Privacy Policy

Privacy highlights

• We process job data to deliver the Service in your tenant-isolated workspace.
• We do not sell personal information.
• You control your business data and can request export or deletion.
• We use vendors for hosting, databases, payments, and AI features when enabled.

1. Scope

This Privacy Policy applies to the Blindsmiths web app and related services (the "Service"). It does not cover third-party services you connect, which are governed by their own policies.

2. Information we collect

• Account data: name, email, business name, roles, and authentication details.
• Business configuration: tenant identifiers, workspace settings, integration settings, and plan details.
• Job content: measurements, notes, photos, audio, and metadata you submit or generate.
• Usage data: device information, IP address, timestamps, and feature usage logs.
• Support data: messages and files you send to support or sales.

3. How we use information

• Provide, maintain, and improve the Service.
• Authenticate users and enforce role-based access and row-level security.
• Process voice, photo, and form captures and store operational records in tenant-scoped systems.
• Bill for subscriptions and manage trials and usage limits.
• Monitor performance, prevent abuse, and respond to support requests.

Where required by law, we rely on a lawful basis such as performance of a contract, legitimate interests, or your consent.

4. How we share information

We share information only as needed to operate the Service, including:

• Service providers for hosting, Postgres databases, monitoring, and customer support.
• Resend for delivery of contact enquiries, when the contact form is used.
• Stripe for billing, subscription management, and payment records when paid features are used.
• Sentry for error and performance telemetry when monitoring is configured.
• OpenAI when you choose supported voice, photo, PDF, or AI-assisted import features.
• Authorities or regulators when required by law or to protect rights and safety.

5. Customer data responsibilities

Your business is the data controller for customer job data and is responsible for the data entered into the Service, including customer details. If you upload personal data, you must ensure you have the right to do so. Blindsmiths acts as processor for Service operations and processes that data only to provide the Service and in accordance with your instructions.

6. Data retention

We retain account and operational data while your account is active and as needed to provide the Service, keep security and billing records, resolve disputes, and meet legal obligations. Different records may have different retention periods. You can request deletion of account data through support, subject to legal, security, billing, backup, and operational retention requirements.

7. Security

We use safeguards designed to protect data, including authenticated access, tenant-scoped database controls, row-level security, and encryption for sensitive secrets such as API keys. No method of transmission or storage is completely secure.

8. Cookies and similar technologies

We use essential cookies and local storage for authentication, security, and feature preferences. The offline application may also use IndexedDB and service worker caches on your device. Optional error and performance telemetry can operate when configured; the current application does not include advertising pixels or third-party advertising cookies. See our Cookies and device storage page for details and controls.

9. International transfers

Some providers named above may process data outside Australia. Provider locations and subprocessors can change, so contact us if you need current information about a particular feature before supplying data. We take steps required by applicable law when disclosing personal information overseas.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or object to certain processing. Contact us through the contact portal or at Blindsmiths@gmail.com to exercise these rights. We may need to verify your identity before fulfilling requests.

11. Children

The Service is intended for business use and not for children. We do not knowingly collect personal data from children.

12. Governing law

This policy is governed by the laws of Victoria, Australia, without regard to conflict-of-law rules.

13. Changes to this policy

We may update this policy from time to time. We will post the updated policy and revise the effective date.