Privacy Policy

Specbook Orange is a product operated by BFN 21 Pty Ltd (ABN 70 690 985 641, ACN 690 985 641) ("we", "us", "our"). This Privacy Policy explains how we handle personal information across our marketing website (www.specbookorange.com), our application (app.specbookorange.com) and our mobile apps for iPhone and Android, together the "Service".

It applies to visitors, account holders and the guests you invite. For any privacy question, or to make a request about your information, contact us at squeeze@specbookorange.com.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, where they apply to you, the GDPR/UK GDPR and the CCPA/CPRA.

Account information: your name, email address, workspace name, a hashed password and, where you provide them, your phone number and postal address.

Content you create: the products, specifications, projects, rooms, boards, quotes, purchase orders, budgets, invoices and files you add to your workspace. This content may include personal information about your own clients, suppliers and team members.

Billing information: your plan and billing details. Card payments are processed by our third-party payment processor; we do not see or store full card numbers.

Communications: messages you send us, including contact-form enquiries and support requests.

Usage and device information: log data, IP address, browser and device type and, with your consent, analytics events. See our Cookie Policy for detail.

We use personal information to: provide, operate, secure, maintain and improve the Service; create and authenticate your account and keep it secure; process payments and manage subscriptions; respond to your enquiries and provide support; send you service and account messages (for example, security, billing and important changes); and comply with our legal obligations and enforce our terms.

With your consent where required, we may send product updates or marketing, which you can opt out of at any time. We do not sell your personal information.

Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you; your consent (for example, analytics cookies and marketing emails); our legitimate interests in operating, securing and improving the Service; and compliance with legal obligations. Where we rely on consent, you can withdraw it at any time.

When you add clients, contacts, suppliers or team members to your workspace, you are the controller of that personal information and we act as your processor, handling it on your instructions to provide the Service. If you require a data processing agreement, contact us at squeeze@specbookorange.com.

You are responsible for ensuring you have a lawful basis to provide that information to us and to use the Service in relation to it.

The Specbook Orange app for iPhone and Android signs in to your existing account and shows the same workspace content as the web application. This policy applies to it in the same way.

Camera and photos: the app uses your camera or photo library only when you choose to add a product photo, and uploads only the photo you choose, to your workspace.

On your device: so it can work without a signal, the app keeps the workspace content you have opened, and photos you have captured but not yet sent, in the app’s own storage on your phone. Your sign-in is kept in the device’s secure keychain. Signing out deletes all of it from the phone.

Crash reports: if the app hits an error, it sends us a report so we can fix it: the error and where in the app it happened, the app version, and the phone’s operating system and version, linked to your account and workspace. It is kept on the phone until it can be sent, and used only to find and fix faults.

Notifications: if you turn them on, the app gives us the address your phone’s notification service (Apple or Google, through our provider Expo) uses to reach the app, so we can tell you when a client answers or comments. It is used for nothing else; turning notifications off stops them, and signing out removes it.

The app does not use advertising identifiers, does not track you across other companies’ apps or websites, and contains no advertising or third-party analytics.

We share personal information with trusted providers who help us run the Service, only as needed and under contract:

Amazon Web Services - cloud hosting and storage, and email delivery (Amazon SES).

A third-party payment processor - to process card payments and manage subscriptions.

Google - website analytics (Google Analytics), loaded only with your consent.

Expo (650 Industries) - delivers updates to the mobile app; an update check sends the app version and the device platform.

A third-party AI provider - to power the optional AI features: filling in product, company and contact details from a page or text you submit, drafting text such as product descriptions and client emails, matching the columns of a schedule you import, and answering questions in the in-app help. Only the content you submit to that feature is sent.

We may also disclose personal information where required by law, to protect our rights or the safety of others, or in connection with a business sale or reorganisation. We will never sell it.

We and our providers may store and process personal information in Australia and in other locations where our providers operate. Where personal information is transferred across borders, we take reasonable steps to ensure it is handled consistently with this policy and applicable law.

We keep personal information for as long as your account is active and as needed to provide the Service, and afterwards only as required to meet legal, tax, accounting or reporting obligations or to resolve disputes. You can ask us to delete your information as described below.

We use technical and organisational measures to protect personal information, including encryption in transit, hashed passwords and access controls. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant regulator of an eligible data breach as required by law.

Depending on where you live, you may have the right to access, correct, update, delete, export or restrict the processing of your personal information, to object to certain processing, and to withdraw consent. Australian users have rights under the Australian Privacy Principles; EU/UK users under the GDPR/UK GDPR; US residents under applicable state privacy laws, including California’s CCPA/CPRA, including the right not to be discriminated against for exercising them.

To make a request, email squeeze@specbookorange.com. We will verify your request and respond within the time required by law. Where you are a guest, or your information sits inside a customer’s workspace, we may refer your request to that customer as the controller.

You can opt out of marketing emails at any time using the unsubscribe link or by contacting us. We will still send you necessary service and account messages.

We use cookies and similar technologies as described in our Cookie Policy. Analytics cookies load only after you consent.

The Service is intended for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. We will post the updated version here and change the "last updated" date; where changes are significant we will take reasonable steps to notify you.

Questions, requests or complaints: BFN 21 Pty Ltd (ABN 70 690 985 641, ACN 690 985 641), squeeze@specbookorange.com. If you are in Australia and are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). EU/UK users may lodge a complaint with their local supervisory authority.