PRIVACY POLICY
The boring bit. Still important.
The Wood Mouse, based in Brisbane, Australia, runs The Cake Tick Board. As a small business we may be exempt from the Privacy Act 1988, but we choose to follow the Australian Privacy Principles. Contact: support@caketicks.com.
01. What we collect and why
- Account details: name, email, hashed password, your boards and roles. If you sign in with Google or GitHub, we get your name and email from them. We use these to run your account.
- Content your team adds to boards. We use it to provide the Service.
- Billing details: Stripe handles your card. We only see the payment status and limited card details, such as the last 4 digits. We use these to bill you and to keep tax records.
- Technical data: IP address, device and browser details, and logs. We use these for security and to fix problems.
- Support emails you send us, so we can answer them.
We use essential cookies only, to keep you signed in. We don't sell or rent personal information. We don't host any AI and we don't make significant automated decisions about you. AI tools you connect are covered by their own providers' policies. Please don't post sensitive information, such as health information, on your board.
03. Overseas
Your information is mainly stored and processed in the United States. We choose reputable providers and rely on their data protection terms. We remain responsible for your information under the Australian Privacy Principles.
04. Security and retention
We use encryption in transit and reasonable access controls. No system is perfectly secure. If a breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC). We keep information while your account is active. When your account is deleted, we delete your personal data within a reasonable period. A board's shared data is deleted when the board is closed, not when one member's cover ends. The exception is records the law requires us to keep, such as tax records, which we keep for 5 years.
05. Emails
We send service emails such as invites, receipts and security notices. We send marketing only if you opt in, and every marketing email has an unsubscribe link.
06. Your rights
Email support@caketicks.com to access, correct or delete your information, or to get an export. There's no charge. We'll reply within 30 days and explain if we can't do something. Content in a board may be controlled by that board's owner.
07. EU and UK
We don't target the EU or UK and haven't appointed a representative. If the GDPR or UK GDPR applies to you, you also have rights to portability, objection, restriction and withdrawing consent. Our legal bases are contract, legitimate interests (security and support), consent (marketing) and legal obligation. Your data is transferred to Australia and the US. You can complain to your local data protection authority.
08. Complaints
Email us first. If you're unhappy with our answer, contact the OAIC at https://www.oaic.gov.au or on 1300 363 992.
09. Changes
We'll post updates here and email account holders before any significant change takes effect.