Privacy Policy
We Simplify Complexity Pty Ltd ("WSC", "we", "us") operates Bularu. This policy explains what personal information we collect, why, and your rights under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
1. Information we collect
- Account information: name, email address, business/shop name, password (stored as a bcrypt hash — we never see your actual password).
- Business data: products, stock levels, sales, ingredients, channels, packaging items, and other inventory data you enter. This data belongs to you.
- Usage data: which features you use, login timestamps, IP addresses (for security — brute-force protection and audit logging). We do not use third-party analytics trackers.
- Payment information: handled directly by Stripe. We do not store card numbers. We receive a subscription status from Stripe.
2. How we use your information
- To provide the Bularu service
- To send transactional emails (trial expiry, password reset, receipts)
- To detect and prevent abuse and security incidents
- To improve the product based on usage patterns (aggregate, never individual)
3. Data storage and security
Your data is stored in a MySQL database on servers located in Australia. We use HTTPS for all connections, bcrypt password hashing, prepared SQL statements (no injection), CSRF tokens, and session security. Audit logs track significant actions (logins, data changes).
4. Sharing your data
We do not sell your data. We share information only with:
- Stripe — payment processing
- SendGrid / Mailgun — transactional email delivery
- Your hosting provider — if self-hosted, your data stays on your own server
5. Data retention
Your data is retained for as long as your account is active. If you cancel, data is kept for 90 days then permanently deleted. You can export all your data at any time from Account Export my data.
6. Your rights (Australian Privacy Principles)
- Access: you can export all your data from Account settings at any time
- Correction: update your name/email in Account settings
- Deletion: request account deletion via Account settings or by emailing privacy@wesimplifycomplexity.com.au
- Complaint: contact the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we've breached your privacy
7. Cookies
We use only session cookies to keep you logged in. We do not use advertising, analytics, or tracking cookies. No third-party cookies are set by this application.
8. Contact
Privacy enquiries: privacy@wesimplifycomplexity.com.au
We Simplify Complexity Pty Ltd · Australia