Privacy Policy

1. Introduction

LaidOut.io is a product operated by Code Chisel ("we", "us", or "our"). This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information when you use the LaidOut.io service (the "Service"). This policy is based on our obligations under the Privacy Act 1988 (Cth), including the Australian Privacy Principles.

2. Personal Information

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in a material form or not.

3. Information We Collect

We collect the following types of information:

• Account Information: When you sign up via our authentication provider (Clerk), we collect your email address and basic profile information necessary to create and manage your account.
• Scene Content: Images, hotspot configurations, and related metadata that you upload or create within the Service.
• Billing Information: Subscription and payment details are processed securely through Stripe or another payment provider we identify at checkout. We do not store full credit card numbers on our servers.
• Usage Data: We may collect information about how you interact with the Service, including pages visited, actions taken, and device/browser information.

4. How We Collect Information

We collect personal information directly from you when you create an account, use the Service, upload or configure scene content, subscribe to a plan, contact us for support, or otherwise communicate with us. We may also receive limited account, session, billing, and technical information from our service providers.

5. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service.
• Process your subscription and billing.
• Authenticate your account and secure access.
• Communicate with you about your account, updates, or support requests.
• Monitor and analyse usage to improve the Service.
• Enforce plan limits, prevent misuse, and protect the Service.
• Comply with legal, accounting, tax, and regulatory obligations.

6. Cookies and Authentication

The Service uses authentication tokens and session cookies provided by Clerk to maintain your signed-in session. These are essential for the operation of the Service. We may use privacy-conscious analytics or server logs to understand Service performance and usage. We do not use third-party advertising cookies.

7. Data Sharing

We do not sell your personal information. We only disclose personal information where reasonably necessary to operate the Service, meet legal obligations, or protect our rights. This may include disclosure to:

• Clerk: For authentication, session management, and account services.
• Stripe: For payment processing, subscriptions, receipts, tax, and billing records.
• Infrastructure providers: For hosting and storage of the Service and your content.
• Support, email, analytics, and operations tools: Where needed to provide support, send account communications, monitor reliability, or improve the Service.
• Legal requirements: If required by law or to protect our rights.

8. Overseas Disclosure

Some of our service providers may store or process personal information outside Australia, including in the United States, Europe, and other regions where those providers operate infrastructure. We take reasonable steps to work with providers that use safeguards intended to protect personal information consistently with Australian privacy standards.

9. Automated Decisions

We do not use personal information to make decisions based solely on automated processing that have legal or similarly significant effects. Some account, billing, and plan-limit actions may be applied automatically based on your subscription status, active scene count, or account settings. If you believe an automated account or billing action is incorrect, contact us and we will review it.

10. Data Retention

We retain your account data and scene content for as long as your account is active or as long as needed to provide the Service. If you delete your account or ask us to delete your personal information, we will remove or de-identify it within a reasonable period, except where retention is required for legal, tax, accounting, security, backup, or dispute-resolution purposes.

11. Security and Data Quality

We take reasonable measures to protect your information from unauthorised access, alteration, disclosure, loss, or destruction. We also take reasonable steps to keep personal information accurate, complete, and up to date where it is used for the Service. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

12. Access and Correction

You may access, update, or delete certain account information through the Service. You may also ask us to provide access to personal information we hold about you or to correct it if it is inaccurate, incomplete, or out of date. Submit requests to [email protected]. We will respond within a reasonable time and in accordance with applicable law.

13. Privacy Complaints

If you have concerns about how we have handled your personal information, contact us at [email protected]. We will acknowledge privacy complaints within five business days and aim to investigate and respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated "Last updated" date.

15. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].