Privacy Policy

Effective date: 21 July 2026
Last updated: 21 July 2026

1. Introduction

Handora is operated by Annex Global Network Pty Ltd, ABN 20 687 027 756 and ACN 687 027 756.

In this Privacy Policy, “Handora,” “Annex Global Network,” “we,” “us” and “our” refer to Annex Global Network Pty Ltd.

This Privacy Policy explains how we collect, hold, use, process, disclose and protect personal information when you:

• Download, install or use the Handora mobile application

• Access the Handora website or associated web services

• Create or manage a Handora account

• Upload photos, videos, audio, captions or other content

• Connect a social-media account

• Create, schedule, approve or publish content

• Use Handora’s content-management, automation or analytics features

• Subscribe to a paid Handora service

• Contact us for support

• Otherwise interact with Handora

The Handora application, website, platform and associated features are collectively referred to as the “Service.”

By accessing or using the Service, you acknowledge that your information will be handled in accordance with this Privacy Policy.

2. Privacy contact details

The organisation responsible for handling personal information under this Privacy Policy is:

Annex Global Network Pty Ltd
ABN: 20 687 027 756
ACN: 687 027 756

Postal address:
Suite 504
585 Little Collins Street
Melbourne VIC 3000
Australia

Privacy email:
[PRIVACY EMAIL REQUIRED]

Handora website:
handora.pro

Privacy Policy URL:
annexglobalnetwork.com/privacy-policy

3. Scope of this policy

This Privacy Policy applies to personal information handled through Handora.

It does not govern the independent privacy practices of third-party platforms, app stores, payment providers or external websites. Those organisations operate under their own terms and privacy policies.

When Handora connects with a third-party platform, both this Privacy Policy and the third party’s applicable privacy terms may apply to the relevant information.

4. Information we may collect

The information we collect depends on the features you use, the permissions you grant and the third-party accounts you connect.

4.1 Account and profile information

When you create or manage a Handora account, we may collect:

• Your full name

• Email address

• Account identifier

• Profile image

• Business or organisation name

• Brand names

• Brand profile information

• Account preferences

• Language and time-zone settings

• Login and authentication information

• Subscription status

• Communication preferences

• Workspace membership and permissions

Passwords are processed through secure authentication systems. We do not intend to store readable copies of user passwords.

4.2 Uploaded and created content

When you use Handora, we may process content including:

• Photos

• Images

• Videos

• Audio

• Captions

• Hashtags

• Post descriptions

• Drafts

• Voice instructions

• Scheduling instructions

• Publishing rules

• Brand assets

• Logos

• Content categories

• Content metadata

• Approval instructions

• Other files or materials you choose to submit

Uploaded content may contain information about you, your customers, employees, contractors or other people.

You are responsible for ensuring that you have the necessary rights, permissions, notices and lawful authority to upload, process and publish that content.

4.3 Brand and workspace information

Handora may allow you to create or manage multiple brands, organisations or workspaces.

We may process:

• Brand names

• Logos and brand assets

• Brand descriptions

• Social-media destinations

• Team-member details

• Workspace roles

• User permissions

• Approval settings

• Publishing preferences

• Content associated with each brand

• Activity performed within a workspace

4.4 Connected social-media account information

When you connect a supported third-party platform, Handora may receive information authorised through that platform’s official authentication or authorisation process.

Depending on the platform and the permissions you approve, this may include:

• Account name

• Username or handle

• Profile image

• Account, page, channel or company-page identifier

• Available pages or publishing destinations

• Access token

• Refresh token

• Token expiry information

• Permissions granted

• Connected account status

• Post identifiers

• Publication status

• Limited performance or engagement information

• Information necessary to schedule or publish content

Handora does not require your social-media password when an account is connected through the third-party platform’s official OAuth or authorisation process.

The information available to Handora is determined by:

• The platform you connect

• The permissions you approve

• The type of account you connect

• The features you use

• The platform’s technical and policy requirements

4.5 Device and technical information

When you access the Service, we may automatically receive or collect technical information such as:

• Device type

• Device model

• Operating-system type and version

• Handora application version

• Device language

• Time zone

• General region

• Internet Protocol address

• Login timestamps

• Session information

• Authentication events

• App-performance information

• Error messages

• Crash reports

• Diagnostic information

• Security events

• Network and connection information

We use this information to operate, secure, diagnose and improve the Service.

