Privacy Policy

1. Who we are

Kitchen Draft is operated by [Company legal name] (ABN [ABN]). This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What we collect

Account data: email address, authentication identifiers (including OAuth identity where you sign in with Google or Microsoft) and organisation membership.

Content you provide: kitchen plans, underlays, equipment data, comments, proposals and exported drawings.

Billing data: subscription plan, seat counts and payment status. Card details are collected and stored by Stripe, not by us.

Technical data: server logs and error reports needed to operate and secure the service.

3. How we use it

To provide the service: authentication, realtime collaboration, storage of your plans and generation of your exports.

To bill subscriptions through Stripe.

To send transactional email: sign-in codes, invitations and account notices. We do not send marketing email without consent.

To keep the service secure and diagnose faults, using error monitoring with personally identifying data minimised.

4. Who we share it with

Service providers that host and operate the platform: Supabase (database, authentication, file storage), our web host, Stripe (payments) and our error-monitoring provider. Each processes data only to provide their service to us.

People you collaborate with: your name/email and content are visible to members of the projects and organisation you belong to.

We do not sell personal information.

5. Storage and security

Data is stored with our hosting providers, which may include infrastructure outside Australia. Access is protected by row-level security in the database, encrypted transport (TLS) and least-privilege service credentials.

6. Retention and deletion

Content is retained while your organisation's account is active. On request, or when an account is closed, we delete personal information within a reasonable period except where retention is required for legal or accounting obligations.

7. Your rights

You may request access to, correction of, or deletion of your personal information by contacting [support email]. If you are unsatisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC).

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or in-app before they take effect.