Privacy Policy

This policy explains how the operator of Gazelle (“Gazelle”, “we”) handles personal information, in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.

What we collect

• Account details: your name, work email and password (stored securely, never in plain text).
• Work you and your colleagues put into Gazelle, such as tasks, comments, files, requests and budgets.
• Billing details, handled by Stripe. We don’t store card numbers.
• Basic technical information, such as log records needed to keep the Service secure and working.

How we use it

To provide and support the Service, send the emails you’d expect (invitations, notifications, password resets and billing notices), keep the Service secure, and improve it. You can turn notification emails off in your workspace.

Who can see it

Your organisation’s data is only visible to people in your organisation, according to the access you give them, enforced by rules in the database itself. Agencies and freelancers only see what you share with them.

Service providers

We use trusted providers to run Gazelle. They only process data to provide their service to us:

• Supabase (database, file storage and sign-in)
• Vercel (hosting)
• Resend (email delivery)
• Stripe (payments)
• Canva (only if you choose to connect it)

Some of these providers may store or process information outside Australia. We choose providers with strong security and privacy commitments.

Keeping it safe

Data is encrypted in transit, access is limited and logged, and every organisation’s data is kept separate.

Your choices

You can ask to see, correct or delete your personal information. If you have a concern about how we’ve handled it, contact us first; you can also contact the Office of the Australian Information Commissioner (oaic.gov.au).