Privacy policy

• Yours, as our client: who you are, your team, your plan and how you pay us. We decide what happens to it.
• Your customers', on your site: orders, form entries, customer accounts, contacts. You decide what happens to it; we keep it and process it only to run your site for you, and we never sell it or use it for anything of our own.

• Your name, email address and role on each site, and when you were last signed in.
• Sign-in codes and, if you turn it on, your authenticator app (kept encrypted). Session cookies keep you signed in.
• What you put on your site: pages, products, images, settings.
• Billing: your plan, invoices and what Stripe tells us about payments. Your card details go to Stripe, never to us.
• Messages you send us through Get help, with the site and screen you were on.
• A count of visits per site per day. To count each connection once, we keep a one-way, keyed hash of the address, never the address itself. Analytics such as Google Analytics run only on a client's own site, only if they add them, and only after a visitor accepts when the cookie notice is on.

We use a few companies to host and run the platform. Each only gets what it needs for its job: - Vercel — hosting the platform. - Neon — the database, in Singapore. - Cloudflare — storing images and files. - Resend — sending sign-in codes and emails. - Stripe — taking payments (ours, and your shop's through your own Stripe account). - Google Workspace — our own email. - Backblaze — encrypted nightly backups. - Anthropic — only if you use the Translator add-on: the words on your site you ask Claude to translate are sent to it for that, and not used to train its models.

Some of these keep information outside Australia, including in Singapore and the United States.

While your site is with us, we keep what's on it. Images you remove are kept 30 days in case you want them back. Backups are kept up to 35 days. When you leave, you can download everything first (Settings · Export everything); we then delete your site and its information, except what we must keep for tax and accounting.

You can ask to see, correct or delete what we hold about you by emailing hello@outputinput.studio. Your customers should ask you first, since it's your site; we'll help you answer them.

We follow the Australian Privacy Principles. If you're unhappy with how we've handled your information, tell us first. You can also contact the Office of the Australian Information Commissioner (oaic.gov.au).

If we change this policy in a way that matters, we'll email the owners of every site before it takes effect.