics providers — all bound by confidentiality obligations
-
Subcontractors: Specialist VFX artists, sound engineers, or developers engaged under strict NDAs for specific project components
-
Legal Authorities: When required by law, court order, or to protect our legal rights
-
Business Transfers: In the event of a merger, acquisition, or asset sale (we will notify you via email and/or prominent notice on our website)
We do not authorize third parties to use your personal information for their own marketing purposes.
9. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
-
SSL/TLS encryption for data in transit
-
Access controls and role-based permissions for SaaS platforms
-
Secure cloud infrastructure with regular security updates
-
Confidentiality agreements with all team members and subcontractors
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
10. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law:
-
Client project data: Retained for the duration of the engagement plus 7 years (for tax and legal compliance), unless you request earlier deletion
-
Website analytics data: Typically retained for 26 months
-
AI training inputs and generated assets: Retained according to your specific service agreement; deleted upon written request post-project completion
-
Marketing data: Retained until you unsubscribe or request deletion
When personal information is no longer needed, we securely delete or de-identify it.
11. International Data Transfers
While we are based in Australia, some of our service providers (e.g., cloud hosting, analytics, AI processing tools) may operate in other jurisdictions, including the United States, European Union, and Singapore.
By using our services, you acknowledge that your personal information may be transferred to, stored, and processed in countries outside Australia. Where required, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your information.
12. Your Rights and Choices
Depending on your location, you may have the following rights:
12.1 Australian Residents
Under the Privacy Act 1988, you have the right to:
-
Access the personal information we hold about you
-
Request correction of inaccurate or outdated information
-
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs
12.2 GDPR Rights (EEA Residents)
If you are in the European Economic Area, you have the right to:
-
Access your personal data
-
Rectification of inaccurate data
-
Erasure (“right to be forgotten”)
-
Restriction of processing
-
Data portability
-
Objection to processing based on legitimate interests
-
Withdraw consent at any time
12.3 How to Exercise Your Rights
To exercise any of these rights, please contact us at hello@goodbrains.pro. We will respond within 30 days. We may need to verify your identity before processing your request.
13. Children’s Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.
14. Links to Other Websites
Our website may contain links to third-party websites (e.g., partner portfolios, client sites, or tools). We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every site you visit.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised “Last Updated” date.
Material changes will be notified via:
-
A prominent notice on our website homepage
-
Direct email notification to active clients
We encourage you to review this page periodically.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:
For privacy-specific requests: privacy@goodbrains.pro (recommended to set up this alias)
If you are not satisfied with our response, Australian residents may contact:
17. Disclaimer
This Privacy Policy is provided as a template and does not constitute legal advice. Given the nature of our services — including SaaS development, AI content generation, and programmatic data processing — we strongly recommend having this document reviewed by a qualified Australian solicitor before publication to ensure full compliance with the Privacy Act 1988 (Cth), the Spam Act 2003 (Cth), and any other applicable regulations.