This policy explains what personal information I collect, why, who else can see it, and what you can do about it. It is written to be read, not to be skimmed past.
1. Who is responsible
Safe to Ship is operated by Mitchell Cross, ABN 13 220 178 522, in Victoria, Australia. In data protection terms I am the controller of the personal information described here.
Contact for anything in this policy: hello@safetoship.com.au.
2. What I collect, and why
| What | When | Why |
|---|---|---|
| Email address | You request the free Core Edition | To send you the download, and, if you tick the box and then confirm with the button in that email, occasional notes about build safety. You can stop these at any time. |
| Email address and purchase details | You buy the pack | To deliver your download, handle support, and meet tax and record keeping obligations. Your receipt comes from my payment provider. |
| Country or region, and tax status | You buy the pack | My payment provider works out the correct tax. I do not choose or see more than the outcome of this. |
| Anything you write to me | You email me | To answer you. Emails are kept while they are useful for support and then deleted. |
| Technical information | You visit the site | Your IP address, browser type and the page or file you asked for. My host needs these to deliver the site and to block abuse, such as too many requests from one address. I do not use them to identify you or build a profile of you. |
What I do not collect
- No card details. Payments are handled entirely by my payment provider. Your card number never reaches me and I never see it.
- No analytics or tracking. This site loads no analytics, no advertising pixels, no session recording and no third party scripts of any kind.
- No tracking cookies. See section 6.
- Nothing from inside your build. The pack runs entirely inside your own AI assistant, on your own machine or account. Your code, your findings and your report never come to me. I have no way to see them and no interest in them.
3. The legal basis for using it
For people in Australia, I handle personal information under the Privacy Act 1988 and the Australian Privacy Principles, and I only collect what is reasonably necessary.
For people in the UK or the European Economic Area, the lawful bases are:
- Contract. Delivering something you bought, and supporting it.
- Consent. Sending you the free edition, and the occasional notes if you ticked the box for them and confirmed. You can withdraw this at any time.
- Legal obligation. Keeping tax and transaction records.
- Legitimate interests. Keeping the service working and preventing fraud and abuse, where that does not override your rights.
4. Who else can see it
I use a small number of providers to run this. Each one only receives what it needs to do its job. Resend and Cloudflare handle your information only to provide their service to me.
Stripe and Link work differently. Link, a Stripe company, is the merchant of record for your purchase (your receipt says Sold through Link) and sends your receipt, so Stripe and Link also use your payment details under their own privacy policies, for example to take the payment, work out and collect tax, prevent fraud and meet their legal obligations.
| Provider | Handles | Where |
|---|---|---|
| Stripe and Link (a Stripe company) | Payment, your receipt, tax, refunds and fraud checks | United States and other countries |
| Resend | Sending your download link, and the notes if you asked for them | United States |
| Cloudflare | Serving this website and the file you download | Global network, including Australia |
I never sell your personal information, and I never share it for anyone else's marketing.
The only other circumstance in which I would disclose it is where the law requires it, or where it is genuinely necessary to establish or defend a legal claim.
Information going overseas
Because of the providers above, your information is stored and processed outside Australia, including in the United States. By using this site you acknowledge that. Where a provider is outside Australia or the EEA, I rely on that provider's own contractual data protection commitments, including standard contractual clauses where they apply. Overseas recipients may be subject to laws that differ from Australian or European law, and Australian Privacy Principle 8 protections may not apply in the same way once information is overseas.
5. Marketing emails
If you tick the box for them when you ask for the free edition, and then press the confirm button in that email, I will also send occasional notes about build safety. Nothing is sent until you confirm. Every one has a working unsubscribe link, and one click is enough. I do not need a reason and I will not ask for one.
This is consent based, as the Spam Act 2003 requires. Transactional messages, such as your download link, your receipt or a reply to your support email, are not marketing and will still be sent.
6. Cookies
This site sets no tracking cookies and no advertising cookies. There is no consent banner because there is nothing to consent to.
When you go to the checkout, my payment provider will set cookies that are strictly necessary for the payment to work and to prevent fraud. That happens on their page, under their own privacy policy, and I do not control it.
7. How long I keep it
- Email subscribers. Until you unsubscribe, and then removed from the active list.
- Purchase records. Seven years, because Australian tax law requires it.
- Support emails. While they are useful for supporting you, then deleted.
- Your download link. It keeps working, so you can download the pack again from your email later. It carries an order reference, not your name or email address. If you want it switched off, email me.
- Technical information. Held by Cloudflare under its own rules. I do not keep it, and my site's own error logs never hold your full email address.
8. Keeping it safe
I take reasonable steps to protect personal information. Access is limited to me, and my accounts with the providers above carry multi-factor authentication. The site's keys are stored encrypted with my host, never in the site's code, and the payment key can only look up orders, not change or refund them. The site loads no third party code, which removes an entire class of risk.
No system is completely secure, and I will not pretend otherwise. If a data breach occurs that is likely to cause you serious harm, I will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
9. Your rights
Wherever you are, you can ask me to:
- Show you the personal information I hold about you.
- Correct it if it is wrong.
- Delete it, unless I am legally required to keep it, such as tax records.
- Stop marketing to you, which you can also do yourself with the unsubscribe link.
If the UK or EU rules apply to you, you also have the right to restrict or object to processing, to receive your information in a portable format, and to withdraw consent at any time without that affecting anything done before you withdrew it.
Email hello@safetoship.com.au and I will respond within 30 days. There is no charge.
10. Complaints
If you think I have mishandled your personal information, tell me first at hello@safetoship.com.au and I will try to resolve it.
If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the UK or the EEA, you may complain to your local supervisory authority instead.
11. Children
This is a product for people who build software commercially. It is not directed at children and I do not knowingly collect information from anyone under 16. If you believe a child has given me their information, email me and I will delete it.
12. Changes
If I change this policy I will update the date at the top. If a change materially affects how your information is used, I will email anyone on the list before it takes effect.
13. Contact
Mitchell Cross trading as Safe to Ship, ABN 13 220 178 522
hello@safetoship.com.au