Privacy Policy
Effective date: 1 August 2026 (pre-launch scope above; full service scope from launch)
Pre-launch notice (current status)
KeptPosted is pre-launch. Right now, the only personal information we collect through this site is: the email address you submit to our waitlist — stored securely and used solely to contact you about KeptPosted’s launch and early access — and standard technical logs. Unsubscribe or request deletion any time by emailing hello@keptposted.com. The remainder of this policy describes how KeptPosted will handle information when the service launches, and takes effect at launch.
This policy explains what we collect, why, and your choices. We’ve written it to meet the Australian Privacy Principles, and we extend the same core rights to everyone regardless of location.
1. Who we are. Korvelora (ABN 43 238 425 197), trading as KeptPosted. Contact: hello@keptposted.com.
2. What we collect.
- Account holders (freelancers/studios): name, email, password or sign-in tokens, branding assets you upload, subscription status. Payment card details are collected and processed by Paddle (our merchant of record) — we never see or store your card number.
- Portal content: project details, files, messages, and approvals you or your clients add to portals. We process this content on your behalf, to provide the service to you.
- Your clients (portal viewers):the email address a portal is shared with, their views/approvals within the portal, and technical logs. Clients don’t create accounts or set passwords.
- Technical data: IP addresses, browser type, and usage logs, used for security, debugging, and understanding aggregate usage. We aim to keep analytics minimal and privacy-respecting.
3. Why we collect it (and lawful bases where they apply): to provide and secure the service (contract), to bill subscriptions (contract, via Paddle), to communicate service messages (contract/legitimate interests), to send product updates you can opt out of (consent — every marketing email has an unsubscribe link, per the Spam Act 2003), and to meet legal obligations.
4. Who we share it with.Only service providers needed to run KeptPosted: hosting and database infrastructure (Australia, Sydney region — currently Supabase and Cloudflare), payment processing (Paddle), and transactional email (Resend). Each processes data only to provide their service to us. We don’t sell personal information, and we don’t share portal content with anyone except the people you share a portal with. We may disclose information if the law requires it.
5. Where data lives.Service data is hosted in Australia (Sydney region); some providers (e.g. Paddle, Cloudflare) operate globally. Where data leaves Australia, we take reasonable steps to ensure it’s handled consistently with this policy.
6. Security.Encryption in transit, access controls and tenant isolation at the database level, and least-privilege access. No system is perfectly secure; if we become aware of a data breach likely to result in serious harm, we’ll notify affected people and any required regulator promptly.
7. Retention. Account and portal data is kept while your account is active. If you close your account, we delete or de-identify personal information within 60 days, except records we must keep by law (e.g. billing records). Free-tier accounts inactive for over 24 months may be deleted after email warning.
8. Your rights.You can access, correct, export, or delete your personal information — email hello@keptposted.com and we’ll respond within 30 days. Portal viewers can ask the account holder who shared the portal with them, or contact us directly. If you’re unsatisfied with our handling of a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). We don’t make automated decisions about you that have legal or similarly significant effects; if that ever changes, this policy will say so and explain how those decisions work.
9. Cookies. We use only the cookies needed to keep you signed in and the site working, plus minimal analytics if enabled. No advertising cookies.
10. Changes.We’ll post updates here and notify account holders of material changes by email.