OPTIONS — LEGALDUCTPARTS.AU · REDWORX AU PTY LTDPRIVACY POLICY×

Privacy Policy — ductparts.au

Last updated: 8 October 2026

1. Who We Are

ductparts.au is owned and operated by Redworx AU Pty Ltd (ABN 33 681 668 860), 470 St Kilda Road, Melbourne VIC 3004, Australia ("Redworx AU", "we", "us"). This Privacy Policy explains what personal information we collect through the ductparts.au Service, why, and how we protect it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our approach is simple: we collect the minimum needed to run your account, we never sell or share it, and you stay in control of it.

2. What We Collect

2.1. Personal information. The only personal information we hold is:

  • your name;
  • your email address, which is also your username for signing in;
  • your company or organisation name; and
  • an optional profile picture, if you choose to add one.

We do not collect dates of birth, government identifiers, home addresses, phone numbers, location tracking data or any sensitive information.

2.2. Payment details. How you pay depends on where you subscribe. Either way, your card or account payment details never reach and are never stored by Redworx AU.

  • On the ductparts.au website, payments are processed by Stripe. Your card number, expiry and security code are entered directly with Stripe. We keep your Stripe customer reference, your subscription status and renewal date, and records of the invoices issued to you.
  • In the ductparts.au mobile app, subscriptions are sold and billed by Apple (App Store) or Google (Google Play), using the payment method in your Apple or Google account. Our subscription provider, RevenueCat, receives your ductparts.au account identifier and your purchase records from the store, and tells us which plan you bought, from which store, and when it renews or ends. We keep that, together with the record of each purchase event RevenueCat sends us (the product, the store, transaction identifiers, price, currency and country), so your plan can always be checked against the store's own record. These records are kept with your account; when it is erased (5.1, 5.4) they are deleted, or kept only with nothing that identifies you where they also concern another account.

2.3. Project data. The projects, part registers, notes, MAJ files and site photos you create or upload are your business data. We store them only so the Service can show them to you and the people you invite to your projects. Project details such as a site address or a contact name are entered by you and are visible only to members of that project.

2.4. Technical data. Our hosting providers keep standard server logs (such as IP address, browser type and time of request) for security and troubleshooting. We do not use this data to profile you.

2.5. Website usage statistics. The ductparts.au website uses Vercel Web Analytics to count page views, so we can see which pages are used. It records the page address (with any private share or invitation link removed), the referring page, and your browser, device type and country. It sets no cookies, does not identify you, is not linked to your account, and does not follow you to other websites. The ductparts.au mobile app contains no analytics.

3. How We Use Information

We use the information above only to:

  • create and secure your account and let you sign in;
  • provide the Service, including sharing a project with the members you invite;
  • manage your subscription and, for subscriptions bought on the website, send invoices;
  • respond to support requests, including MAJ library mapping assistance you ask for; and
  • meet our legal obligations.

We do not use your information for advertising, and we do not sell, rent or trade it.

4. Security and Encryption

4.1. The Service is hosted on Supabase (database, authentication and file storage) and Vercel (web hosting). All data is encrypted in transit using TLS and at rest using AES-256 encryption.

4.2. Access to your data is restricted by account: database access rules ensure that only you and members of your projects can read your project data. Redworx AU staff access data only when needed to provide support you have requested, or to meet a legal obligation.

4.3. Passwords are never stored in readable form; they are held only as secure one-way hashes by our authentication provider.

4.4. No system can be guaranteed completely secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

5. Retention and Deletion

5.1. We keep your personal information and project data while your account is open. When you close your account (5.2), we can restore it for 30 days if you change your mind. After those 30 days it is erased automatically: your name, email address, company name, profile picture and logo, the projects that were yours alone and their files, and your App Store or Google Play purchase records are permanently deleted or stripped of anything that identifies you, and your email address is removed from the history and contact details of projects you shared. Work you contributed to a shared project — its parts, imports and history — stays with that project, shown as by "Deleted user".

5.2. You can delete a project at any time. You can also close your account yourself in the ductparts.au mobile app, under Profile → Delete account, or ask us to close it without the app as described on our Delete your account page. Closing your account signs you out, stops the account from being used to sign in again, cancels a subscription bought on the ductparts.au website so it does not renew (if that cannot be completed at the time, the app tells you, and we cancel it when you email help@ductparts.au), and deletes projects where you are the only member. Projects you share with others stay with their other members.

5.3. A subscription bought in the mobile app is billed by Apple or Google, and closing your account does not cancel it. Cancel it in your App Store or Google Play subscription settings, or it will keep renewing.

5.4. To have your personal information and project data permanently erased, whether or not you have closed your account, email help@ductparts.au and we will do so within 30 days.

5.5. The only records we keep after erasure are invoice and payment records, which Australian tax law requires us to retain for five years. Encrypted backups are overwritten on our providers' normal backup cycle.

6. Disclosure

6.1. Redworx AU does not sell, share or disclose your personal information or project data to competing companies, fabricators or any other organisation for their own benefit.

6.2. We never show your project data or account details to any other customer of ductparts.au.

6.3. We share data only with the service providers that run the Service on our behalf — Supabase (database, authentication and storage), Vercel (hosting and the usage statistics in 2.5), Stripe (website payments), RevenueCat (managing subscriptions bought in the mobile app), Apple and Google (selling and billing those subscriptions through the App Store and Google Play, as described in 2.2), Google (site maps and address search) and our email delivery provider (account and invitation emails) — and only as far as each needs to perform that service. Each is bound by its own privacy and security obligations, and we use only providers that protect your data to the same or an equal standard as this Policy.

6.4. We may disclose information where required by Australian law, or to a successor entity if Redworx AU Pty Ltd is sold or restructured, provided that entity is bound by equivalent privacy obligations.

6.5. Some of these providers store data on servers outside Australia. Where that happens, we take reasonable steps to ensure the data is handled in a way consistent with the APPs.

7. Cookies and Similar Technologies

7.1. ductparts.au uses only the cookies it needs to work:

  • Authentication cookies keep you signed in securely. They are strictly necessary and are removed when you sign out or the session expires.
  • Preference storage in your browser remembers settings such as light or dark theme. It stays on your device and is not sent to us.

7.2. We do not use advertising cookies, tracking pixels or cookie-based analytics, and we do not track you across other websites. The only usage statistics we collect are the cookie-free page counts described in 2.5.

7.3. Project site maps are displayed using Google Maps, and site address suggestions come from Google Places: the text you type into a site address field is sent to Google to find matching addresses. When a map loads, Google may set its own cookies. Google handles this data under the Google Privacy Policy.

7.4. You can block or delete cookies in your browser settings, but signing in requires the authentication cookies.

8. MAJ Library Data

MAJ files and part name mappings you import are treated as your project data under this Policy. Redworx AU does not use your imported library data to modify, supplement or improve the library available to other users.

9. Your Rights

You may ask to access, correct or erase the personal information we hold about you by emailing help@ductparts.au. We will respond within 30 days.

If you believe we have breached the APPs, please contact us first so we can put it right. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to active account holders by email before they take effect.

11. Contact

  • Privacy enquiries and data requests: help@ductparts.au
  • Company: Redworx AU Pty Ltd (ABN 33 681 668 860), 470 St Kilda Road, Melbourne VIC 3004, Australia