4.6 Usage information

We may collect information about how the Service is used, including:

• Screens viewed

• Features accessed

• Buttons or controls selected

• Content uploaded

• Content organised or categorised

• Posts created

• Posts scheduled

• Posts approved

• Posts published

• Publication results

• Failed publication attempts

• Connected accounts

• Brand-selection activity

• Rule and Autopilot activity

• Search and filtering activity

• Notification interactions

• Feature settings

• Support activity

Usage information may be aggregated or de-identified where reasonably practical.

4.7 Voice information

Handora may allow you to create instructions, schedules or publishing rules using your voice.

When you activate a voice feature, Handora may process:

• Audio captured while the feature is active

• A transcription of your spoken instructions

• The resulting rule, schedule or command

• Technical information needed to process the request

Voice processing may be performed by:

• Your device or operating system

• Handora’s infrastructure

• A contracted speech-processing provider

Handora will request microphone permission before accessing your device microphone.

You should avoid including unnecessary confidential or sensitive information in voice instructions.

4.8 Photo library, camera, microphone and file permissions

Handora may request permission to access:

• Your photo library

• Your camera

• Your microphone

• Files or device media storage

These permissions are used to provide features you select, such as:

• Uploading existing content

• Capturing a photo

• Recording a video

• Selecting a file

• Creating a voice instruction

• Preparing content for publication

You can control these permissions through your device settings.

Disabling a permission may prevent the associated feature from functioning.

Handora does not access these device resources unless permission has been granted and the applicable functionality requires access.

4.9 Content analysis and organisation information

To organise content and support publishing workflows, Handora may analyse uploaded content and derive information such as:

• Content type

• Subject or theme

• Objects appearing in an image or video

• Products

• People

• Staff

• Locations

• Offices or spaces

• Brand elements

• Visual composition

• Suggested categories

• Suggested publishing formats

• Content quality indicators

• Potential caption themes

• Suitability for particular placements

Derived information may be stored with the relevant content to make it easier to search, organise, retrieve and repurpose.

4.10 Publishing and scheduling information

When you prepare or schedule a post, we may process:

• Selected media

• Caption

• Hashtags

• Target platform

• Target account

• Brand

• Placement type

• Publishing date

• Publishing time

• Time zone

• Approval preference

• Auto-reframe selection

• Publication status

• Platform response

• Failure reason

• Retry information

4.11 Analytics and performance information

Where supported by a connected platform, Handora may collect or display information relating to published content, such as:

• Views

• Reach

• Impressions

• Engagements

• Likes

• Comments

• Shares

• Saves

• Link clicks

• Follower changes

• Publication status

• Top-performing content

• Audience or geographic information made available by the platform

The availability and accuracy of this information depend on the connected platform and the permissions granted.

4.12 Payment and subscription information

Subscriptions or purchases made through the Apple App Store are processed by Apple.

Handora may receive limited purchase and subscription information, including:

• Product or subscription purchased

• Subscription status

• Transaction identifier

• Original transaction identifier

• Purchase date

• Renewal status

• Expiry date

• Trial status

• Entitlement status

• Cancellation or refund status

• Billing country or region

Handora does not generally receive your full payment-card number when a payment is processed by Apple or another external payment provider.

Payment providers process payment information under their own terms and privacy policies.

4.13 Support and communication information

When you contact us, we may collect:

• Your name

• Email address

• Account details

• The contents of your enquiry

• Screenshots

• Screen recordings

• Files you provide

• Device and diagnostic details

• Information required to investigate the matter

• Records of our communications with you

5. How information is collected

We may collect information:

• Directly from you

• From your device

• Through your use of Handora

• When you upload or create content

• When you connect a third-party account

• From a connected social-media platform

• From Apple or another app-store provider

• From payment and subscription providers

• From authentication providers

• From cloud, analytics, diagnostic and security providers

• From an organisation or administrator that gives you access to a workspace

• From public sources where lawful and reasonably necessary

6. How we use information

We may use personal information to:

