Where it is kept and who can see it
Pages are served by Cloudflare. Saved work and accounts are held in Supabase in Sydney (AWS ap-southeast-2), encrypted at rest and in transit. Payments are processed by Stripe. Sign-in and receipt mail are sent through SendGrid. Those four are the only processors. Saved work is kept until the user deletes it or closes the account. Support opens a saved record only on the user's request.
What is collected
- Free pages: standard server logs at Cloudflare (IP address, user agent, path, time) for security and aggregate traffic measurement. No advertising cookies.
- Free check: your six answers and the result are computed in your browser. They are not sent to us and are not saved. Reloading clears them.
- Account: the email you pay with, your plan, your organisation name if you give one, and the files you download. Stripe holds the card data; we do not see it.
- Watch: the account email and the record changes that triggered the email. No open or click tracking.
Cookies and consent
A session cookie keeps you signed in for 90 days. An anonymous cookie joins a pre-signup visit to an account after payment. Neither is used for advertising, profiling or cross-site tracking. Stripe may set its own cookies on the checkout page. The anonymous cookie is set on the first page view and is functional; if you object, write to support@theartofservice.com and we will delete it. We do not run third-party analytics or advertising tags.
Your privacy rights
Australia: The Art of Service Pty Ltd, ABN 19 095 825 308, Brisbane, Queensland 4001, Australia. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
European Union and United Kingdom: the legal basis for the account and payment is the contract with you; for security logs it is our legitimate interest in keeping the service safe; for any optional message it is consent. Account data is stored in Sydney, Australia. Where a transfer from the EU or UK is needed, we rely on the Australian adequacy decision for the UK and the standard contractual clauses for the EU, and we will provide a copy on request. You can ask for access, correction, deletion, restriction, portability or objection by writing to support@theartofservice.com.
Your choices
You can ask for a copy of your account data, correct it, or delete the account. Write to support@theartofservice.com from the address on the account. Deleting the account removes the saved work; the payment record that Stripe must keep for tax is held by Stripe under its own retention rule.
Changes
If a processor or a location changes, this page changes on the same day. The record date at the foot of the page is the date of the last change.