1. Information we collect
We collect personal and business information provided when you submit a letter of demand, create an account, or contact us. This includes:
- Names, email addresses, phone numbers, and business addresses of creditors and debtors
- Australian Business Numbers (ABNs) and Australian Company Numbers (ACNs)
- Debt details including amounts, invoice references, and descriptions
- Uploaded documents (invoices, agreements) stored securely in Cloudflare R2
- Payment information processed securely by Stripe (we do not store card details)
2. How we use your information
- To generate and send letters of demand on your behalf
- To send follow-up communications to debtors and creditors
- To process payments via Stripe Connect
- To verify ABNs via the Australian Business Register (ABR)
- To provide you with a dashboard to track your letters
3. Data retention
Personal information related to letters of demand is retained for 7 years from the date of sending to comply with legal record-keeping obligations. After this period, personally identifiable information is anonymised or deleted.
4. Security
All data is stored on Cloudflare's infrastructure (D1 database, R2 storage) with encryption at rest and in transit. We do not store payment card details — these are processed directly by Stripe.
5. Third-party services
We use the following third-party services:
- Cloudflare — hosting, database, storage, spam protection
- Resend — transactional email delivery
- Burst SMS (Kudosity) — SMS delivery
- Stripe — payment processing
- Australian Business Register (ABR) — ABN verification
6. Your rights
You have the right to access, correct, or delete your personal information. Contact us at [EMAIL TO BE INSERTED] with any privacy requests.
7. Contact
Privacy enquiries: [EMAIL TO BE INSERTED]
[THIS POLICY IS A DRAFT AND MUST BE FINALISED BY A QUALIFIED PRIVACY LAWYER BEFORE LAUNCH]