Privacy Policy
What we collect, why, who helps us run the site, and how to get your data deleted.
The short version
- You can use the builder without an account, and we don’t collect anything about you to do it.
- If you create an account, we keep your email address and the builds and alerts you save.
- We never see or store your card number. Payments are handled by Stripe.
- We don’t sell your information, we don’t run ads, and we don’t use tracking or analytics cookies. We count visits with a cookie-free tool that can’t identify you.
What we collect
- Account details: your email address and, if you set one, your password (stored securely by our sign-in provider; we can’t read it).
- What you save: builds, settings, price alerts, share links you create, and how many build reviews you’ve used.
- Subscription details: your plan, subscription status and renewal date, and a customer reference from Stripe. Stripe holds your card and billing details.
- Technical information: like any website, our hosting provider records basic request logs (such as IP address, browser type and pages requested) to keep the site running and secure. If a page breaks, it sends us a short error report (the page address, the error and your browser type) so we can fix it.
- Visit counts: we use Vercel Web Analytics to count page views and see which pages are popular, and roughly which country and type of device visitors use. It doesn’t use cookies, doesn’t follow you to other sites, and doesn’t tell us who you are.
- Messages you send us by email.
How we use it
To run your account, save your builds, send the price-alert emails you ask for, process your subscription, answer your questions, keep the site secure and work out how to improve it. We only email you about your account, your alerts, your subscription, or important changes to these policies. We don’t send marketing email without asking you first.
Who helps us run Rigsmith
We use these services, which process information on our behalf:
- Supabase (accounts and database, stored in Sydney, Australia).
- Stripe (payments and billing, in Australia and the United States).
- Vercel (website hosting and cookie-free visit counts, with servers in the United States and worldwide).
- Anthropic (Claude build reviews, in the United States). When you ask for a review, we send the parts in your build and your settings, not your name or email.
- An email delivery service for sign-in and alert emails.
- GitHub (stores our code, and encrypted weekly backups of our database, in the United States).
Some of these store or process information outside Australia, mainly in the United States. We choose providers with strong security and privacy commitments.
Cookies
We use only the cookies needed to keep you signed in, and your browser stores your current build so it’s there when you come back. If you click a store link, that store (for example Amazon) may set its own cookie to track the referral for affiliate commissions. That’s covered by the store’s own privacy policy.
How long we keep it
We keep your account information until you ask us to delete it. Payment and tax records are kept for five years, as Australian tax law requires. Request logs are kept for a short time by our host. Encrypted database backups are kept for 90 days, so information you delete may remain in a backup until it expires.
Your choices
- See or correct your information: most of it is on your Account, Saved builds and Price alerts pages.
- Stop alert emails: pause or delete your alerts on the Price alerts page.
- Delete your account: email cale@rigsmith.com.au from your account’s email address and we’ll delete your account and saved data within 30 days (except records we must keep for tax).
Security
The site uses HTTPS everywhere, passwords and payments are handled by specialist providers, and access to our database is restricted. No system is perfectly secure; if a data breach is likely to cause you serious harm, we’ll tell you.
Contact and complaints
Questions or concerns about your privacy: cale@rigsmith.com.au. If you’re not happy with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy we’ll update the date at the top, and email account holders about significant changes.