Privacy Policy

Last Updated: March 12, 2025

Productbox Labs Pty Ltd ("we," "our," or "us") operates MyDeetz, a service that enables users to share their personal details securely through ChatGPT with businesses they choose. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

1. Information We Collect

Collectible Data Fields

MyDeetz supports the following 13 predefined data fields. These are the only fields our system accepts — no arbitrary, sensitive, or additional data can be stored:

Contact Fields

Used to connect you with the business you requested to contact:

• Name — your full name
• Email — your email address
• Phone — your phone number

Professional Fields

Used to provide B2B context to the business you are contacting:

• Company — your company or organisation name
• Role — your job title
• Website — your company or personal website
• LinkedIn — your LinkedIn profile URL

Qualification Fields

Used to help the business assess fit for their services:

• Location — your city, region, or country
• Budget — your approximate budget range
• Timeline — your expected project timeline
• Company Size — the size of your organisation
• Industry — the industry your company operates in

Free-Text Field

Used for you to provide additional context with your inquiry:

• Message — a free-text message to accompany your inquiry

Business-Configured Collection

Each business on MyDeetz selects which of the 13 fields above to collect from users. Not all 13 fields are collected every time — only the fields that the specific business has enabled will be requested and stored for that inquiry.

No Sensitive Data

Our system only accepts the 13 predefined fields listed above and rejects all other input. MyDeetz does not accept or store financial data (e.g. credit card numbers, bank accounts), government-issued identification numbers, health information, or any other arbitrary data beyond the fields listed.

OpenAI Subject Identifier

When you use MyDeetz through ChatGPT, an OpenAI subject ID is stored to identify you as a returning user. This allows us to pre-fill your saved profile details across sessions so you do not need to re-enter your information each time you use the service.

Information Shared Through ChatGPT

When you use MyDeetz within ChatGPT to share your details with a business:

• We process only the fields the business has enabled from the 13 listed above
• We transmit your selected details securely to the business you specify
• We log the transaction for security and audit purposes

Automatically Collected Information

When you visit our website or use our service, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Usage data and interaction with our service
• Date and time of service use

2. How We Use Your Information

We use the information we collect to:

• Facilitate secure transfer of your details to businesses you choose
• Maintain and improve the MyDeetz service
• Process and route your information through our MCP (Model Context Protocol) server
• Ensure security and prevent fraud
• Send you service notifications and updates
• Respond to your support requests
• Comply with legal obligations
• Analyze and improve our service performance

3. How We Share Your Information

With Businesses You Choose

The core function of MyDeetz is to share your details with businesses you explicitly select. When you use our service:

• Your contact details and any other enabled fields are shared with the business you chose to contact via email notification
• We do not share your information with any other parties without your consent
• Businesses receive only the fields they have enabled and that you have provided

Service Providers

We may share your information with trusted service providers who assist us:

• Cloud hosting providers (for secure data storage)
• Third-party email delivery services (for sending lead notification emails to businesses and transactional emails to users)
• Security and fraud prevention services
• Analytics providers (to improve our service)

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We take the security of your personal information seriously:

• All data transmitted through MyDeetz is encrypted in transit
• We use industry-standard security measures to protect your information
• Access to personal information is restricted to authorized personnel only
• We regularly review and update our security practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information only for as long as necessary:

• Lead records: Inquiry data submitted to a business is retained for 24 months from the date of submission, after which it is automatically deleted unless the business or user requests earlier removal.
• User profiles: Your saved profile (linked to your OpenAI subject ID) is retained for as long as you actively use the service. Profiles inactive for more than 24 months may be automatically deleted.
• Transaction logs: Retained for up to 12 months for security and audit purposes.
• You may request deletion of your data at any time (see Section 6 below).
• Some information may be retained longer if required by law.

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct any inaccurate information
• Deletion: Request that we delete your personal information by contacting privacy@productbox.com.au
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to our processing of your personal information
• Restriction: Request that we restrict processing of your information
• Withdrawal of Consent: Withdraw consent for data sharing at any time

7. Marketing Communications

You may opt out of receiving marketing communications from us by:

• Following the unsubscribe instructions in our emails
• Contacting us directly at privacy@mydeetz.com
• Updating your preferences in your account settings

Note: You will still receive essential service-related communications even if you opt out of marketing.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings, but disabling cookies may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.

10. Children's Privacy

MyDeetz is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Using servers in secure jurisdictions
• Implementing encryption for data in transit
• Following international data protection standards

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the new Privacy Policy on our website
• Updating the "Last Updated" date
• Sending you an email notification for significant changes

Your continued use of MyDeetz after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: