Tiny but Mighty Marketing Club is a software-as-a-service (SaaS) platform owned and operated by Integrity AI Pty Ltd (ABN 71 682 960 970, ACN 682 960 970) ("we", "us", "our"), trading as Tiny but Mighty Marketing Club. The platform enables users to create and publish social media content using artificial intelligence powered by the Anthropic Claude API, with integrations for Meta (Facebook/Instagram), TikTok, and LinkedIn.
We are committed to protecting your personal information and handling it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, hold, use, and disclose your personal information, and how you can access, correct, or make a complaint about it.
By using Tiny but Mighty Marketing Club, you agree to the collection and use of your information as described in this Privacy Policy.
Who we are
Tiny but Mighty Marketing Club is operated by Integrity AI Pty Ltd (ABN 71 682 960 970, ACN 682 960 970), trading as Tiny but Mighty Marketing Club.
If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer at Integrity AI Pty Ltd, PO Box 5369, West End, QLD 4101, Australia, or email hello@tbmmc.com.au.
Personal information we collect
We collect personal information that is reasonably necessary to provide the Tiny but Mighty Marketing Club platform and its features. The kinds of personal information we may collect include:
- Account information: your name, email address, username, and password;
- Billing information: payment card details (processed by our third-party payment provider), billing address, and transaction history;
- Profile information: business name, industry, social media account handles, and preferences you provide when setting up your account;
- User-generated content: text prompts, content briefs, images, and other inputs you provide to generate social media content;
- Social media account data: access tokens, page IDs, organisation IDs, and account metadata obtained when you connect your Meta (Facebook/Instagram), TikTok, or LinkedIn accounts;
- Usage data: log files, IP addresses, browser type, device identifiers, pages visited, features used, and session duration;
- Communications: messages you send to our support team or through in-platform feedback tools.
Where practicable, we will allow you to interact with us anonymously or using a pseudonym. However, certain features of the platform require identifiable information to function.
How we collect personal information
We collect personal information in the following ways:
- directly from you when you register for an account, complete your profile, or contact us;
- automatically when you use the platform, through cookies, web beacons, and similar tracking technologies;
- from third-party social media platforms (Meta, TikTok, and LinkedIn) when you authorise the platform to connect to your accounts via their APIs;
- from our payment processor when you complete a transaction;
- from Anthropic when processing your content generation requests through the Claude API, to the extent that any personal information is included in your prompts or outputs.
We will notify you at or before the time of collection (or as soon as practicable afterwards) of the purposes for which we are collecting your information, unless it is unreasonable or impracticable to do so.
Purposes for which we use your personal information
We use your personal information for the following primary purposes:
- to create and manage your account;
- to provide, operate, and improve the Tiny but Mighty Marketing Club platform;
- to process your content generation requests using the Anthropic Claude API;
- to publish content to your connected social media accounts on Meta, TikTok, and LinkedIn platforms;
- to process payments and manage billing;
- to communicate with you about your account, updates, and support requests;
- to send you product updates, marketing communications, and promotional offers (where you have consented or where permitted by law);
- to comply with our legal obligations, including obligations under the Privacy Act 1988 (Cth), the Meta Platform Terms, the TikTok Developer Terms of Service, the TikTok Data Sharing Agreement, and the LinkedIn API Terms of Use;
- to detect, investigate, and prevent fraud, security incidents, and other harmful activity;
- to analyse usage patterns and improve platform performance and user experience.
We will not use your personal information for a secondary purpose unless:
- you have consented to that use;
- you would reasonably expect us to use it for that purpose and it is related to the primary purpose; or
- we are required or authorised by law to do so.
Automated decision-making and AI processing
Tiny but Mighty Marketing Club uses artificial intelligence, specifically the Anthropic Claude API, to generate social media content based on your inputs and preferences. This section explains how AI is used in our platform in accordance with APP 1.7 and APP 1.8 of the Privacy Act 1988 (Cth).
Kinds of personal information used in AI processing. The following kinds of personal information may be processed by the Anthropic Claude API when you use our content generation features:
- content briefs, prompts, and instructions you provide;
- your stated business name, industry, tone of voice, and brand preferences;
- historical content you upload or reference for style matching;
- social media account metadata used to tailor content for specific platforms (Meta, TikTok, and LinkedIn).
Kinds of decisions made or substantially assisted by automated programs. Our platform uses automated programs to:
- generate draft social media content based on your inputs;
- suggest content formats, hashtags, and posting schedules;
- determine content suitability for specific social media platforms (Meta and TikTok) based on platform guidelines.
These automated outputs are presented to you as suggestions or drafts. You retain full control over whether to publish, edit, or discard any AI-generated content. The platform does not make decisions that significantly affect your legal rights or interests without your review and approval.
Content generation requests are processed by Anthropic PBC, a third party based in the United States. Anthropic processes your inputs in accordance with its own privacy policy and API usage policies. We have taken steps to ensure that our use of the Anthropic Claude API complies with applicable data protection requirements, including restrictions on submitting sensitive personal information in prompts.
You should avoid including sensitive personal information (such as health information, financial account details, or government identifiers) in content prompts submitted to the platform.
