Skip to main content

Privacy Policy

Last updated: 20 June 2026

PaperFlow is a product of DigiGroup Pty Ltd (ACN 685 208 226). This policy explains how we collect, use, store, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

We collect personal information through our website forms:

Email signup form:

  • Name
  • Email address
  • Marketing consent preference
  • Form submission source (automatically recorded)

Shortlist registration form:

  • Name
  • Email address
  • Company name
  • Phone number (optional)
  • Team size
  • Current software
  • Marketing consent preference
  • Form submission source (automatically recorded)

We also collect technical data automatically:

  • Anonymised website usage data via Google Analytics 4 (page views, device type, approximate location)
  • IP address and browser type (standard web server logs)

Subscription and payment information:

If you subscribe to PaperFlow, we collect the information needed to manage your subscription — your name, email address, business details, and a record of your plan and payments. Your card details are entered directly with our payment processor, Stripe, and are stored by Stripe — not by PaperFlow. We never see or store your full card number.

2. How We Use Your Information

We use your personal information to:

  • Follow up with you about PaperFlow access
  • Process your subscription payments and manage your account, if you are a customer
  • Personalise our communication based on your team size and current software
  • Send marketing communications, only with your explicit consent
  • Improve our website and understand how visitors use it

3. Marketing Communications

We comply with the Spam Act 2003 (Cth). We will only send you marketing emails if you have given your explicit opt-in consent via the checkbox on our forms.

You can withdraw your consent at any time by contacting us at info@paperflow.com.au. We will action your request promptly.

4. Data Storage & Security

  • Your account and form data is stored in Google Firebase (Firestore), with servers located in Australia where available, otherwise the nearest available region
  • All data is transmitted over HTTPS (encrypted in transit)
  • Firebase provides encryption at rest by default
  • Payment card details are entered with and held by our payment processor, Stripe — PaperFlow does not store your full card details. Stripe maintains its own industry-standard (PCI DSS) security for the card data it processes
  • Access to your data is limited to authorised DigiGroup staff

If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

5. Analytics

We use Google Analytics 4 to understand how visitors use our website. GA4 collects anonymised data, we do not use it to identify individual users.

You can opt out of Google Analytics by using browser extensions such as the Google Analytics Opt-out Browser Add-on or by adjusting your browser privacy settings.

6. Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

To exercise any of these rights, contact us using the details below.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy. If you are a customer, we keep your account and business data for 30 days after your subscription ends so you can re-subscribe or export it, after which we may delete it — this matches our Terms of Service. You can request deletion of your data at any time by contacting us.

8. Third Parties

We use the following third-party services:

  • Google Firebase - data storage and website hosting
  • Google Analytics 4 - anonymised website usage analytics
  • Stripe - payment processing for subscriptions. When you subscribe, your payment and card details are collected and processed by Stripe as our payment processor. See Stripe's privacy policy.

We do not sell or rent your personal information. We share it only with the service providers listed above, and only to the extent needed to provide our service — for example, your payment details are shared with Stripe to process your subscription. We do not share your personal information with any other third parties for their own purposes.

Some of these providers may store or process your personal information outside Australia. In particular, Stripe (payment processing) and Google (analytics, and hosting where an Australian region is unavailable) may handle your information overseas, including in the United States. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled in a way consistent with the Australian Privacy Principles.

9. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us:

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.