• Create and administer your account

• Authenticate users

• Maintain account security

• Provide content-uploading functionality

• Store and organise content

• Categorise uploaded files

• Search and filter content

• Manage brands and workspaces

• Provide media-library features

• Generate or suggest captions

• Assist with hashtags and post descriptions

• Interpret written or voice instructions

• Create scheduling and publishing rules

• Operate Autopilot functionality

• Prepare content for different placements

• Crop, resize or reframe content

• Connect authorised social-media accounts

• Schedule posts

• Publish content at your direction

• Display publication progress

• Notify you of successful or failed posts

• Provide approval workflows

• Display content and account analytics

• Manage subscription entitlements

• Process customer-support requests

• Send service-related communications

• Diagnose technical faults

• Monitor system reliability

• Prevent fraud and misuse

• Detect unauthorised activity

• Improve Handora’s performance and usability

• Develop and test new features

• Maintain business and compliance records

• Enforce our terms and protect legal rights

• Comply with applicable laws and lawful requests

We do not claim ownership of your uploaded content merely because you use Handora.

The limited rights required for us to host, process, adapt, schedule and publish content are governed by the Handora Terms of Service.

7. Basis for handling information

Depending on your location and the circumstances, we may process personal information because:

• It is necessary to provide the Service you requested

• It is necessary to perform a contract with you

• You have provided consent

• It supports our legitimate operational and security interests

• It is necessary to protect users, Handora or third parties

• It is necessary to comply with a legal obligation

• It is otherwise permitted by applicable law

Where processing is based on consent, you may withdraw consent through the relevant settings or by contacting us.

Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

8. Social-media platform connections

Handora may support connections with platforms operated by:

• Meta, including Facebook and Instagram

• TikTok

• LinkedIn

• X

• Google, including YouTube

• Other supported services introduced within Handora

When you connect a platform:

1. You are directed to the platform’s official authorisation process.

2. The platform identifies the permissions requested by Handora.

3. You choose whether to approve those permissions.

4. The platform provides Handora with an access token and permitted account information.

5. Handora uses that authorised access to provide the features you request.

Handora uses connected-platform information only for purposes consistent with:

• The permissions you grant

• The features you select

• The platform’s applicable developer requirements

• This Privacy Policy

• Applicable law

You may revoke Handora’s access by:

• Disconnecting the account within Handora, where available

• Revoking access through the third-party platform

• Contacting us for assistance

Revoking access may prevent Handora from scheduling, publishing or retrieving information from that platform.

Third-party platforms operate independently. We are not responsible for their separate privacy, security or data-retention practices.

9. Access and refresh tokens

Handora may securely store access tokens, refresh tokens or equivalent credentials issued by connected platforms.

These credentials:

• Are not your social-media password

• Allow Handora to perform authorised actions

• May be refreshed to preserve an authorised connection

• May expire

• May stop functioning when permissions are changed

• May be invalidated when you revoke access

• May be deleted or disabled when an account is disconnected

We apply technical and organisational safeguards intended to protect connected-account credentials from unauthorised access.

10. Content-processing and automated features

Handora may use automated systems to assist with:

• Analysing uploaded media

• Categorising content

• Identifying content themes

• Identifying products, people, staff, locations or brand elements

• Organising media libraries

• Generating or suggesting captions

• Suggesting publishing formats

• Reframing media

• Adapting content for different placements

• Interpreting voice commands

• Creating scheduling rules

• Recommending publishing options

• Displaying performance insights

Automated outputs may occasionally be inaccurate, incomplete or unsuitable.

You should review:

• Captions

• Hashtags

• Media selections

• Publishing destinations

• Dates and times

• Reframed content

• Automated rules

• Generated recommendations

before approving or publishing content.

We do not intend to use privately uploaded Handora content to train publicly available generative models unless that practice is clearly disclosed and any legally required consent has been obtained.

11. How information may be disclosed

We may disclose information to the following categories of recipients.

11.1 Service providers

We may engage service providers that support:

• Cloud hosting

• Database services

• Authentication

• File and media storage

• Content delivery

• Application hosting

• Email delivery

• Push notifications

• Subscription management

• Payment verification

• Analytics

• Crash reporting

• Error monitoring

• Security monitoring

• Customer support

• Speech processing

• Media processing

• Content analysis

• Caption or content-generation functionality

• Software development and maintenance

Service providers may process information only as reasonably necessary to provide their contracted services, subject to applicable agreements and laws.