Disclosure of personal information
We may disclose your personal information to the following categories of recipients:
- Anthropic PBC (United States): to process content generation requests via the Claude API;
- Meta Platforms, Inc. (United States): to publish content to your connected Facebook and Instagram accounts via the Meta Graph API and Facebook Video API;
- TikTok Pte. Ltd. / TikTok Inc. (Singapore / United States): to publish content to your connected TikTok account via the TikTok API, in accordance with the TikTok Developer Terms of Service and TikTok Data Sharing Agreement;
- LinkedIn Corporation (United States): to publish content to your connected LinkedIn profile or company page via the LinkedIn API, in accordance with the LinkedIn API Terms of Use;
- Payment processors: to process subscription payments and billing;
- Cloud infrastructure providers: to host and operate the platform, including Supabase (our database provider, hosted in Sydney, Australia) and Vercel (our website hosting provider, operating on a global edge network);
- Analytics providers: to analyse platform usage and performance;
- Professional advisors: including lawyers, accountants, and auditors, under obligations of confidentiality;
- Regulatory authorities: where required by law, court order, or government request;
- Successors in business: in the event of a merger, acquisition, or sale of all or part of our business.
We will not sell your personal information to third parties.
Overseas disclosure
As described above, we disclose personal information to third parties located overseas, including in the United States and Singapore. These disclosures occur in connection with our use of the Anthropic Claude API, Meta Graph API, TikTok API, LinkedIn API, and cloud infrastructure services.
Our use of these third-party services is governed by the terms each provider makes available to its business customers, including terms addressing how they handle information processed on our behalf.
You acknowledge that, by using the platform and connecting your social media accounts, your personal information will be transferred to and processed in countries outside Australia, including the United States and Singapore, which may not have privacy laws equivalent to those in Australia.
Social media platform integrations
Meta (Facebook and Instagram). When you connect your Meta account, we access your account in accordance with the Meta Platform Terms and Facebook Video API requirements. We collect and use only the permissions you grant. Meta may independently collect and process your data in accordance with its own privacy policy.
TikTok. When you connect your TikTok account, we access your account in accordance with the TikTok Developer Terms of Service and TikTok Data Sharing Agreement. We collect and use only the permissions you grant. TikTok may independently collect and process your data in accordance with its own privacy policy.
LinkedIn. When you connect your LinkedIn account, we access your profile or company page in accordance with the LinkedIn API Terms of Use. We collect and use only the permissions you grant, which may include your name, profile information, organisation details, and the ability to create and publish posts on your behalf. LinkedIn may independently collect and process your data in accordance with its own privacy policy.
You may revoke our access to your social media accounts at any time through the settings of the relevant platform. Revoking access will prevent the platform from publishing content on your behalf but will not delete data already collected.
Data security
We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:
- encryption of data in transit using TLS/SSL protocols;
- encryption of data at rest;
- access controls and role-based permissions for staff;
- regular security assessments and monitoring;
- secure API key management for third-party integrations.
No method of transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
If we become aware of a data breach that is likely to result in serious harm to any individual, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).
Data retention and deletion
We retain your personal information for as long as necessary to provide the platform, comply with our legal obligations, resolve disputes, and enforce our agreements. Typical retention periods are as follows:
- Account data: retained for the duration of your subscription and for 30 days after account closure;
- Content and prompt data: retained for 30 days after generation, unless you delete it earlier;
- Billing records: retained for 7 years in accordance with Australian tax law;
- Usage logs: retained for 30 days.
You may request deletion of your personal information at any time by emailing hello@tbmmc.com.au. We will action deletion requests within 30 days, subject to any legal obligations that require us to retain certain information.
For information about how we handle data deletion requests in connection with Meta, LinkedIn and TikTok integrations, please refer to our Data Deletion Policy.
Cookies and tracking technologies
We use cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse usage. The types of cookies we use include:
- Essential cookies: required for the platform to function;
- Analytics cookies: used to understand how users interact with the platform;
- Preference cookies: used to remember your settings and preferences.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the platform.
Access and correction
You have the right to request access to the personal information we hold about you and to request correction of information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
To make an access or correction request, please contact our Privacy Officer at hello@tbmmc.com.au. We will respond to your request within 30 days.
We may charge a reasonable fee for providing access to your information, but we will not charge a fee for making a correction request.
If we refuse your access or correction request, we will provide written reasons and information about how to complain about the refusal.
Complaints
If you believe we have breached the APPs or this Privacy Policy, you may lodge a complaint with us by contacting our Privacy Officer at hello@tbmmc.com.au.
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If we require more time, we will notify you.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001
Phone: 1300 363 992
Website: www.oaic.gov.au
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. The "Last updated" date at the top of this policy will reflect the date of the most recent revision.
Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
Contact us
For all privacy-related enquiries, access requests, correction requests, or complaints, please contact:
Privacy Officer
Integrity AI Pty Ltd (ACN 682 960 970)
PO Box 5369, West End, QLD 4101, Australia
Email: hello@tbmmc.com.au
Website: integrityai.com.au
This Privacy Policy is governed by the laws of Queensland, Australia.
Australian owned and made. Sydney, Australia.