Privacy Policy

UnderCurrent Automations ABN (pending) ("UnderCurrent", "we", "us") operates undercurrentautomations.com. This policy explains how we collect, use, store, and protect your personal information when you use our website and services.

We are committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Information We Collect

We collect personal information that you provide directly to us, including:

• Your name, email address, and phone number (via our lead capture form)
• Your business name, trade type, service area, and other business details (via our onboarding form)
• Files you upload, such as logos, photos, and other media (stored securely in Supabase Storage)
• Any additional information you provide through email or phone conversations

We do not collect sensitive information such as health data, political opinions, or criminal records.

2. Payment Information

Payments are processed securely through Stripe. We do not store, process, or have access to your full credit card details. Stripe handles all payment data in accordance with PCI-DSS standards. We receive only a confirmation of payment and basic transaction details (amount, date, last four digits of your card).

3. How We Use Your Information

We use your personal information to:

• Build and deliver your website
• Communicate with you about your project, including status updates and review requests
• Process payments and manage your subscription
• Provide ongoing website maintenance and support
• Improve our services and website

We will not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Analytics and Cookies

Our website may use cookies and similar technologies to improve your experience and understand how visitors use our site. This may include basic analytics data such as page views, referring URLs, and device type.

You can control cookies through your browser settings. Disabling cookies will not affect your ability to use our lead capture or onboarding forms.

5. Third-Party Services

We use the following third-party services to operate our platform. Each has its own privacy policy governing their handling of data:

• Stripe — payment processing
• Supabase — database and file storage
• Vercel — website hosting and deployment
• Resend — transactional emails (project updates, invoices)
• Cloudflare — DNS and security

We only share the minimum information necessary for each service to perform its function.

6. Data Storage and Security

Your data is stored on servers managed by our hosting providers (Supabase and Vercel). While some of these servers may be located outside Australia, we take reasonable steps to ensure your data is handled in accordance with the APPs regardless of location.

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication, and access controls to protect your information.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you cancel your subscription, we will retain your data for up to 90 days in case you wish to reactivate. After that period, we will delete or de-identify your personal information, unless we are required by law to retain it.

Uploaded files (logos, photos) will be deleted within 90 days of account cancellation.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or outdated information
• Request deletion of your personal information (subject to legal obligations)
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs

To exercise any of these rights, contact us using the details below.

9. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or by posting a notice on our website. Your continued use of our services after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or how we handle your data, get in touch:

UnderCurrent Automations
Melbourne, Australia
hello@undercurrentautomations.com