OPTIONS — LEGALDUCTPARTS.AU · REDWORX AU PTY LTDPRIVACY POLICY×

Privacy Policy — ductparts.au

Last updated: 26 September 2026

1. Who We Are

ductparts.au is owned and operated by Redworx AU Pty Ltd (ABN 33 681 668 860), 470 St Kilda Road, Melbourne VIC 3004, Australia ("Redworx AU", "we", "us"). This Privacy Policy explains what personal information we collect through the ductparts.au Service, why, and how we protect it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our approach is simple: we collect the minimum needed to run your account, we never sell or share it, and you stay in control of it.

2. What We Collect

2.1. Personal information. The only personal information we hold is:

  • your name;
  • your email address, which is also your username for signing in;
  • your company or organisation name; and
  • an optional profile picture, if you choose to add one.

We do not collect dates of birth, government identifiers, home addresses, phone numbers, location tracking data or any sensitive information.

2.2. Payment details. All payments are processed by Stripe. Your card number, expiry and security code are entered directly with Stripe and never reach or are stored by Redworx AU. We keep only what we need to manage your plan: your Stripe customer reference, your subscription status and renewal date, and records of the invoices issued to you.

2.3. Project data. The projects, part registers, notes and MAJ files you create or upload are your business data. We store them only so the Service can show them to you and the people you invite to your projects. Project details such as a site address or a contact name are entered by you and are visible only to members of that project.

2.4. Technical data. Our hosting providers keep standard server logs (such as IP address, browser type and time of request) for security and troubleshooting. We do not use this data to profile you.

3. How We Use Information

We use the information above only to:

  • create and secure your account and let you sign in;
  • provide the Service, including sharing a project with the members you invite;
  • manage your subscription and send invoices;
  • respond to support requests, including MAJ library mapping assistance you ask for; and
  • meet our legal obligations.

We do not use your information for advertising, and we do not sell, rent or trade it.

4. Security and Encryption

4.1. The Service is hosted on Supabase (database, authentication and file storage) and Vercel (web hosting). All data is encrypted in transit using TLS and at rest using AES-256 encryption.

4.2. Access to your data is restricted by account: database access rules ensure that only you and members of your projects can read your project data. Redworx AU staff access data only when needed to provide support you have requested, or to meet a legal obligation.

4.3. Passwords are never stored in readable form; they are held only as secure one-way hashes by our authentication provider.

4.4. No system can be guaranteed completely secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

5. Retention and Deletion

5.1. We keep your personal information and project data only while your account is active.

5.2. You can delete a project, or close your account, at any time. To have your personal information and project data permanently erased, email help@ductparts.au and we will do so within 30 days.

5.3. The only records we keep after erasure are invoice and payment records, which Australian tax law requires us to retain for five years. Encrypted backups are overwritten on our providers' normal backup cycle.

6. Disclosure

6.1. Redworx AU does not sell, share or disclose your personal information or project data to competing companies, fabricators or any other organisation for their own benefit.

6.2. We never show your project data or account details to any other customer of ductparts.au.

6.3. We share data only with the service providers that run the Service on our behalf — Supabase (database, authentication and storage), Vercel (hosting), Stripe (payments) and our email delivery provider (account and invitation emails) — and only as far as each needs to perform that service. Each is bound by its own privacy and security obligations.

6.4. We may disclose information where required by Australian law, or to a successor entity if Redworx AU Pty Ltd is sold or restructured, provided that entity is bound by equivalent privacy obligations.

6.5. Some of these providers store data on servers outside Australia. Where that happens, we take reasonable steps to ensure the data is handled in a way consistent with the APPs.

7. Cookies and Similar Technologies

7.1. ductparts.au uses only the cookies it needs to work:

  • Authentication cookies keep you signed in securely. They are strictly necessary and are removed when you sign out or the session expires.
  • Preference storage in your browser remembers settings such as light or dark theme. It stays on your device and is not sent to us.

7.2. We do not use advertising cookies, tracking pixels or third-party analytics, and we do not track you across other websites.

7.3. Project site maps are displayed using Google Maps. When a map loads, Google may set its own cookies under the Google Privacy Policy.

7.4. You can block or delete cookies in your browser settings, but signing in requires the authentication cookies.

8. MAJ Library Data

MAJ files and part name mappings you import are treated as your project data under this Policy. Redworx AU does not use your imported library data to modify, supplement or improve the library available to other users.

9. Your Rights

You may ask to access, correct or erase the personal information we hold about you by emailing help@ductparts.au. We will respond within 30 days.

If you believe we have breached the APPs, please contact us first so we can put it right. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to active account holders by email before they take effect.

11. Contact

  • Privacy enquiries and data requests: help@ductparts.au
  • Company: Redworx AU Pty Ltd (ABN 33 681 668 860), 470 St Kilda Road, Melbourne VIC 3004, Australia