Privacy Policy

1. Who we are

Decode My Digger is operated by PM Project Change Pty Ltd (ABN 83 692 182 479), a private company registered in New South Wales, Australia. In this policy, "we", "us", and "our" refer to PM Project Change Pty Ltd.

2. What we collect

We collect the following categories of information:

• Account information: email address, display name, and authentication credentials when you create an account
• Uploaded records: the scanned images of military service records that you upload for decoding
• Payment information: billing details processed through Stripe (we do not store your card number)
• Usage data: pages visited, features used, browser type, and device information collected through standard analytics

3. How we use your information

We use your information to:

• Create and manage your account
• Process your uploaded records and produce decoded reports
• Process payments and issue receipts
• Communicate with you about your orders and our service
• Improve the accuracy and performance of our service
• Comply with Australian legal obligations

4. Third-party services

We use the following third-party services to deliver our product. Each handles specific categories of your data:

5. Data retention

Your account information is retained for as long as your account is active. Uploaded record images and decoded reports are retained for 90 days after processing to allow you to re-download your reports, after which they are permanently deleted. Payment records are retained for 7 years as required by Australian tax law.

You may request deletion of your account and associated data at any time by contacting us. We will process deletion requests within 30 days, except where retention is required by law.

6. Data security

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure authentication through Supabase, and access controls that limit who can view your uploaded records. However, no system is completely secure, and we cannot guarantee absolute security.

7. Your rights

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information (subject to legal retention requirements)
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy

8. Cookies and tracking

We use essential cookies required for authentication and session management. We may use analytics cookies to understand how the service is used. We do not use advertising cookies or sell your data to advertisers.

9. International data transfers

Some of our third-party service providers (Supabase, Anthropic, Stripe) may process data outside Australia, primarily in the United States. By using our service, you consent to this transfer. We ensure all providers maintain appropriate data protection standards.

10. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page indicates the most recent revision. Material changes will be communicated via email to registered users.

11. Contact

For privacy-related enquiries or to exercise your rights, contact us at matilda@decodemydigger.com.au

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.