Deedbox privacy policy
Last updated: 29 October 2026
Deedbox is run by Sarah Shelley, trading as Deedbox (ABN 62 388 917 764), Adelaide, South Australia ("we", "us"). This policy explains what personal information we collect, why, and what we do with it. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
When you check a website
- The web address you ask Deedbox to check, and your answers to its questions.
When you create an account
- Your email address and a securely stored password (we never see it in plain text).
- Your passports: the websites you've added, check results, renewal dates, notes, and your change history.
- Your preferences, such as reminder timing and alert settings.
- Anything you choose to add about other people, such as who can access a website. Please only add details of other people if they're happy for you to.
When you pay
- Your plan, billing history and the last four digits and expiry of your card, as provided by Stripe. Stripe handles your full card details; we never see or store them.
When you use the website
- Basic technical information, such as your browser type and internet address, which our hosting provider records in standard server logs.
- Your browser stores small amounts of information, such as your theme choice and a sign-in session, so Deedbox works properly.
- We use Google Analytics, which sets cookies, to understand how people find and use Deedbox, such as how many checks are run and which pages lead to sign-ups. We don't send your name, email address or the websites you check to Google Analytics, and we don't use advertising cookies. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.
Checking public records
To check a website, Deedbox sends the web address (never your name or email) to public lookup services: rdap.org for domain registration details, Google Public DNS and Cloudflare DNS for DNS and email settings, and crt.sh for security certificates.
Why we use it
- To create your passport, run automatic checks and send the alerts and reminders you've asked for.
- To manage your account, plan and payments.
- To reply to your questions and tell you about important changes to Deedbox or these terms.
- To understand how Deedbox is used and improve it.
We won't sell your information or use it for advertising. We'll only send marketing emails if you've agreed, and every one has an unsubscribe link.
Who else handles it
We use a small number of service providers to run Deedbox:
| Provider | What it does |
|---|---|
| Supabase | Stores accounts, passports and history, and runs automatic checks |
| Stripe | Processes payments and manages subscriptions |
| Resend | Sends alert, reminder and account emails |
| Google Analytics | Measures visits and how Deedbox is used, without names or email addresses |
| Our website host | Hosts deedbox.net.au and keeps standard server logs |
Some of these providers store or process information outside Australia, including in the United States. We choose providers with strong security practices and only share what they need to do their job.
How long we keep it
- Your account information and passports are kept while your account is open.
- Change history is kept for 12 months on the Owner plan and for as long as your account is open on the Studio plan.
- When you delete your account, we delete your passports and personal details within 30 days.
- We keep billing records for 5 years, as Australian tax law requires.
Keeping it safe
Information is sent over encrypted connections, and each account can only read its own data. Access to stored information is limited to Sarah Shelley.
Your choices and rights
You can see and change most of your information in Deedbox, and delete your account from Account at any time. You can also ask us to give you, correct or delete the personal information we hold about you.
Contact and complaints
For privacy questions or requests, email hello@deedbox.net.au. We'll reply within 30 days. If you're not happy with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We may update this policy. If a change materially affects you, we'll email you before it applies. The date at the top shows when it last changed.