Privacy Policy

Last Updated: 3 November 2025

Carter Imports Pty Ltd (ABN 11 642 784 263) trading as Briefpa ("we", "our", or "us") operates the Briefpa secure digital delivery platform at https://briefpa.app.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service. We are committed to protecting your privacy and handling your data in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

1.Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Full name
  • Email address
  • Password (encrypted)
  • Account preferences and settings

1.2 Payment Information

For paid subscriptions, we collect payment details through our payment processor, Stripe. We do not store your full credit card details on our servers. Stripe processes and secures your payment information in accordance with PCI DSS standards.

1.3 Delivery Content

When you create a delivery, we temporarily store:

  • Uploaded files (encrypted)
  • Recipient email addresses
  • Custom messages
  • Delivery settings and expiry preferences

Note: All delivery content is encrypted at rest and automatically destroyed after the specified expiry period or upon recipient access if configured to self-destruct.

1.4 Usage Data

We automatically collect:

  • IP addresses and device information
  • Browser type and version
  • Access times and delivery access logs
  • Referral sources
  • Usage patterns and feature interactions

2.How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Briefpa service
  • Process and deliver secure file transmissions
  • Manage your account and subscriptions
  • Process payments and send billing notifications
  • Send transactional emails (delivery notifications, receipts, security alerts)
  • Monitor and log delivery access for security and verification purposes
  • Prevent fraud, abuse, and unauthorised access
  • Comply with legal obligations
  • Respond to support enquiries

We do not use your delivery content for marketing, analytics, or any purpose beyond facilitating secure transmission to your intended recipients.

3.Data Storage and Security

3.1 Encryption

All delivery content is encrypted using industry-standard AES-256 encryption. Files are encrypted at rest and transmitted over HTTPS. Encryption keys are managed securely and separately from the encrypted data.

3.2 Automatic Destruction

Delivery content is automatically destroyed:

  • After the specified expiry period (default: 7 days)
  • Immediately after recipient access (if self-destruct is enabled)
  • Upon manual deletion by the sender

Once destroyed, files are permanently deleted and cannot be recovered.

3.3 Data Location

Data is stored on secure cloud infrastructure provided by reputable service providers. While we operate from Brisbane, Australia, data may be stored on servers located internationally. All providers are required to maintain appropriate security standards.

4.Third-Party Services

We use the following trusted third-party services:

  • Stripe – Payment processing
  • Cloudflare – CDN, security, and infrastructure
  • Google OAuth – Optional sign-in authentication
  • Supabase – Database and authentication infrastructure

These services have their own privacy policies and data handling practices. We only share the minimum necessary information required for each service to function.

We never sell your data to third parties.

5.Your Rights

Under Australian privacy law, you have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete information
  • Request deletion of your account and associated data
  • Export your data in a portable format
  • Withdraw consent for optional data processing
  • Opt out of marketing communications (if applicable)

To exercise these rights, contact us at privacy@briefpa.app.

6.Cookies and Tracking

We use essential cookies to:

  • Maintain your logged-in session
  • Remember your preferences
  • Secure the platform

We do not use third-party advertising or analytics cookies without your consent.

7.Data Retention

We retain your data as follows:

  • Account data: Until you delete your account
  • Delivery content: Until expiry or deletion (maximum 30 days for free accounts)
  • Billing records: 7 years (Australian tax compliance)
  • Access logs: 90 days for security purposes

8.Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our website. Continued use of Briefpa after changes constitutes acceptance of the updated policy.

9.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Carter Imports Pty Ltd

Trading as Briefpa

Queen Street, Brisbane QLD 4000

Australia

Privacy Email: privacy@briefpa.app

General Support: support@briefpa.app

Website: https://briefpa.app

This Privacy Policy is governed by Australian law and complies with the Australian Privacy Principles.