Privacy Policy

1. Overview

Brindle is operated by Chainsmith Industries Pty Ltd.

This Privacy Policy explains how we collect, use, store, and protect information when you use Brindle.

We aim to handle personal information responsibly and in accordance with applicable Australian privacy laws and principles.

2. Information We Collect

Depending on how you use Brindle, we may collect:

• your name and email address
• business details and business name
• customer names, phone numbers, and email addresses
• invoice details, payment status information, and reminder history
• account settings and preferences
• Xero connection information and related synchronisation data
• basic usage, analytics, device, and website interaction information

We only collect information reasonably necessary to operate and improve the service.

3. How We Use Information

We use collected information to:

• operate and maintain Brindle
• send automated SMS and email reminders
• synchronise invoice and payment status information with connected accounting platforms
• send owner notification emails
• manage accounts and subscriptions
• improve platform reliability and performance
• respond to support requests
• detect abuse, spam, or unlawful activity

4. Third-Party Services

Brindle uses trusted third-party providers to help operate the service.

These providers may process certain information on our behalf, including:

• Supabase for authentication and database hosting
• Twilio for SMS delivery
• Resend for email delivery
• Stripe for payment processing and subscription management
• Xero for invoice and payment status synchronisation where a user chooses to connect their account
• Google Analytics for website analytics and conversion measurement
• Vercel for hosting and analytics
• Cloudflare Turnstile for spam and abuse protection

We only share information necessary for these providers to perform their services.

We use Google Analytics and similar analytics tools to understand how visitors use our website, measure performance, improve the user experience, and track events such as account registrations. These tools may collect information such as pages visited, device information, approximate location, referral sources, and interactions with the website.

Some third-party providers may process or store information outside Australia as part of providing their services.

5. Cookies and Analytics Technologies

Brindle and certain third-party providers may use cookies, pixels, local storage, and similar technologies to operate the website, remember preferences, improve performance, measure usage, and help prevent abuse.

You can generally control cookies through your browser settings, although disabling certain technologies may affect website functionality.

6. Data Security

We use reputable infrastructure providers and take reasonable technical and organisational steps to protect information. This includes authentication controls, server-side access controls, encrypted connections, environment-based secret management, and restricted access to production systems.

Sensitive integration credentials, such as Xero access tokens, are stored server-side and are not exposed in the browser. Where possible, access to user data is limited to the authenticated user or authorised service processes required to operate Brindle.

While we take reasonable steps to protect information, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.

In the event of an eligible data breach, we may notify affected users and relevant authorities in accordance with applicable laws.

7. Data Retention

We retain information for as long as reasonably necessary to operate the service, comply with legal obligations, resolve disputes, and enforce our agreements.

Deleted invoices or accounts may remain in backups or logs for a limited period before permanent removal.

8. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us.

Some information may be retained where reasonably necessary for legal, security, accounting, or operational purposes.

You may also request that we disconnect a third-party integration, such as Xero, and delete your account, subject to any legal, accounting, security, or operational retention requirements.

9. Children

Brindle is intended for business use and is not directed toward children under 18 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page.

11. Contact

If you have questions, complaints, or requests relating to this Privacy Policy or how your information is handled, you can contact us at support@brindlehq.com.