Privacy Policy

We collect information you provide directly to us, such as when you create an account, start a free trial, or contact us for support. This includes: • Name, email address, and phone number • Business name, type, and location • Billing information (processed securely via our payment provider — we do not store card details) • Usage data and activity within the platform • Communications you send us We also collect information automatically when you use our services, including IP address, browser type, device information, and pages visited.

We use the information we collect to: • Provide, maintain, and improve the Shoulder Monkey platform • Process transactions and send billing-related communications • Send onboarding, product updates, and support communications • Personalise your experience and pre-configure your account • Analyse usage patterns to improve our product • Comply with legal obligations We do not sell your personal information to third parties.

Your data is stored on secure servers located in your region. Australian business data is stored on Australian servers. New Zealand business data is stored on New Zealand servers. Data is not transferred outside your region without your consent, except where required by law. We use industry-standard encryption (TLS/SSL) for data in transit and encryption at rest for sensitive data. We implement access controls, audit logging, and regular security reviews. Our infrastructure maintains SOC 2 compliance and industry-standard security practices. While we take data security seriously, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

We share your information only in the following circumstances: • With service providers who assist us in operating our platform (e.g., payment processors, email delivery, hosting providers) • With our platform infrastructure provider, to deliver the service • When required by law or in response to valid legal process • In connection with a merger, acquisition, or sale of assets (you will be notified) We require all third parties to maintain appropriate data security standards.

Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion of your data • Object to or restrict certain processing • Data portability (receive your data in a structured, machine-readable format) Australian residents: Your rights are governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. New Zealand residents: Your rights are governed by the Privacy Act 2020. To exercise any of these rights, contact us at info@shouldermonkey.co. We will respond within 30 days.

We use cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage. You can control cookie settings through your browser, though disabling certain cookies may affect platform functionality. We do not use cookies for third-party advertising.

We retain your personal data for as long as your account is active or as needed to provide services. If you cancel your account, we will delete or anonymise your data within 90 days, unless we are legally required to retain it longer. Backup data may persist for up to 30 additional days after deletion.

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

Shoulder Monkey is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform at least 14 days before the changes take effect. Your continued use of the platform after that date constitutes acceptance of the updated policy.

For privacy-related enquiries, requests, or complaints: Email: info@shouldermonkey.co Phone: +61 2 5657 6545 Address: Shoulder Monkey, 377 Kent St, Sydney NSW 2000, Australia If you are not satisfied with our response, you may contact the relevant authority in your jurisdiction: • Australia: Office of the Australian Information Commissioner (oaic.gov.au) • New Zealand: Office of the Privacy Commissioner (privacy.org.nz)