11.2 Connected social platforms

When you direct Handora to schedule or publish content, we disclose the required information to the selected platform.

This may include:

• Media

• Caption

• Hashtags

• Publication date and time

• Destination account

• Placement

• Post settings

• Other information required by the platform

Content published to a third-party platform is then handled under that platform’s own terms and privacy policy.

11.3 Workspace owners and authorised users

If you participate in a shared brand or workspace, authorised users may be able to access:

• Shared content

• Drafts

• Schedules

• Connected publishing destinations

• Publishing history

• Analytics

• User activity

• Workspace settings

Workspace owners and administrators may have broader access and management controls.

11.4 Professional advisers

We may disclose information to professional advisers where reasonably necessary, including:

• Lawyers

• Accountants

• Auditors

• Insurers

• Security specialists

• Corporate advisers

11.5 Corporate transactions

If Annex Global Network is involved in a merger, acquisition, financing, restructuring, asset sale or similar transaction, information may be disclosed to:

• Professional advisers

• Prospective purchasers

• Investors

• Lenders

• Transaction counterparties

• A successor organisation

Any such disclosure will be subject to applicable confidentiality and legal requirements.

11.6 Legal and safety requirements

We may disclose information where reasonably necessary to:

• Comply with applicable law

• Respond to a court order

• Respond to a lawful government request

• Investigate fraud

• Investigate a security incident

• Prevent abuse or misuse

• Protect users

• Protect Handora or Annex Global Network

• Protect the rights, property or safety of another person

• Enforce our agreements

• Establish, exercise or defend legal claims

12. Sale of personal information and advertising tracking

Handora does not sell personal information in exchange for money.

We do not intend to allow third-party advertising networks to track users across unrelated applications or websites for targeted advertising without the notices and permissions required by law and Apple’s policies.

Where any Handora feature constitutes tracking under Apple’s requirements, Handora will request permission through Apple’s AppTrackingTransparency framework before undertaking that activity.

Declining tracking permission will not prevent access to core Handora functionality unless a specific feature requires information that cannot lawfully be collected without permission.

13. Cookies and similar technologies

The Handora website or web-based services may use cookies, local storage or similar technologies to:

• Maintain login sessions

• Remember preferences

• Protect account security

• Measure website performance

• Diagnose errors

• Understand how the website is used

• Prevent fraudulent or unauthorised activity

Where required, we will provide a cookie notice or obtain consent before using non-essential cookies.

You may be able to control cookies through your browser settings.

Disabling cookies may affect website functionality.

14. Data storage and overseas processing

Handora may use cloud infrastructure and service providers located in Australia and other countries.

Information may therefore be stored or processed outside your state, territory or country of residence.

The countries involved may depend on:

• The cloud provider

• The connected platform

• The selected feature

• The user’s location

• The service provider’s infrastructure

• The location of authorised technical support

Overseas jurisdictions may have privacy laws that differ from Australian privacy law.

Where applicable, we take reasonable steps appropriate to the circumstances to protect information disclosed or processed overseas.

You may contact us for information about material overseas-processing arrangements relevant to your account.

15. Information security

We use administrative, technical and organisational measures intended to protect information from:

• Loss

• Misuse

• Interference

• Unauthorised access

• Unauthorised disclosure

• Unauthorised modification

• Destruction

Measures may include:

• Encryption in transit

• Controlled system access

• Authentication safeguards

• Secure password handling

• Tenant and workspace isolation

• Database access controls

• Secure token handling

• System monitoring

• Event logging

• Backups

• Software updates

• Vulnerability management

• Restricted personnel access

• Contractor confidentiality requirements

• Incident-response procedures

No electronic system, storage service or transmission method can be guaranteed to be completely secure.

