Privacy

BondShield is an information and document-preparation service for NSW renters, operated by [Operator entity name — pending]. This page describes what we store, where, for how long, and how to remove it — in plain English, because photos of your home are personal data and you should be able to see exactly how they're handled.

What we store, and why

• Checklist emails. If you ask for the PDF version of the checklist, we store your email address so we can give you the download. No newsletter, no follow-up sequence.
• Orders. When you buy a pack we store your email, the product, the amount paid and a payment reference. Card details never touch our systems — payment is processed by Stripe.
• Vault data. If you use the evidence vault: your account email, your tenancy address and move-in date, your photos and the notes you attach, and — for each photo — the time our server received it, its size and type, and a SHA-256 digest of the file. Photos keep whatever information your camera embedded in the file (such as EXIF timestamps and, if enabled on your phone, location); we don't strip it, because it's part of your record.

Where it lives

Vault photos and all application data are stored with Supabase in the Sydney, Australia region (ap-southeast-2). Photos live in a private storage bucket — there are no public links, and access happens only through short-lived signed URLs generated after you sign in. The website runs on Vercel; payments run on Stripe; the emails we send run on Resend.

Who can see it

Your vault is private to your account. Our operators can access stored data for support, abuse prevention and legal compliance — not for marketing, and never to share or sell. We don't use advertising trackers; analytics are aggregate page counts via Vercel Analytics. The cookies we set are: your sign-in session, and a single cookie remembering which price you were shown.

How long we keep it, and how to delete it

• Vault data is kept while your account is active. You can delete any tenancy yourself — open the tenancy in your vault and choose “Delete this tenancy and all its photos”. That permanently removes the photos (originals included), notes, sessions and generated packs. There is no undo and no retention copy.
• Account deletion isn't self-serve yet: email us at [contact email — pending domain] from your account address and we'll delete your account and everything in it within 30 days, confirming when done.
• Order records are kept as long as accounting and consumer-law obligations require.

Your rights

You can ask us what we hold about you, ask for corrections, or ask for deletion at [contact email — pending domain]. If you're in a dispute and need advice, the Tenants' Union of NSW provides free, independent help to renters.