Privacy Policy
Last updated: July 2026
kant.au is operated by Adrian Hewitt trading as kant.au (ABN 47 985 180 864), a sole trader registered in Tasmania, Australia. This privacy policy describes how we collect, use, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information We Collect
kant.au collects information necessary to provide our services:
- Account Information: Email address and password when you create an account.
- Payment Information: Billing details processed by Stripe. We do not store your full credit card number; Stripe handles payment data in accordance with PCI-DSS standards.
- Service Data: Data you submit or generate while using our services.
- Team Member Data: If you use a team plan, the names and email addresses of team members you invite.
- Configuration Data: Webhook URLs, API keys, and notification preferences you configure.
- Usage Data: How you interact with our service, including features used and pages visited.
- Technical Data: IP address, browser type, and device information for security and analytics.
2. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Send alerts and notifications relevant to your account
- Process payments and manage your subscription
- Improve our service and develop new features
- Communicate with you about your account and our services
- Ensure security and prevent fraud
3. Third-Party Services and Data Sharing
We share personal information with the following third-party service providers to operate the Service:
- Stripe (United States): Payment processing. Stripe receives your billing details to process subscription payments. See Stripe's Privacy Policy.
- Google Analytics (United States): Website analytics on public marketing pages only. Analytics cookies are only set after you give explicit consent. No tracking occurs on authenticated dashboard pages. See Google's Privacy Policy.
- Email (SMTP) (Australia): Transactional emails (alerts, notifications, account messages) are sent from our own mail server hosted in Australia.
We do not sell your personal information to any third party.
4. Overseas Data Transfers
In accordance with Australian Privacy Principle 8, we disclose the following overseas data transfers:
- Stripe — Payment data is processed in the United States. Stripe is certified under internationally recognised data protection frameworks.
- Google Analytics — Analytics data (where consent is given) is processed in the United States. Google complies with applicable data protection obligations.
All kant.au application servers and databases are hosted in Australia. Your account data, service data, and configuration data remain in Australia.
5. Data Retention
We retain your data for as long as your account is active. Historical data is retained according to your subscription plan — see our pricing page for details.
When you delete your account, we will delete your personal data within 30 days. We may retain billing and transaction records for up to 5 years after account deletion as required by the Australian Taxation Office for tax record-keeping purposes.
6. Cookies & Tracking
We use Google Analytics on our public marketing pages to understand how visitors find and use our site. Analytics cookies are only set after you give explicit consent via our cookie banner. No tracking occurs on authenticated dashboard pages.
For a full list of cookies we use, including their purpose and duration, see our Cookie Policy.
7. Data Security
We implement appropriate security measures to protect your data, including encryption in transit and at rest, secure authentication, and regular security reviews.
In the event of an eligible data breach, we will comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). This means we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.
8. Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access your personal data held by us
- Request correction of inaccurate data
- Delete your account and associated data
- Request a copy of your personal data by contacting us at [email protected]
- Opt out of marketing communications
To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.
9. Complaints
If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us at [email protected]. We will investigate your complaint and respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Email: [email protected]
10. Contact Us
If you have questions about this privacy policy, please contact us at [email protected].