Reference
Legal, Policy & Data Handling
Terms summary, privacy, data residency, deletion requests, and the audit log retention policy.
Plain-English summary; the legally binding documents are linked from the footer of every page.
Data residency
All production data lives in Sydney (ap-southeast-2). Daily encrypted backups retained for 35 days; weekly long-term backups retained for 12 months.
Personal data
We store the minimum needed to operate the platform: name, email, org details, signed contracts, and payment metadata. We do not sell personal data.
Deletion requests
Users can request deletion via Account → Privacy → Delete account. Contracts and tax records are retained for 7 years per ATO requirements with PII redacted; everything else is hard-deleted within 30 days.
Audit log
Every state change (request, approval, signature, payment, refund, seat invite, download) is logged immutably for 7 years. Available to org owners under Org → Audit log.