Privacy Policy

Last updated 7 October 2026

This policy explains what personal information It's Your Idea collects, why, who we share it with and how you can see, correct or remove it. It is written to the Australian Privacy Principles in the Privacy Act 1988 (Cth). It covers this website, your It's Your Idea account and launchpad, and the services we run for you, including Insights, Monitoring, hosting and domains.

1. Who we are

It's Your Idea (ABN 45 806 591 321), Ballarat, Victoria 3350, Australia ("we", "us", "our"). You can reach us about privacy on 0423 561 268 or through our contact form; choose "Something else" and start your message with "Privacy".

2. The information we collect

When you enquire: your name, email, and anything you choose to add, such as your phone number, business name, website and message.
When you use our free tools (such as the website audit): the website address you enter, the email you give us for the report, and the results we generate.
When you create an account: your name, email, a securely hashed password (we never store or see the password itself), and optionally your phone and company.
When you pay: your billing details and payment history. Card and bank details are entered with and held by Stripe; we never see or store full card numbers.
When you register or manage a domain: the registrant's name, organisation, postal address, email and phone, which domain registries require.
When you ask for support: your name, email, the details of the issue and our correspondence with you.
When you sign in: the time, your IP address and browser type, and failed sign-in attempts. We use these to keep accounts secure.
When you browse this site: if, and only if, you click "Accept" on our cookie notice, Google Analytics and Google Ads measure how the site is used. See section 7.

We don't ask for sensitive information (such as health, racial or political information) and we ask you not to send it to us.

3. Information you put into our tools about other people

If you're an agency or business using Insights, Monitoring or our hosting, the tools hold information about your customers and their websites, such as contact names, email addresses and analytics data you connect. That information is yours. We handle it only to provide the service to you, under your instructions, and we don't use it for our own marketing. Because our services are white-label, your customers deal with you, so you're responsible for telling them how their information is handled and for having the right to put it into the tools. If one of your customers contacts us about their information, we'll refer them to you and help you respond.

4. Why we use it

to reply to enquiries and give you the quotes, reports and services you ask for;
to run your account, process payments, send invoices and receipts, and remind you about renewals or failed payments;
to register and renew domains in your name;
to provide support and keep the services secure, including detecting spam, bots and fraud;
to send you a small number of follow-up emails after an enquiry or a free audit (see section 6);
to improve our website and services; and
to meet our legal obligations, such as tax record keeping.

5. Who we share it with

We don't sell or rent personal information. We share it only with the service providers we use to run the business, and only what each one needs:

Render hosts our application and database, in Singapore.
Stripe processes payments (United States and other countries).
Mailgun sends our emails (United States).
Anthropic provides the AI behind our free tools and some features in Insights (United States). For the website audit we send the site address and the publicly visible text of that site, not your name or email.
Cloudflare protects and delivers the site, and runs a bot check on account sign-up (United States and worldwide).
Google provides Analytics and Ads measurement, only after you accept cookies (United States). When you request an audit after accepting, Google Ads receives a scrambled (hashed) copy of your email so it can tell us an ad led to a request; it can't read the email from it.
Synergy Wholesale, our domain provider in Australia, and the relevant domain registries. Registrant details may appear in public registry lookups, as registry rules require.

Several of these providers are overseas, as listed. We choose established providers that protect information to a standard comparable with Australian law, but by using our services you understand your information may be stored or processed in those countries. We may also disclose information where the law requires it, or to protect our rights or someone's safety.

6. Marketing emails

After you send an enquiry or request a free audit, we may send you up to three follow-up emails over the following weeks. Every one has an unsubscribe link, and once you use it you won't receive any more. Emails about your account, billing and support aren't marketing and continue while you have an account.

7. Cookies

Always set: a cookie remembering your cookie choice, and when you sign in, a secure session cookie that keeps you signed in across our tools. These are needed for the site to work.
Only if you click "Accept": Google Analytics and Google Ads cookies. If you click "Decline", they're never loaded. You can change your mind by clearing this site's cookies.

We don't use session-recording or screen-replay tools.

8. AI and automated decisions

Our free tools and some Insights features use AI to draft reports and suggestions. A person can review anything that matters, and we don't use AI or other automated processing to make decisions that significantly affect your rights, such as approving or refusing service. Automated checks do filter likely spam and bot submissions; if you think a genuine message was caught, contact us.

9. Security and data breaches

Information is encrypted in transit, passwords are hashed, access to our systems is limited and protected, and sign-in attempts are rate-limited and monitored. No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

10. How long we keep it

We keep personal information only for as long as we need it for the purposes above. Financial and tax records are kept for at least five years, as Australian tax law requires. Account information is kept while your account is open and for a reasonable period afterwards in case you return or there's a dispute. Enquiries, audit requests and support history are kept while they're useful for helping you. When we no longer need information, we delete it or de-identify it.

11. Seeing, correcting or deleting your information

You can ask to see the personal information we hold about you, or ask us to correct or delete it, by contacting us as set out in section 1. We'll respond within 30 days. Account details can also be updated yourself in the launchpad. We may need to confirm your identity, and we may keep some information where the law requires it.

12. Complaints

If you're unhappy with how we've handled your information, contact us first and we'll try to resolve it within 30 days. If you're still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

13. Changes to this policy

We'll update this policy when our practices change and show the date at the top. If a change materially affects how we use information you've already given us, we'll tell account holders by email.