Block Mondo Corporation Pty Ltd (ABN 43 640 044 506), trading as Block Mondo, is committed to protecting personal information. This Privacy Policy explains how we collect, hold, use and disclose personal information through our website, cloud services, applications, AI-enabled features and related services. It should be read with applicable customer agreements, service schedules, product notices and consents presented within the platform.
Personal information we collect
The types of personal information we may collect include:
- name, email address, telephone number, billing address and other contact details;
- employment, role, organisation and business contact information;
- account, identity-verification and authentication information;
- preferences, opinions, survey responses and information provided through workshops, events or webinars;
- information entered, uploaded, generated or received through Block Mondo applications, including prompts, messages, check-ins, notes, files and authorised integrations;
- support requests, service requests, configuration records, audit logs, security events and usage information;
- browser, device, network and session information reasonably required to operate and secure the Site and Services; and
- other information you provide to us or that we are authorised or required to collect.
How we use personal information
We may collect, hold, use and disclose personal information to:
- create and administer accounts and provide access to Block Mondo services;
- provide, configure, secure, support, maintain and improve our products and services;
- operate AI-enabled features and AI agents where enabled and acknowledged by the user or organisation;
- communicate with users and customers, provide support and manage service requests;
- administer subscriptions, billing and payments;
- provide workshops, events, content and other requested services;
- meet legal, regulatory, security, risk-management and records-management obligations; and
- send permitted service or marketing communications in accordance with applicable consent and marketing requirements.
Service providers and subprocessors
We use service providers to host and operate the platform, provide cloud infrastructure and storage, send email and service communications, support identity and security services, provide approved AI features, process payments and provide other functions needed to deliver the Services.
Current material subprocessors and technology providers are identified on the Block Mondo Subprocessors page. The providers used for a particular customer may also be specified in that customer's agreement or service schedule.
Hosting and data location
Block Mondo-hosted production services are hosted in Australia by default using Microsoft Azure or Amazon Web Services (AWS). The applicable cloud provider, Australian region, architecture and any customer-specific residency requirements may instead be specified in the customer's Cloud Services Agreement, ordering document or hosting schedule.
Overseas disclosure
Some approved service providers may process limited personal information outside Australia. Where overseas processing is used, personal information may be disclosed to or processed in the United States, including where approved AI or payment services are provided from or supported through the United States.
Where the Australian Privacy Principles apply, Block Mondo takes reasonable steps required by law to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements, unless an exception applies.
AI-enabled features and AI agents
Some Block Mondo services include artificial intelligence, automated workflows and AI agents. When an AI feature is used, the text and other content required to process the request may be sent to an approved AI model provider, such as OpenAI or Anthropic, to generate a response or perform the requested task.
Under Block Mondo's applicable commercial or API arrangements, customer prompts and responses submitted to approved AI model providers are not used to train those providers' general models. The specific providers available to a customer may depend on the service, configuration and customer agreement.
Block Mondo will make every effort to detect private or sensitive information before it is shared with an AI model, including information such as payment card numbers, tax file numbers, passwords and similar credentials. Automated detection is not guaranteed to identify every instance. You should not enter or submit private, sensitive, secret or regulated information to an AI feature unless the feature, your organisation and applicable instructions expressly permit you to do so.
Where an AI agent can retain personal notes, context, check-ins or other information for an individual, the relevant consent or acknowledgement is presented within the platform before that information is retained or used for that purpose. Users can access available information about them and, where supported and subject to applicable legal or organisational retention requirements, download or request deletion of that information.
For AI agent experiences designated as private to an individual, raw personal interactions are not made available to the individual's organisation as general reporting content. Where aggregated outcome or theme reporting is enabled, Block Mondo applies a minimum group threshold of five contributing individuals before those aggregated results are made available, unless a different lawful arrangement has been expressly disclosed and agreed.
Payments
Where card payments are available, payments are processed by Stripe. Block Mondo does not store full payment card numbers. Stripe processes payment information under its own terms and privacy practices and may process relevant information in the United States.
Embedded videos and third-party content
Some help or guidance pages may contain embedded YouTube videos. When a person chooses to play an embedded YouTube video, YouTube or Google may receive information such as the person's IP address and may set or access cookies or similar technologies under Google's own privacy practices. Block Mondo does not control Google's independent processing.
Cookies
Block Mondo currently uses cookies and similar technologies only where reasonably required for sign-in, authentication, session management, security and essential service functionality. Block Mondo does not currently use analytics cookies or advertising cookies on the Site or authenticated platform. If this position changes, this policy and any applicable cookie notice or consent mechanism will be updated before non-essential cookies are used.
Sensitive information
Sensitive information includes health information, racial or ethnic origin, political opinions, religious beliefs, professional or trade association memberships, sexual orientation, criminal records and biometric information. We do not ordinarily seek to collect sensitive information unless it is required for an authorised service or use case. Where sensitive information is required, it is collected, used and disclosed only with appropriate consent or where required or authorised by law.
Retention, export and deletion
Personal information and customer data are generally retained for the life of the applicable subscription and in accordance with the customer's agreed retention schedule, legal obligations and records-management requirements. When an organisation leaves the service, its data is exported, retained or deleted in accordance with its customer agreement, service schedule and applicable law.
Some records may need to be retained after an account or subscription ends, including billing, tax, security, audit, legal-hold or other records that Block Mondo or the customer is required or entitled to retain.
Storage and security
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access controls, encryption, monitoring, audit logging, secure development practices, vulnerability management, backups, incident response and contractual controls with service providers.
Data breaches
Block Mondo assesses suspected data breaches in accordance with applicable law. Where an eligible data breach is subject to Australia's Notifiable Data Breaches scheme, Block Mondo will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.
Access, correction and complaints
You may ask for access to personal information we hold about you or request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading. Depending on the information and the service, an organisation using Block Mondo may be responsible for responding to a request concerning information it controls.
Privacy complaints should be sent to the Block Mondo Privacy Office using the contact details below. We will assess the complaint and respond within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner.
Links to other websites
Our Site and Services may contain links to third-party websites or services. Those third parties are responsible for their own privacy practices, and you should review the privacy information applicable to the third-party service you choose to use.
Changes to this policy
We may amend this Privacy Policy from time to time to reflect changes to law, technology, service providers, features or our operating practices. The current version will be published on our Site with its effective date.