Legal
What personal information Billy Atlas collects, why, who it is shared with, and how to access, correct or delete it.
Who operates Billy Atlas
Billy Atlas is a platform owned and operated by Rugged Lane Industries® (ABN 46 680 178 054). In these terms, 'Billy Atlas', 'we', 'us' and 'our' refer to Rugged Lane Industries® as the operator of the Billy Atlas platform, unless the context requires otherwise.
This policy explains how Rugged Lane Industries® (ABN 46 680 178 054), as the operator of Billy Atlas (https://billyatlas.com), collects, holds, uses and discloses personal information, and how you can access it, correct it, or complain about how we've handled it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Billy Atlas is a platform owned and operated by Rugged Lane Industries® (ABN 46 680 178 054), which is the organisation responsible for the personal information described in this policy. For anything about privacy — questions, requests, complaints — contact us at support@billyatlas.com.
For general support, use support@billyatlas.com. For anything legal, use support@billyatlas.com.
This policy applies to personal information we collect through https://billyatlas.com, whether you're a creator, a brand, or simply visiting the site. It doesn't cover the privacy practices of other websites you reach through links from our platform, or of Meta, whose own privacy policy governs how it handles your Instagram data.
All users
Creators
Brands
If you connect Instagram
Connecting Instagram is optional — Billy Atlas works without it. If you choose to connect a professional Instagram account through Meta's official authorisation flow, we import your Instagram profile information (such as username, account type, profile picture and follower count), account insights (reach, impressions and audience demographics as provided by Meta), your media items and the insights Meta provides for them. We also calculate performance figures from that imported data, such as engagement rate and average reach. We do not collect anything from Instagram beyond what your authorisation to Meta makes available, and we only request the profile and insights permissions needed for the features described here.
Website visitors
If you just browse https://billyatlas.com without an account, we still collect limited usage data and the cookies and stored values described in our Cookie Policy.
We don't ask for or seek sensitive information (things like health information, sexual orientation, religious beliefs or racial or ethnic origin). If you include sensitive information in your profile, a message, or a brief, that's your choice, and it will be visible to whoever the rest of your profile or message is visible to. If sensitive information appears somewhere it shouldn't — for example, someone else's information, or something you'd like removed — contact support@billyatlas.com and we'll act promptly.
When a brand submits a campaign brief, we use the information in creator profiles (and connected Instagram data, where available) to generate a recommended shortlist with reasoning. This is a discovery tool, not a decision-maker: a human at the brand reviews the shortlist and decides who to contact. Billy Atlas doesn't decide who works with whom, and doesn't make any decision about you that has legal or similarly significant effect.
Other users, by design
Billy Atlas is a two-sided platform. If you're a creator with a published profile, brands can see everything on it: your display name, location, categories, biography, the audience and performance figures you've entered, imported Instagram insights (if connected), social links, rates, availability, travel willingness, past partnerships, testimonials, deliverables and uploaded images. Your email address is masked on your public profile.
If you're a brand, creators you invite or message can see your business name, website, logo, categories and the content of your briefs and messages.
Service providers
We share information with the providers who help us run the platform: Lovable (application hosting and content delivery) and Supabase (managed database, authentication and file storage), Supabase (account and authentication emails), and Instagram (Meta Platforms) where you have chosen to connect an account. They can only use your information to provide those services to us.
Law enforcement and legal requirements
We disclose personal information where required or authorised by Australian law, such as in response to a valid legal request.
We do not sell personal information. We do not use third-party analytics, advertising or tracking services. We do not process payments between brands and creators, and paid subscriptions are not currently billed through the platform — if that changes, this policy will be updated to name the payment processor before any payment is taken.
We may send you marketing communications about Billy Atlas where you'd reasonably expect it or where you've agreed. Every marketing message includes a clear way to opt out, and we comply with the Spam Act 2003 (Cth) — we won't send commercial electronic messages without consent, we'll always identify ourselves, and we'll always provide a functional unsubscribe option.
You can opt out at any time by using the unsubscribe link in any marketing email, adjusting your notification preferences, or emailing support@billyatlas.com. Opting out of marketing doesn't affect service communications we need to send you to operate your account.
Some of our service providers may store or process personal information outside Australia, including in Singapore and the United States. Before disclosing personal information overseas, we take reasonable steps, consistent with Australian Privacy Principle 8, to ensure the recipient doesn't breach the APPs in relation to that information.
If you're located outside Australia, you may also have rights under your own local privacy laws in addition to the protections described here.
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Instagram access tokens are encrypted and readable only by Billy Atlas server code — never sent to your browser, and never stored in browser local storage.
No system is perfectly secure. We can't guarantee absolute security, but we work to keep your information appropriately protected and to respond quickly if something goes wrong.
We rely on you to keep your account and profile information accurate — most of it, you can edit directly in your account settings or profile editor. If you find something you can't fix yourself, or believe information we hold about you is inaccurate, out of date or incomplete, contact support@billyatlas.com and we'll correct it.
You can request access to the personal information we hold about you by emailing support@billyatlas.com. We'll verify your identity and respond within a reasonable period.
Access requests are free unless your request is unusually onerous to fulfil. If a charge would apply, we'll explain it to you before any charge is incurred, so you can decide whether to proceed.
You can disconnect Instagram at any time from the Connect Instagram screen. Doing so removes the stored access token, the connection record, imported insights, imported media and media insights, and metrics calculated from them.
You can request deletion of your account in account settings, via the deletion form at /request-deletion, or by emailing support@billyatlas.com. For details on what happens to different kinds of data on deletion, see our Data Deletion policy.
We keep personal information only as long as it is reasonably required to provide the platform, comply with our legal and tax obligations, resolve disputes, and maintain security and trust-and-safety records. In practice, that works out as follows.
Where information must be kept for a legal, tax or safety reason after deletion, we keep only what that reason requires, and no longer than it requires.
We have processes to identify and respond to data breaches. If a breach is likely to result in serious harm to affected individuals, we'll notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme under the Privacy Act.
Billy Atlas is not intended for anyone under 18. We don't knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, contact support@billyatlas.com and we'll act on it.
We use a small number of cookies and similar stored values, described in full in our Cookie Policy, along with the live, itemised list of exactly what's installed.
If you think we've mishandled your personal information, tell us first: email support@billyatlas.com with details, and we'll investigate and respond.
If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We may update this policy from time to time. The version in effect is dated 8 August 2026 (originally effective 8 August 2026). Material changes will be highlighted on the platform.