Draft for review. This is a starting point written for a pre-launch waitlist, not legal advice. Have a lawyer review it before the product handles customer data. Bracketed items need filling in.
Privacy policy
Last updated: [date]
Who we are
Serpalias is operated by [Operator legal name] (ABN [ABN]), [business address or PO box], Australia ("we", "us"). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Contact us at privacy@serpalias.com.
What we collect
- Waitlist sign-ups: your email address and, if you choose to give them, your role and your website.
- Basic technical data: standard server logs (such as IP address, browser type and pages visited) kept by our hosting provider for security and reliability.
We don't use advertising or tracking cookies on this site.
How we use it
- To manage the waitlist and invite you when Serpalias is ready.
- To send product updates and our newsletter, only if you ticked the box. Every email has an unsubscribe link.
- To understand who's interested (for example, how many agencies vs in-house teams), in aggregate.
We don't sell your personal information.
Who we share it with
We use service providers to run the site and store data, including hosting (Vercel), database (Supabase) and email delivery ([email provider]). They process data on our behalf and only as we instruct. Some of them store data outside Australia, for example in the United States. [Confirm each provider and region before launch.]
How long we keep it
We keep waitlist details until you ask us to remove them or until launch plus [12] months if you haven't signed up. Ask to be removed any time at privacy@serpalias.com.
Your choices
You can ask to access or correct your information, or to delete it, by emailing us. If you're not happy with how we've handled a privacy concern, contact us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
When the product launches
This policy covers the pre-launch site only. Before the product opens, we'll publish an updated policy covering account data, connected services (such as Google Search Console), the Claude connector, and how optional, anonymised contributions to the shared network work.