Privacy Policy

Billy Atlas is a platform owned and operated by Rugged Lane Industries® (ABN 46 680 178 054), which is the organisation responsible for the personal information described in this policy. For anything about privacy — questions, requests, complaints — contact us at support@billyatlas.com.

For general support, use support@billyatlas.com. For anything legal, use support@billyatlas.com.

This policy applies to personal information we collect through https://billyatlas.com, whether you're a creator, a brand, or simply visiting the site. It doesn't cover the privacy practices of other websites you reach through links from our platform, or of Meta, whose own privacy policy governs how it handles your Instagram data.

All users

• Name and email address
• Password — handled entirely by our authentication provider; Billy Atlas staff never see it
• Account role (creator or brand)
• Google sign-in identity, if you choose to sign in that way
• Usage data — pages visited, actions taken on the platform, and profile views on a creator's public profile

Creators

• Display name, location and categories
• Biography and audience or performance figures you enter
• Social links, rates, availability and travel willingness
• Brand preferences and exclusions
• Past partnerships, testimonials and deliverables
• Uploaded images

Brands

• Business name, website and logo
• Categories and contact details
• Campaign briefs, shortlists, invitations and messages you send

If you connect Instagram

If you choose to connect your Instagram account through Meta's official authorisation flow, we import account insights (reach, impressions, follower counts, and audience demographics as provided by Meta), media items and media insights. We do not collect anything from Instagram beyond what Meta's authorisation makes available.

Website visitors

If you just browse https://billyatlas.com without an account, we still collect limited usage data and the cookies and stored values described in our Cookie Policy.

We don't ask for or seek sensitive information (things like health information, sexual orientation, religious beliefs or racial or ethnic origin). If you include sensitive information in your profile, a message, or a brief, that's your choice, and it will be visible to whoever the rest of your profile or message is visible to. If sensitive information appears somewhere it shouldn't — for example, someone else's information, or something you'd like removed — contact support@billyatlas.com and we'll act promptly.

• Directly from you — when you sign up, build a profile, write a brief, send a message, or contact support
• From your device — technical and usage data collected automatically as you use the platform
• From Meta — if you connect an Instagram account, in the manner described above
• From publicly available sources — for brands, we may look at publicly available information (such as a business's own website) to help verify or enrich a brand profile

• To create and administer your account and authenticate you
• To build and display your Partnership Profile or media kit
• To let brands write briefs and receive a recommended shortlist of creators
• To let creators and brands message, invite and negotiate with each other
• To import and display Instagram insights and media where you've connected an account
• To operate, secure, maintain and improve the platform
• To respond to support requests and enforce our terms and policies
• To send you service communications and, where you've agreed, marketing communications
• To comply with our legal obligations

When a brand submits a campaign brief, we use the information in creator profiles (and connected Instagram data, where available) to generate a recommended shortlist with reasoning. This is a discovery tool, not a decision-maker: a human at the brand reviews the shortlist and decides who to contact. Billy Atlas doesn't decide who works with whom, and doesn't make any decision about you that has legal or similarly significant effect.

Other users, by design

Billy Atlas is a two-sided platform. If you're a creator with a published profile, brands can see everything on it: your display name, location, categories, biography, the audience and performance figures you've entered, imported Instagram insights (if connected), social links, rates, availability, travel willingness, past partnerships, testimonials, deliverables and uploaded images. Your email address is masked on your public profile.

If you're a brand, creators you invite or message can see your business name, website, logo, categories and the content of your briefs and messages.

Service providers

We share information with providers who help us run the platform: [HOSTING PROVIDER TO BE CONFIRMED] (hosting), [EMAIL PROVIDER TO BE CONFIRMED] (email delivery), and, where applicable, [ANALYTICS PROVIDERS TO BE CONFIRMED] (analytics) and Instagram (Meta Platforms) (connected-platform integration). They can only use your information to provide services to us.

Law enforcement and legal requirements

We disclose personal information where required or authorised by Australian law, such as in response to a valid legal request.

We may send you marketing communications about Billy Atlas where you'd reasonably expect it or where you've agreed. Every marketing message includes a clear way to opt out, and we comply with the Spam Act 2003 (Cth) — we won't send commercial electronic messages without consent, we'll always identify ourselves, and we'll always provide a functional unsubscribe option.

You can opt out at any time by using the unsubscribe link in any marketing email, adjusting your notification preferences, or emailing support@billyatlas.com. Opting out of marketing doesn't affect service communications we need to send you to operate your account.

Some of our service providers may store or process personal information outside Australia, including in [OVERSEAS PROCESSING COUNTRIES TO BE CONFIRMED]. Before disclosing personal information overseas, we take reasonable steps, consistent with Australian Privacy Principle 8, to ensure the recipient doesn't breach the APPs in relation to that information.

If you're located outside Australia, you may also have rights under your own local privacy laws in addition to the protections described here.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Instagram access tokens are encrypted and readable only by Billy Atlas server code — never sent to your browser, and never stored in browser local storage.

We rely on you to keep your account and profile information accurate — most of it, you can edit directly in your account settings or profile editor. If you find something you can't fix yourself, or believe information we hold about you is inaccurate, out of date or incomplete, contact support@billyatlas.com and we'll correct it.

You can request access to the personal information we hold about you by emailing support@billyatlas.com. We'll verify your identity and respond within a reasonable period.

Access requests are free unless your request is unusually onerous to fulfil. If a charge would apply, we'll explain it to you before any charge is incurred, so you can decide whether to proceed.

You can disconnect Instagram at any time from the Connect Instagram screen. Doing so removes the stored access token, the connection record, imported insights, imported media and media insights, and metrics calculated from them.

You can request deletion of your account in account settings, via the deletion form at /request-deletion, or by emailing support@billyatlas.com. For details on what happens to different kinds of data on deletion, see our Data Deletion policy.

We retain personal information for as long as needed for the purposes described in this policy, or as required by law. Specific retention periods for particular data types are [RETENTION PERIOD TO BE CONFIRMED].

We have processes to identify and respond to data breaches. If a breach is likely to result in serious harm to affected individuals, we'll notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

Billy Atlas is not intended for anyone under 18. We don't knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, contact support@billyatlas.com and we'll act on it.

We use a small number of cookies and similar stored values, described in full in our Cookie Policy, along with the live, itemised list of exactly what's installed.

If you think we've mishandled your personal information, tell us first: email support@billyatlas.com with details, and we'll investigate and respond.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. The version in effect is dated [LAST UPDATED DATE TO BE CONFIRMED] (originally effective [EFFECTIVE DATE TO BE CONFIRMED]). Material changes will be highlighted on the platform.