Privacy Policy
Last Updated: 3 November 2025
Carter Imports Pty Ltd (ABN 11 642 784 263) trading as Briefpa ("we", "our", or "us") operates the Briefpa secure digital delivery platform at https://briefpa.app.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service. We are committed to protecting your privacy and handling your data in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1.Information We Collect
1.1 Account Information
When you create an account, we collect:
- Full name
- Email address
- Password (encrypted)
- Account preferences and settings
1.2 Payment Information
For paid subscriptions, we collect payment details through our payment processor, Stripe. We do not store your full credit card details on our servers. Stripe processes and secures your payment information in accordance with PCI DSS standards.
1.3 Delivery Content
When you create a delivery, we temporarily store:
- Uploaded files (encrypted)
- Recipient email addresses
- Custom messages
- Delivery settings and expiry preferences
Note: All delivery content is encrypted at rest and automatically destroyed after the specified expiry period or upon recipient access if configured to self-destruct.
1.4 Usage Data
We automatically collect:
- IP addresses and device information
- Browser type and version
- Access times and delivery access logs
- Referral sources
- Usage patterns and feature interactions
2.How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Briefpa service
- Process and deliver secure file transmissions
- Manage your account and subscriptions
- Process payments and send billing notifications
- Send transactional emails (delivery notifications, receipts, security alerts)
- Monitor and log delivery access for security and verification purposes
- Prevent fraud, abuse, and unauthorised access
- Comply with legal obligations
- Respond to support enquiries
We do not use your delivery content for marketing, analytics, or any purpose beyond facilitating secure transmission to your intended recipients.
3.Data Storage and Security
3.1 Encryption
All delivery content is encrypted using industry-standard AES-256 encryption. Files are encrypted at rest and transmitted over HTTPS. Encryption keys are managed securely and separately from the encrypted data.
3.2 Automatic Destruction
Delivery content is automatically destroyed:
- After the specified expiry period (default: 7 days)
- Immediately after recipient access (if self-destruct is enabled)
- Upon manual deletion by the sender
Once destroyed, files are permanently deleted and cannot be recovered.
3.3 Data Location
Data is stored on secure cloud infrastructure provided by reputable service providers. While we operate from Brisbane, Australia, data may be stored on servers located internationally. All providers are required to maintain appropriate security standards.
4.Third-Party Services
We use the following trusted third-party services:
- Stripe – Payment processing
- Cloudflare – CDN, security, and infrastructure
- Google OAuth – Optional sign-in authentication
- Supabase – Database and authentication infrastructure
These services have their own privacy policies and data handling practices. We only share the minimum necessary information required for each service to function.
We never sell your data to third parties.
5.Your Rights
Under Australian privacy law, you have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your account and associated data
- Export your data in a portable format
- Withdraw consent for optional data processing
- Opt out of marketing communications (if applicable)
To exercise these rights, contact us at privacy@briefpa.app.
6.Cookies and Tracking
We use essential cookies to:
- Maintain your logged-in session
- Remember your preferences
- Secure the platform
We do not use third-party advertising or analytics cookies without your consent.
7.Data Retention
We retain your data as follows:
- Account data: Until you delete your account
- Delivery content: Until expiry or deletion (maximum 30 days for free accounts)
- Billing records: 7 years (Australian tax compliance)
- Access logs: 90 days for security purposes
8.Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our website. Continued use of Briefpa after changes constitutes acceptance of the updated policy.
9.Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Carter Imports Pty Ltd
Trading as Briefpa
Queen Street, Brisbane QLD 4000
Australia
Privacy Email: privacy@briefpa.app
General Support: support@briefpa.app
Website: https://briefpa.app
This Privacy Policy is governed by Australian law and complies with the Australian Privacy Principles.