How Kybera handles your information

Who we are

Kybera is an advertising platform published and operated by WYP Labs Pty Ltd (ACN 701 937 064), at kybera.marketing and app.kybera.marketing. We follow the Australian Privacy Principles under the Privacy Act 1988. Contact us at info@wyplabs.com.au.

What we collect

• Your account: your name, work email and password (stored as a hash by our authentication provider).
• Brand material: the guidelines, approved messages and images your brand connects from Brandloop.
• Advertising data: campaigns, ads, spend and results from the Meta, Google and LinkedIn ad accounts a brand owner connects, through those platforms' official APIs.
• CRM stage changes: when a brand connects HubSpot, we keep only a one-way hash of each contact's email, never the address itself.
• Landing page sign-ups: emails people enter on a landing page a brand publishes with Kybera, visible only to that brand's owners and admins.
• Usage and security logs: sign-in attempts and actions taken, kept to protect accounts and show each brand's history.

How we use it

• To build, check, publish and report on ads for the brand you work on.
• To show each brand only to the people that brand has added.
• To keep the service secure, including limiting password guessing.
• We do not sell personal information, and we do not use one brand's data for another brand.

Information from Meta, Google and LinkedIn

We access ad accounts only with the permission of someone who manages them, and only to manage and report on that brand's own advertising. Platform data is never shared with other brands or used to build profiles of people. You can disconnect an account at any time from Integrations, which stops access straight away.

Who we share it with

We use service providers to run Kybera: Supabase (database and sign-in, Sydney), Vercel (hosting, Sydney), Nango (secure connection to ad platforms), Anthropic and OpenAI (writing and image generation for ads; they do not train on our requests under our agreements), and the platforms you connect. Some providers process data outside Australia, including in the United States.

[Confirm each provider's data terms before publishing.]

How long we keep it

We keep your information while your brand uses Kybera. When a brand or account is deleted, we delete its data within 30 days, except where the law requires us to keep records longer. Backups roll off within [backup retention period].

Your choices

You can ask to see, correct or delete your personal information by emailing info@wyplabs.com.au. See Deleting your data for how. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If we change this policy we'll update the date above and tell account holders about material changes before they apply.