You are responsible for:

• Protecting your account credentials

• Using a secure password

• Restricting access to your device

• Reviewing workspace permissions

• Promptly reporting suspected unauthorised activity

The Australian Privacy Principles require covered organisations to take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

16. Data retention

We retain personal information only for as long as reasonably necessary to:

• Provide the Service

• Maintain your account

• Complete scheduled or pending actions

• Maintain account and system security

• Prevent fraud

• Resolve technical problems

• Respond to disputes

• Meet legal and accounting requirements

• Enforce our agreements

• Maintain legitimate business records

Retention periods vary according to:

• The type of information

• The feature used

• The purpose for which information was collected

• Contractual requirements

• Platform requirements

• Legal obligations

• Security considerations

When information is no longer reasonably required, we may:

• Delete it

• De-identify it

• Aggregate it

• Securely isolate it until deletion is completed through backup cycles

Disconnecting a social account does not automatically delete:

• Posts already published to the platform

• Content remaining in your Handora library

• Historical activity records

• Information required for legal, fraud-prevention or security purposes

17. Account deletion

You may initiate deletion of your Handora account through the account or privacy settings available within the application.

You may also contact us at:

[PRIVACY EMAIL REQUIRED]

Use the subject line:

Handora account deletion request

We may verify your identity before completing a deletion request.

Account deletion may result in:

• Permanent loss of account access

• Cancellation of scheduled posts

• Disconnection of linked social accounts

• Deletion of uploaded media

• Deletion of drafts

• Deletion of brand settings

• Deletion of publishing rules

• Deletion of preferences

• Deletion of publishing history

• Removal from workspaces, subject to the rights of other workspace users

Some information may be retained where reasonably required for:

• Legal compliance

• Fraud prevention

• Security

• Financial record keeping

• Tax or accounting obligations

• Dispute resolution

• Enforcement of legal rights

• Backup integrity

Deleting the Handora application from your device does not delete your Handora account.

Deleting a Handora account does not automatically remove content already published to a social platform. Published content must be managed through the relevant platform.

Where Handora supports account creation, Apple requires users to be able to initiate account deletion from within the app.

18. Accessing and correcting information

You may request access to personal information we hold about you.

You may also ask us to correct information that is:

• Inaccurate

• Incomplete

• Outdated

• Misleading

Some information can be updated directly through Handora’s account settings.

For other requests, contact:

[PRIVACY EMAIL REQUIRED]

We may request information necessary to verify your identity.

Applicable law may permit or require us to decline an access or correction request in some circumstances. Where required, we will explain the reason for the decision and available complaint options.

19. Your choices and controls

Depending on the features you use, you may be able to:

• Update profile information

• Change notification preferences

• Manage device permissions

• Disconnect social-media accounts

• Revoke third-party platform access

• Delete uploaded content

• Delete drafts

• Cancel scheduled posts

• Pause Autopilot rules

• Change approval settings

• Manage brands

• Change workspace permissions

• Cancel a subscription

• Request access to information

• Request correction

• Initiate account deletion

• Withdraw consent

• Opt out of marketing communications

Withdrawing permission or disconnecting an account may prevent the associated feature from operating.

20. Push notifications

With your permission, Handora may send push notifications concerning:

• Scheduled posts

• Publication success

• Publication failures

• Approval requests

• Account security

• Connected-account status

• Subscription status

• Service updates

• Important feature changes

You can control push notifications through your device settings.

Disabling push notifications does not prevent us from sending essential account, legal or security communications by another available method.

21. Email and service communications

We may send communications relating to:

• Account creation

• Email verification

• Password resets

• Login security

• Connected-account status

• Scheduled or failed posts

• Subscription and billing status

• Account deletion

• Privacy matters

• Material changes to the Service

• Customer support

These operational communications may be necessary to provide and protect the Service.

22. Marketing communications

We may send promotional communications where:

• You have consented

• You have requested information

• The communication is otherwise permitted by law

You may opt out through:

• The unsubscribe link in the message

• Your communication settings

• A request sent to our privacy contact

Opting out of marketing does not prevent essential transactional, security or service messages.

23. Information relating to other people

You must not upload, record, analyse, schedule or publish another person’s personal information unless you have the legal authority and permissions necessary to do so.

This obligation applies to information appearing in:

• Photos

• Videos

• Audio recordings

• Captions

• Testimonials

• Customer content

• Staff content

• Voice recordings

• Contact details

• Business records

You are responsible for complying with applicable:

• Privacy laws

• Copyright laws

• Employment laws

• Publicity and image-right requirements

• Confidentiality obligations

• Platform rules

24. Children’s privacy

Handora is designed for business and professional content management.

