Privacy policy

Last updated 6 October 2026

Draft. This policy is awaiting legal review and may change before launch.

DocuBox Pty Ltd (ACN 702 856 988) ("we") respects your privacy and handles personal information in line with the Australian Privacy Principles.

What we collect

Your name, email address and sign-in details (passwords are stored only as secure hashes).
Your organisation's details: company name, ABN, address, phone, website, logo and brand colours.
Email addresses of people you invite to your account.
What you create with us (units, VOC details you enter, such as site and equipment) and your plan and billing history.
Basic technical information when you use the site, such as IP address and browser, for security.

We don't collect your full card details. Payments are handled by Stripe.

How we use it

To run your account, produce and deliver your documents, and put your branding on them.
To bill you and send tax invoices.
To send service emails, such as sign-in links, delivery notices and billing reminders.
To keep the service secure and prevent misuse, such as repeat free weeks.

We don't sell your personal information.

Who we share it with

Only service providers who help us run DocuBox: Stripe (payments), Cloudflare (hosting and storage), our email delivery provider, and our document production systems. Some of these providers may store data outside Australia. We require them to protect it. We'll also disclose information where the law requires.

Keeping and deleting it

We keep your information while your account is open and as long as needed for tax and legal records afterwards. You can ask us to close your account and delete your information at any time.

Access, correction and complaints

You can update most details in your account. To access or correct anything else, or to make a privacy complaint, email [email protected]. We'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).