Privacy Policy

1. Information we collect

We collect information you give us directly, such as your name, email address, company name, and the project documents and data you upload. We also collect information automatically when you use the service, such as log data, device and browser details, and usage events, which help us keep the service secure and improve it. We collect payment details through Stripe; we do not store full card numbers on our own systems.

2. How we use your information

We use personal information to provide and operate the service, authenticate accounts, process payments, run the AI features you request, send transactional messages such as invitations and notifications, provide support, keep the platform secure, and meet our legal obligations. We do not sell your personal information.

3. Cloud subprocessors

We use trusted third-party providers to run the service. Your data may be stored and processed by these subprocessors:

• Supabase, for database, authentication, and file storage.
• Vercel, for application hosting and content delivery.
• Stripe, for payment processing and billing.
• Anthropic, for the AI features that process your documents.
• Resend, for sending transactional email.

Each subprocessor handles data only to provide its service to us. Some of these providers may process or store data outside Australia. Where that happens we take reasonable steps to ensure your information stays protected to a standard consistent with the Australian Privacy Principles.

When you use an AI feature, the document text and content you upload is sent to our AI provider (Anthropic) to extract and analyse it and return the result to you. Anthropic processes this content solely to provide that result and does not use your documents or data to train its models.

4. Disclosure of information

We disclose personal information to the subprocessors listed above, to other users within your own organisation as part of normal collaboration, and where we are required or authorised to do so by law. We do not disclose your information to third parties for their own marketing.

5. Data storage, retention, and export

We keep your personal information for as long as your account is active and as needed to provide the service, then for a reasonable period to meet legal, accounting, and dispute-resolution needs. If your account is closed or your subscription ends, you can request an export of your data, and we will make it available for export for 30 days after termination. After that period we may delete your data in the ordinary course of operations.

6. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes encryption in transit, access controls scoped per company, and audit logging of changes. No system is perfectly secure, so we cannot guarantee absolute security.

7. Accessing and correcting your information

You can access and update most of your personal information from within the app. You may also ask us to access or correct your information by emailing hello@handoverpoint.com.au. We will respond within a reasonable time and, if we decline a request, we will explain why as required by the Australian Privacy Principles.

8. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the service is used. You can control cookies through your browser settings, though disabling them may affect how the service works.

9. Complaints

If you believe we have breached the Australian Privacy Principles, contact us at hello@handoverpoint.com.au and we will investigate. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change we will take reasonable steps to notify you. The date at the top shows when this policy was last updated.

11. Contact

Questions or requests about your privacy can be sent to hello@handoverpoint.com.au.