Privacy Policy

01Who we are and what this covers

Shyne is a shared studio where people and AI agents design together on one live canvas: documents, decks, video, and the campaigns built from them. It is made and operated by Contentable Pty Ltd, an independent software company based in Sydney, Australia. In this policy, Shyne, we, us, and our all refer to Contentable Pty Ltd.

This policy covers the Shyne website, the Shyne web application, the Shyne desktop apps, and every service we run under the Shyne name. It explains what we collect, why, where it goes, and the control you keep. If you join a workspace that belongs to a team or a company, that organisation decides how its workspace is used and may add rules of its own.

02Information we collect

Almost everything we hold exists for one reason: so your projects open exactly the way you left them, on any machine, for everyone you invited. We collect:

• Account details. Your name, email address, and profile image arrive from the sign-in service when you create an account. You can change them whenever you like.
• Your work. Projects, pages, frames, text, uploaded media, brand assets, and full version history. This is the product; storing it is the service.
• Agent instructions. The prompts and requests you give the agent are kept with the project, so every change it makes stays explainable and reversible.
• Connected channels. When you connect an external account for publishing, we store that account’s identity and the access token it issues. We hold the narrowest scope the platform allows.
• Billing records. Paid plans are processed by our payment provider. We keep invoices and plan history; card numbers never touch our servers.
• Technical signals. Device type, browser, IP address, and product events such as feature usage and errors. These keep Shyne fast, secure, and honest about what needs fixing.

03How we use information

We use the information above to:

• Run the product: open, sync, render, and back up your projects in real time.
• Power collaboration: presence, comments, and shared editing with the people you invite.
• Fulfil agent requests, generate media you ask for, and search licensed stock libraries when you do.
• Publish to the channels you connected, only when you or a teammate you authorised confirms it.
• Protect accounts, prevent abuse, and keep the service available.
• Improve Shyne, using aggregate patterns rather than the contents of your work.
• Send service messages about your account, billing, and meaningful changes to the product or to documents like this one.
• Meet the legal obligations that apply to an Australian company operating worldwide.

04AI features and your content

The agent in Shyne works in the open: its edits land on the same canvas you see, in the same history you can undo. To fulfil a request, your prompt and the relevant slice of the project are sent to the model providers that power the feature, used to produce the result, and returned to your document.

We do not use your projects, prompts, or media to train our own models, and we engage model providers on terms that forbid them from training on your content. Generated output belongs with your project and is treated with the same care as anything you made by hand.

05When information leaves Shyne

We share personal information only with the services that make Shyne work, and only what each one needs:

• Infrastructure. Hosting, storage, and content delivery providers that hold and serve your projects.
• Sign-in. Our authentication provider, which manages credentials and sessions so we never store passwords ourselves.
• Payments. Our payment processor, for subscriptions and invoicing.
• AI model providers. For the agent and generation features, as described above.
• Stock media libraries. Your search terms, when you search licensed stock inside Shyne.
• Publishing platforms. The content you choose to publish, sent to the channels you connected, on your confirmation.
• Email delivery. For the service messages described in this policy.

Beyond that: we disclose information if the law genuinely requires it, and if Shyne is ever part of a merger or acquisition your information moves with the service and we tell you first. We do not sell personal information. We never have.

06Cookies

The product sets the small set of cookies it needs: essential ones that keep you signed in, and preference cookies that remember choices like theme.

The marketing website also uses analytics and advertising measurement to understand how people find Shyne and whether our pages earn their attention. Your browser can block or clear cookies at any time; without the essential ones, signed-in features stop working.

07How we protect information

• Everything moves over encrypted connections, and each project’s storage is isolated from every other project.
• Access tokens for connected channels are stored encrypted and scoped as narrowly as each platform allows.
• Internal access follows least privilege: people at Contentable see customer content only when support work requires it and you ask us to look.
• We design for containment and recovery as well as prevention, because no internet service can honestly promise perfect security.

If an incident ever affects your data, we will tell you what happened, what it touched, and what we did about it, as required by law and sooner where we can.

08How long we keep things

Your work stays as long as your account does; keeping it is the product. Projects you delete leave trash after a short window, then leave our systems as backup copies expire on a rolling schedule.

If you delete your account, we remove your personal information and content within 30 days, with backup copies expiring within a further 30 days. We keep only what the law makes us keep, such as tax and billing records, for their statutory periods.

09Your rights and choices

You can read, export, correct, and delete your own work and account details from inside Shyne at any time. Export is not a hostage negotiation: your content is yours to take.

Contentable Pty Ltd handles personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles. If you are in the European Economic Area or the United Kingdom, you also hold the GDPR rights to access, rectify, erase, restrict, object, and port your data. Comparable rights exist elsewhere, and we honour requests from anywhere in the same way.

Write to mas@nextdocs.io for any request about your data. If you are unhappy with our answer, you can complain to the Office of the Australian Information Commissioner or to your local supervisory authority.

10Where information travels

Shyne runs on globally distributed infrastructure, so your information can be processed outside your own country, including in Australia, the United States, and the European Union. Wherever it travels, this policy travels with it, and where the law asks for formal safeguards we use recognised mechanisms such as standard contractual clauses.

11Children

Shyne is not directed at children and is not for anyone under 16. If we learn that a child under 16 holds an account, we will close it and delete the associated information.

12Changes to this policy

When our practices change, this page changes first, with a new effective date at the top. If a change meaningfully reduces your rights or expands what we collect, we will say so in the product or by email before it takes effect, in plain language.