What data we process, for what purpose, how long we keep it, and how you can exercise your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Parcela — land and site intelligence platform. Contact: privacy@parcela.site. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Account data: email address, anonymous identifier (cookie), hashed API key.
Technical data: IP address, user agent, timestamps of API calls, response codes, response times.
Site data: site identifiers (address / Lot-DP), analysis results, DD PDFs. Site identifiers alone are not personal information; linked to an account email they may be indirectly identifiable.
We do NOT collect: payment details (handled directly by Stripe), title extracts or other documents you upload (you control their retention).
Service delivery: API processing, report generation, account management.
Billing and volume control: usage recording for rate limits and invoicing.
Service-initiated communication: planning-alert notifications for tracked sites.
Marketing: ONLY with consent. You may opt out at any time.
Security and improvement: platform security, abuse detection, aggregated statistics. We collect only the personal information reasonably necessary for these functions (APP 3).
Account data: until deletion + 30 days grace.
API usage logs: 30 days operational, 13 months for billing records.
DD reports: SHA-256 stamped, kept while the account is active; individually deletable.
Server logs (Vercel, Supabase): 14 days default, longer only for security incidents.
User-uploaded data (photos, extracts): you control retention; account deletion removes all linked objects. We destroy or de-identify personal information we no longer need (APP 11.2).
Infrastructure providers (processors): Supabase (PostgreSQL + Storage), Vercel (hosting), Resend (transactional email), DeepSeek / Anthropic / OpenAI (generative AI — anonymised inputs, no personal information in prompts).
We do NOT sell personal information. We do NOT share data with data brokers. Customer data is NOT used to train AI models without explicit consent.
Some of our infrastructure and sub-processors are located overseas (including the European Economic Area and the United States). Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles (APP 8).
Enterprise customers may request a data-residency review — certain features (e.g. the AI narrative) can be disabled if overseas transfer is unacceptable.
You have the right to request access to the personal information we hold about you (APP 12) and to request its correction (APP 13).
We respond to requests at privacy@parcela.site within a reasonable time. If we decline a request we will give you written reasons and information about how to complain.
If you are not satisfied with our handling of your personal information, you may complain to us first and then, if unresolved, to the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au.
Changes will be announced 30 days in advance via email to the account address. Previous versions are available on request at privacy@parcela.site.
For access, correction, or other privacy requests, please contact us at the address below. We respond within a reasonable time consistent with the Australian Privacy Principles.
privacy@parcela.site