Privacy Policy

Last updated 6 July 2026

This policy explains how Sign OS (“we”, “us”) collects, uses, stores and discloses personal information, consistent with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

Account and contact details (name, business name, email, phone); the business data you enter (customers, quotes, jobs, invoices, suppliers, files); usage and device data (log data, IP address, browser); and payment details, which are handled by Stripe — we don't store full card numbers.

How we use it

To provide and secure the Service, process payments, provide support, improve the product, and send service and account communications. We use it only for the purposes it was collected for or a related purpose you'd reasonably expect.

Who we share it with

We use trusted service providers to run Sign OS, including Supabase (database and authentication), Vercel (hosting), Cloudflare R2 (file storage) and Stripe (payments). Where you connect an integration such as Xero, MYOB, QuickBooks or your email provider, data is shared with that service at your direction. We don't sell your personal information.

Where it's stored

Data is stored with the providers above, which may process data in Australia or overseas. We take reasonable steps to ensure our providers protect your information to a comparable standard.

Security

We use tenant isolation, encryption in transit, access controls and role-based permissions to protect your data. No system is perfectly secure, but we work to protect information from misuse, loss and unauthorised access.

Retention

We keep personal information while your account is active and for a reasonable period afterwards to meet legal, accounting and operational needs, then delete or de-identify it.

Your rights

You can request access to, or correction of, the personal information we hold about you, and raise a privacy concern, by emailing us. We'll respond within a reasonable time. You can also complain to the Office of the Australian Information Commissioner (OAIC) if you're not satisfied with our response.

Cookies

We use essential cookies to keep you signed in and to run the Service. We don't use them to build advertising profiles.

Changes and contact

We may update this policy; material changes will be notified in-app or by email. For any privacy question or request, email [email protected].

See also our Terms of Service.