Privacy Policy

Last updated 17 October 2026

Who we are

slipstreamX is run by Slipstream Software ("we", "us"), a small software business run by a sole trader in Sydney, New South Wales. You can reach us at hello@slipstreamx.dev.

As a small business we may not be legally required to follow the Privacy Act 1988 (Cth). We choose to handle your personal information in line with the Australian Privacy Principles anyway, and this policy explains how.

What we collect

• What you send us. Your name, email address and anything you write about your work, your business or what you're building, including anything you tick in our message form and, if you choose to share it, your budget. If you send files or screenshots, we collect those too.
• Information about your customers or staff, if it's in what you send us or in a system we build for you. We only use it to do the work you've asked for.
• Billing details if you become a customer: your name, business name, ABN and invoice history. If you buy online, Stripe tells us your name, email address, phone number, billing address and what you bought. We never see or store card numbers: you type them on Stripe's own page, not ours.
• Published business contact details. If we email your business, the name and business email address it publishes. If you unsubscribe, we keep that address on our do-not-contact list, stored by Cloudflare, so we never email it again.
• Basic technical information. Like every website, ours receives your IP address, browser type and the page you asked for when you visit. We don't use this to identify you.
• What you press on this website. Which buttons and links you press, which parts of the page you scroll to, and when, along with your country, whether you're on a phone or computer, and the website that sent you. It's tied to a random code made when the page loads, not to you. We don't record your IP address or anything you type.

You don't have to give us your real name to ask a question, and you can use a pseudonym if you prefer. We'll need to know who you are before we do paid work for you.

Please don't send us passwords, bank or card details, or sensitive information such as health records unless we've specifically asked for it and agreed how to handle it.

How we collect it

Almost everything comes directly from you: through the message form on this website, by email, or in conversation. When you press Send in the form, your message is delivered straight to our email inbox. We don't keep a separate copy on the website. The technical information above is collected automatically by the services that host this website. This site doesn't set cookies or use advertising tools, and nothing is saved in your browser. The record of what you press is made by a small piece of code on the page and stored by Cloudflare. Each visit gets a new random code, so we can't tell when you come back. If your browser sends a "do not track" or Global Privacy Control signal, nothing is recorded.

If you send us a message through the form, the record of what you pressed during that visit is attached to it, so we can see what you looked at before writing to us.

How we use it

• To reply to your enquiry and understand the work you do.
• To prepare a plan and price, and if you go ahead, to build, run and support what we've agreed.
• To send invoices and keep the records the law requires.
• To keep our website and systems secure and working.
• To see which parts of this website are useful and which aren't, so we can improve it.

Now and then we email a business we think we could help, at an address it publishes for business enquiries. Each email is written and sent by a person, says who we are, and explains how to stop: reply "no", or use slipstreamx.dev/unsubscribe. We stop the same day, and keep the address on a do-not-contact list so it stays that way. Otherwise we only email you about your enquiry or your work, and if you ask us to stop, we will.

We don't make decisions about you automatically. If a system we build for you makes automatic decisions about other people, we'll tell you so you can explain it to them.

Who we share it with

We never sell your information. We share it only with the services we need to run the business, and only as much as they need:

• Cloudflare hosts this website, stores the record of what's pressed on it, delivers messages sent through our form, and receives our email before forwarding it. It runs a global network and is based in the United States.
• Stripe takes payments when you buy a template or the base online. You enter your card details on Stripe's own checkout page, and Stripe keeps them, along with your name, email, phone, address and payment history, to charge you and send receipts. Stripe is based in the United States and Ireland, and stores data in the United States. See Stripe's privacy policy.
• Google stores our email (Gmail) and serves the fonts on this website, which means your browser shares your IP address with Google when a page loads. Google is based in the United States.
• Hosting and other providers for systems we build for you. We'll name them, and say where they store data, in the written plan before any of your information goes into them. Where we can, we choose Australian data centres.
• Our accountant or tax adviser, for billing records.
• Government or regulators, only where the law requires it.

Because of the services above, your information is likely to be stored or processed in the United States, and may pass through other countries on Cloudflare's network. We use large, established providers with strong security.

How we keep it safe

We use accounts protected by strong passwords and two-factor authentication, keep access to the people who need it, and design the systems we build so that each customer's information is kept separate from everyone else's.

If a data breach is likely to cause you serious harm, we'll tell you as soon as we can and tell you what we're doing about it. Where the Notifiable Data Breaches scheme applies, we'll also notify the Office of the Australian Information Commissioner.

How long we keep it

• Enquiries that don't go ahead: deleted within 12 months of our last contact.
• The record of what's pressed on this website: deleted automatically after 6 months.
• Billing and tax records: kept for 5 years, as Australian tax law requires.
• Information in a template or base you bought online: kept while your plan runs, available to download until it ends, then deleted for good 90 days after it ends (including the logins). Payment records stay with Stripe, as the law requires.
• Information in a system we build for you: kept while we provide the service, then returned to you or deleted as agreed in writing.

Seeing or correcting your information

You can ask for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing hello@slipstreamx.dev. It's free. We may need to confirm who you are first, and we'll respond within 30 days. If we can't do what you've asked, for example because the law requires us to keep a record, we'll explain why.

Complaints

If you think we've mishandled your information, email us first and we'll respond within 30 days. If you're not satisfied with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

If we change this policy, we'll update it here with a new date. If a change affects how we use information you've already given us, we'll let you know before it takes effect.