Privacy Policy

1. About This Policy

Document Repository ("we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, disclose, and safeguard your personal information.

2. Information We Collect

We collect the following personal information:

• Account information: name, email address, and password (hashed) when you register.
• Billing information: payment method details processed securely by Stripe. We do not store full card numbers.
• Usage data: pages visited, features used, browser type, IP address, and timestamps, collected via server logs and analytics.
• Content you create: documents, fields, and other data you enter into the service.

We collect information directly from you when you register, subscribe, or use the service, and automatically through standard web technologies.

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and improve the Document Repository service.
• Process payments and manage your subscription via Stripe.
• Send transactional emails (account activation, password reset, invoices) via Postmark.
• Respond to support requests and communicate service updates.
• Comply with legal obligations.

We will not use your information for purposes other than those described without your consent.

4. Disclosure to Third Parties

We disclose personal information only to trusted third-party processors necessary to deliver the service:

• Stripe — payment processing and subscription billing. Stripe Privacy Policy.
• Postmark (ActiveCampaign) — transactional email delivery. Postmark Privacy Policy.
• Hosting provider — cloud infrastructure for storing and serving the application and your data.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may disclose information if required by Australian law or a court order.

5. Data Storage and Security

Your data is stored on servers located in Australia or in countries with comparable privacy protections. We use industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. While we take reasonable precautions, no system is completely secure.

6. Your Rights Under the Australian Privacy Principles

Under the APPs, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or out-of-date information.
• Request deletion of your account and associated data (subject to legal retention obligations).
• Lodge a complaint with us if you believe we have breached the APPs.

If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

7. Cookies

We use essential cookies to maintain your session and security. We may use analytics cookies to understand how the service is used. You can disable cookies in your browser settings, though some features may not function correctly.

8. Contact Us

For privacy enquiries, requests to access or correct your information, or to make a complaint, please contact us at:

Email: [email protected]

We will respond within 30 days as required by the APPs.