Privacy Policy

Last updated: not yet published

Draft structure — not yet legally reviewed. This page must be completed before the Stripe account goes live, and should be checked against the Australian Privacy Principles.

1. What we collect

Account details: name, email, organisation.
Scan data: floor plans, photographs, annotations and job records.
Billing: handled by Stripe. Card numbers never reach our servers.

2. Where it is stored

Data is held in Supabase’s Sydney region, with scan media in object storage. State the sub-processors used and their locations.

3. How long we keep it

Photo retention follows the subscribed plan. After cancellation, organisation data is removed at the end of the stated deletion window.

4. Who we share it with

Sub-processors only — payment processing, hosting, storage and email delivery. Never sold.

5. Your rights

Access, correction, export and deletion, and how to make a complaint to the Office of the Australian Information Commissioner.

6. Contact

The contact point for privacy enquiries.