Privacy Policy

Shapers · Last updated 30 October 2026

This policy covers our website, shapersos.com, and Shapers Pulse (pulse.shapersos.com), the operating system we use to run our paid media work: weekly reporting for our clients, our team's workspace, and the scheduling of Shapers' own content. It explains what information we handle, why, where it is kept, and how you can have it deleted.

"Shapers", "we" and "us" means Shapers (ABN to be confirmed), Melbourne, Victoria, Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Who this applies to

It applies to anyone who visits shapersos.com or contacts us through it, and to the Shapers team and the clients we invite into Shapers Pulse. Shapers Pulse is not a public service.

2. What we collect

• Enquiries and applications. Name, email, phone and the business details you send through our website forms, applications, bookings and diagnostics.
• Account details. Name, email address and the access level of each team member or invited client.
• Client business data. Advertising, sales and CRM figures our clients connect or send us, such as Meta ad performance, HighLevel pipeline data and store orders. Customer contact details from those systems are hashed before storage where we only need to count them.
• Content we make. Videos, images, scripts and captions for Shapers' own channels and for clients' campaigns.
• Website analytics and advertising. Our website uses cookies and tags, such as the Meta Pixel and Google tools, to understand visits and measure our own advertising. You can block or delete cookies in your browser settings.
• Technical data. Basic request logs (time, page, IP address) kept by our hosting providers for security and troubleshooting.
• YouTube data. Set out in full in section 7 below.

3. How we use it

To respond to enquiries and applications, to measure our own marketing, and to deliver our services: building and publishing client reports, running and measuring advertising, producing and scheduling content, and keeping the system secure. We do not sell personal information, and we do not use it for advertising profiles.

4. Who we share it with

We use a small number of service providers to run our website and Shapers Pulse, each bound by its own security and privacy terms:

• Vercel (Shapers Pulse hosting and private file storage)
• Google (Drive, YouTube API Services, Workspace)
• HighLevel (our website, forms and CRM, and CRM data our clients connect)
• Meta (advertising, and advertising data our clients connect)
• Anthropic and OpenAI (AI features that draft and check reports; data is sent per request and is not used to train their models under our agreements)
• Slack and Notion (team communication and records)

Some of these providers store data outside Australia, including in the United States. We share information beyond them only where the law requires it.

5. How long we keep it, and deletion

• Enquiries and applications: up to 24 months after our last contact, unless you ask us to delete them sooner.
• Account details: for as long as the account is active, then deleted within 30 days of it being closed.
• Client business data: for the length of the engagement and up to 12 months after, unless the client asks for earlier deletion.
• Uploaded media for publishing: deleted automatically 30 days after the post goes live or is cancelled.
• To have your information deleted sooner, email [email protected]. We act on requests within 7 days.

6. Your rights

You can ask to see the personal information we hold about you, have it corrected, or have it deleted. Email [email protected]. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

7. YouTube API Services

Shapers Pulse uses YouTube API Services to publish Shapers' own videos to the Sam Shaper YouTube channel. By using this feature you agree to the YouTube Terms of Service, and Google's handling of the data is covered by the Google Privacy Policy.

What we access

• The connected channel's ID and name, to confirm which channel is connected.
• Permission to upload videos to that channel and to set their titles, descriptions, thumbnails, captions and publish times.

We do not read viewer data, comments, analytics, subscribers or any other channel's data, and we do not display or store public YouTube content.

How it is stored

The access token Google issues when the channel is connected is stored on our servers in private, access-controlled storage. It is never shown in the app or shared. Video, thumbnail and caption files are held in private storage only until they are uploaded, then deleted automatically within 30 days.

How to revoke access

Disconnect YouTube in Shapers Pulse settings, or remove "Shapers Pulse" at Google's security settings. Either way we delete the stored token within 7 days, or straight away on request to [email protected].

8. Security

Access to Shapers Pulse requires sign-in. Data is encrypted in transit, stored in private storage, and limited to the people who need it. No system is perfectly secure; if a breach is likely to cause serious harm we will notify affected people and the OAIC as the law requires.

9. Changes

We will update this page when our practices change and note the date at the top.

10. Contact

Sam Shaper, [email protected], Melbourne, Victoria, Australia.