Privacy policy

Last modified: 11 August 2026

This privacy policy outlines how Branch Up Pty Ltd (Branch Up) manages personal data collected through its website and products. Registered in Australia, Branch Up values the privacy of its users and commits to handling personal data transparently and responsibly, conforming to applicable laws.

Collection and use of personal data

Website

  • No tracking: We do not use tracking cookies or similar technologies to track visitors to our website.
  • Contact forms: We collect names, emails, company names, and websites only when voluntarily submitted via our contact forms.
  • Downloads: We record IP addresses when product files are downloaded for security, abuse prevention, and licensing enforcement.
  • Licensing: During transactions for licences, we collect names, emails, company names, billing addresses, VAT numbers, and IP addresses necessary for transaction processing and compliance obligations. We use Stripe or Pin Payments for handling payments; credit card details are not stored by us.
  • Records retention: Information provided during transactions is retained for accounting, licensing, and tax compliance purposes.

Products

  • Level Up XP and Level Up Quest: Personal data collected by these products are managed by our customers directly.
  • Level Up Learn: We store names and emails to facilitate user login and access.
  • Telemetry: Our products may send us anonymised usage data.
  • Audio Generation: We store text submitted for audio generation for service delivery and security purposes.

Data sharing and disclosure

Branch Up does not sell personal data. We share personal data with third parties only where needed to provide our services, process transactions, maintain accounting records, or comply with legal obligations. This includes payment providers such as Stripe or Pin Payments, Postmark for email delivery, Google’s services for speech synthesis, and Xero for accounting.

When users interact with data in our products through AI agents using the Model Context Protocol (MCP), requested data is sent directly from the customer’s system to services used by the agent and does not pass through Branch Up. Data sent to those services is handled according to their own privacy practices.

Service providers engaged by Branch Up are expected to handle personal data securely and in accordance with applicable privacy laws.

Data protection and rights

We implement appropriate technical and organisational measures to protect personal data. You have rights including access to your data, correction, deletion, and the right to restrict or object to processing, in accordance with applicable laws. You may exercise these rights by contacting us directly.

International data transfers

Where Branch Up discloses personal data to service providers outside Australia, we take reasonable steps to ensure that personal data is handled in accordance with applicable privacy laws.

Updates and inquiries

Our privacy policy may be updated to reflect changes in legal or regulatory obligations. Please review periodically. For questions or to raise a complaint regarding data handling, contact us at dpo at branchup dot tech. We will review privacy complaints and respond as soon as reasonably practicable.

This document aims to provide clarity on our data handling practices and your rights concerning your personal data.