Privacy Policy

Last updated: September 2026

1. What we collect

We collect only the minimum data needed to operate your account and licence:

• Email address — used for authentication (via Supabase), password reset, and important account notices.
• Company name — collected at registration to personalise your account.
• Device fingerprint — a hash derived from hardware identifiers, used solely to enforce the single-device licence limit. It is not linked to your identity beyond your account.
• Subscription and payment status — stored by our payment processor (Stripe). We receive a token confirming payment; we do not store card numbers.
• Licence event timestamps — when your licence was activated, last verified, and on which device, for support and audit purposes.

2. What we do not collect

TiePlan runs locally on your machine. The following data never leaves your device and we have no access to it:

• CSV drill data or any blast geometry
• Hole configurations, delay sequences, or charge parameters
• Timing plans, charge plans, or any generated documents
• Stope names, site names, or ring identifiers
• Settings you configure in the app (logo, language, branding)

3. Authentication (Supabase)

Account creation and sign-in are handled by Supabase, a third-party authentication provider. Supabase stores your email and a hashed password on servers in the region selected at project creation. Their privacy policy is available at supabase.com/privacy.

4. Payments (Stripe)

Subscription billing is handled by Stripe. Stripe collects and stores your payment card details; TiePlan only receives confirmation of payment status. Stripe’s privacy policy is at stripe.com/privacy.

5. Cookies and local storage

TiePlan uses browser localStorage to cache your session token on the local machine. This token is read only by TiePlan on the same device and is never transmitted to third parties. We do not use advertising cookies or third-party tracking pixels.

6. Data retention

Your account data is retained for as long as your account is active. If you delete your account, your email, company name, and device fingerprint are deleted within 30 days. Stripe retains payment records as required by applicable financial regulations.

7. Your rights (GDPR / Australian Privacy Act)

You have the right to request access to, correction of, or deletion of the personal data we hold about you. Email [email protected] with the subject “Privacy request” and we will respond within 30 days.

8. Changes to this policy

If we make material changes, we will notify you by email before they take effect. Continued use of TiePlan after that date constitutes acceptance.

9. Contact

Privacy questions: [email protected]