This Privacy Policy explains how busi.au ("we", "us", "our"), operated at busi.au, collects, uses, stores, and discloses your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

Information you provide directly

• Account information: email address, password
• Business information: business name, business type, phone number, address, ABN, licence/certification numbers, years in business, service areas
• Website content: tagline, service descriptions, testimonials, images (logo, hero, gallery photos)
• Payment information: billing details processed securely by Stripe (we do not store your card details)

Information collected automatically

• Usage data: pages visited, features used, timestamps
• Device data: browser type, operating system, screen resolution
• Cookies: session cookies for authentication and preferences (see Section 6)

2. How We Use Your Information

We use your personal information to:

• Create and manage your account
• Generate and host your business website
• Process payments and manage your subscription
• Send transactional emails (welcome, site published, password reset)
• Provide customer support
• Improve and develop our service
• Comply with legal obligations

We will not use your personal information for direct marketing without your consent.

3. Third-Party Service Providers

We share your information with the following third-party providers, solely for the purpose of delivering our service:

These providers have their own privacy policies and are required to handle your data in accordance with applicable privacy laws. We do not sell your personal information to any third party.

4. Data Storage and Security

Your data is stored on servers operated by our third-party providers, which may be located outside Australia (including the United States). By using our service, you consent to the transfer of your data to these locations, subject to appropriate safeguards.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These measures include:

• Encryption of data in transit (TLS/HTTPS)
• Row-level security policies on our database
• Secure authentication via Supabase Auth
• No storage of payment card details on our servers

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our service. If you close your account, we will delete or de-identify your personal information within a reasonable timeframe, unless we are required to retain it by law.

Published website content may remain cached on Cloudflare's network for a short period after deletion.

6. Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

Essential cookies

• Authentication cookies: to keep you logged in to your account
• Session cookies: to maintain your session while using the platform

Analytics and advertising

• Google Analytics (GA4): measures how visitors use our website, including pages visited, time on site, and device information. Google may set cookies such as _ga and _ga_*.
• Google Ads: tracks conversions (e.g. form completions) to measure advertising effectiveness. When you submit our intake form, your email address is sent to Google in hashed (SHA-256) form via Enhanced Conversions so Google can match the conversion to the ad click that brought you here. Google does not receive your email in plain text.
• Meta Pixel: tracks page views and conversions on our marketing pages to measure advertising effectiveness. Meta may set cookies for this purpose.

Managing your preferences

If you are located in the European Union, we will ask for your consent before enabling analytics and advertising tracking. You can manage cookies through your browser settings at any time. Disabling essential cookies may prevent you from using parts of our service.

7. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or outdated information
• Request deletion of your personal information
• Complain if you believe we have breached the APPs

To exercise any of these rights, contact us at hello@busi.au. We will respond to your request within 30 days.

8. Complaints

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC).

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at hello@busi.au.