Privacy Policy

1. The information we collect

• Account information — your name, email address, and the organisation or role you represent.
• Building information you enter — building addresses, asset registers, fund figures, renewal and compliance records, documents and contacts. Some of this may include personal information of other people; you confirm you are authorised to provide it.
• Payment information — processed by Stripe. We do not see or store full card numbers; we keep a customer and subscription reference and your billing status.
• Technical and usage information — log data, device and browser details, and cookies required to sign you in and keep your session.

2. How we collect it

We collect information directly from you — when you sign up, enter building data, or contact us — and automatically through cookies and server logs when you use the app.

3. Why we use it

We use your information to provide and operate Plinth, to authenticate you, to bill and support you, to keep the service secure, to communicate with you about your account and the service, and to comply with our legal obligations.

4. When we disclose it

We disclose personal information to the service providers who help us run Plinth:

• Supabase — database, sign-in and file storage (your account and building data are hosted in Australia).
• Vercel — application hosting and delivery.
• Stripe — payment processing and subscription billing.
• Our email provider — to send sign-in links and account messages.

We may also disclose information where required or authorised by law, to protect rights or safety, or as part of a sale or transfer of the business. We do not sell your personal information.

5. Overseas disclosure

Your account and building data are stored in Australia (Sydney). Some providers — including Stripe and email and processing services — may store or process limited information overseas, including in the United States and the European Union. Where they do, we take reasonable steps to ensure your information is handled appropriately. By using Plinth, you consent to this disclosure.

6. How we keep it secure

We protect your information with encryption in transit and at rest, access controls (including row-level security, so one account cannot see another’s data), regular backups, and access limited to those who need it. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information.

7. How long we keep it

We keep personal information while your account is active and for a reasonable period afterwards, then delete or de-identify it, unless we are required to retain it (for example, for tax or legal reasons). You can ask us to delete your information.

8. Accessing and correcting your information

You may request access to, or correction of, the personal information we hold about you. Email us and we will respond within a reasonable time, in line with the APPs. If we cannot give you access, we will explain why.

9. Cookies

We use essential cookies to sign you in and maintain your session. We keep any analytics to a minimum and do not use cookies to build advertising profiles.

10. Complaints

If you have a privacy concern, contact us first at callum@plinthconsulting.com.au and we will work to resolve it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when. We will tell you about material changes.

12. Contact

For any privacy question, email callum@plinthconsulting.com.au, Melbourne, Victoria.