Handora is not directed to children under 13, and we do not knowingly seek to collect personal information directly from children under 13 without appropriate authorisation.

If you believe that a child has provided personal information through Handora without appropriate permission, contact:

[PRIVACY EMAIL REQUIRED]

Additional age restrictions may apply under local law, connected-platform rules or app-store requirements.

25. Business and workspace accounts

Where your Handora account is provided or managed by an employer, agency, client or other organisation, that organisation may control the relevant workspace.

An organisation or workspace administrator may be able to:

• Add or remove users

• Assign roles

• Control connected accounts

• Access shared content

• Review scheduled and published posts

• View workspace activity

• Manage subscriptions

• Change permissions

• Export information

• Delete workspace information

Questions about organisation-controlled workspaces should first be directed to the applicable workspace owner or administrator.

26. Third-party websites and services

Handora may contain links to or integrate with third-party websites, applications or services.

These services are governed by their own:

• Privacy policies

• Terms

• Security practices

• Data-retention practices

We do not control and are not responsible for the independent privacy practices of third parties.

You should review a third party’s privacy information before granting access or providing information.

27. Australian privacy obligations

Where applicable, we handle personal information in accordance with:

• The Privacy Act 1988 (Cth)

• The Australian Privacy Principles

• The Notifiable Data Breaches scheme

• Other applicable Australian privacy requirements

The Australian Privacy Principles govern matters including:

• Collection of personal information

• Notice and transparency

• Use and disclosure

• Direct marketing

• Overseas disclosure

• Data quality

• Information security

• Access and correction

There are 13 Australian Privacy Principles governing standards, rights and obligations relating to personal information.

28. Rights in other jurisdictions

Depending on your location, you may have additional privacy rights, including the right to:

• Receive information about how your data is processed

• Access personal information

• Correct inaccurate information

• Request deletion

• Restrict certain processing

• Object to certain processing

• Withdraw consent

• Receive a portable copy of certain information

• Appeal certain privacy decisions

• Lodge a complaint with a regulator

These rights may be subject to:

• Identity verification

• Legal exceptions

• Technical limitations

• Applicable retention obligations

To submit a request, contact:

[PRIVACY EMAIL REQUIRED]

29. Privacy complaints

To make a privacy complaint:

1. Contact us using the privacy email listed in this policy.

2. Explain your concern.

3. Provide any information reasonably required to investigate it.

4. Allow us a reasonable period to review and respond.

We will seek to investigate and resolve privacy complaints fairly and promptly.

If you are not satisfied with our response, you may be entitled to contact the relevant privacy regulator.

In Australia, complaints may be submitted to the Office of the Australian Information Commissioner.

30. Data breaches

A data breach may occur when personal information is lost or is accessed or disclosed without authorisation.

If a data breach occurs, we will take reasonable steps to:

• Contain the incident

• Investigate what happened

• Assess the information affected

• Evaluate the risk to individuals

• Remediate vulnerabilities

• Reduce the likelihood of recurrence

• Meet applicable notification requirements

Where the Australian Notifiable Data Breaches scheme applies, affected individuals and the Office of the Australian Information Commissioner must be notified when an eligible breach is likely to result in serious harm.

31. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

• New Handora features

• Changes to existing functionality

• New integrations

• Changes to service providers

• Changes to data-handling practices

• Security improvements

• Operational changes

• Legal or regulatory developments

The updated policy will display a revised effective date and last-updated date.

Where a change is material, we may provide additional notice through:

• The Handora app

• The Handora website

• Email

• An in-app notification

• Another appropriate communication method

We encourage you to review this Privacy Policy periodically.

32. Contact us

For privacy questions, access requests, correction requests, account-deletion requests or complaints, contact:

Annex Global Network Pty Ltd
Handora Privacy Team

ABN: 20 687 027 756
ACN: 687 027 756

Postal address:
Suite 504
585 Little Collins Street
Melbourne VIC 3000
Australia

Privacy email:
[PRIVACY EMAIL REQUIRED]

Handora website:
handora.pro

Privacy Policy:
annexglobalnetwork.com/privacy-policy