Privacy Policy — DRAFT
DRAFT — not legal advice and not yet in force. Prepared for Oscar's sign-off (2026-10-11). Written to cover Australia (Privacy Act 1988 / Australian Privacy Principles) and the United States (CCPA/CPRA-style rights for California and similar state laws). Placeholders in [BRACKETS] need values. Recommended: one review pass by a lawyer before removing the DRAFT banner.
1. Who we are. [OPERATOR LEGAL ENTITY] ("we", "us"), operator of [PLATFORM NAME] at our websites. This policy explains what personal information we collect, why, and your rights. Contact: [SUPPORT EMAIL].
2. What we collect.
Account information: email address, verification status, password (stored hashed, never in plain text), account roles and permissions.
Purchase records: what you bought, when, and status — processed by Stripe. We never receive or store card numbers.
Usage data: the runs you trigger, options and outputs generated, downloads, purchases and credits history.
Technical data: standard server logs (IP address, user agent, timestamps) used for security and operations.
3. Why we collect it. To provide the Service (authentication, running your jobs, delivering outputs), to bill and account for purchases, to keep the Service secure, to comply with law, and to answer you when you contact us. We do not use your data for third-party advertising and we run no third-party analytics.
4. Who we disclose it to. Stripe (payments, under its own privacy terms); our hosting provider (Hetzner, servers located in [GERMANY/EU — CONFIRM]); anyone you direct us to share with; authorities where law requires. We do not sell your personal information and we do not share it for cross-context behavioural advertising as those terms are defined under US state privacy laws.
5. Storage and international transfer. Data is stored on our hosting in [GERMANY/EU — CONFIRM]. If you are in Australia, this means information may be held outside Australia (APP 8); we take reasonable steps so that overseas recipients handle it consistently with the Australian Privacy Principles.
6. Retention. We keep account data while your account exists and for as long as legal obligations require afterwards. Backups are retained about 14 days (rolling database dumps) and then age out. Deletion requests are honoured, with deleted data disappearing from backups as they roll over.
7. Security. Encryption in transit, access controls, and secrets kept out of source code and configuration committed to repositories. No system is perfectly secure; we act promptly on any incident and tell you where required.
8. Your rights — Australia (Privacy Act 1988). You may request access to, or correction of, your personal information (write to [SUPPORT EMAIL]). If you have a complaint, contact us first — we respond within 30 days — and if you are not satisfied you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
9. Your rights — United States (incl. California). Residents of California and states with similar laws may have the right to: know/access the categories and specific pieces of personal information we hold; delete it; correct it; opt out of any "sale" or "sharing" (we do neither); and not be discriminated against for exercising these rights. Email [SUPPORT EMAIL] and we will respond within the statutory period (45 days where applicable). We do not use sensitive personal information to infer characteristics about you.
10. Children. The Service is for adults (18+). We do not knowingly collect information from children.
11. Changes. We will post changes here and, for material changes, notify you by email or in-Service notice before they take effect.
12. Contact and complaints. [SUPPORT EMAIL] · [POSTAL ADDRESS, SYDNEY NSW].
DRAFT — © 2026 [OPERATOR LEGAL ENTITY].