This Privacy Policy explains how doddle (ABN 17 829 498 367) ("we", "us", "our") collects, uses, stores, and shares your personal information when you use our services at doddle.au.
1. Information we collect
Information you provide
- Account information: Name, email address, and password when you create an account
- Billing information: Payment details (processed and stored by Stripe, not by us directly)
- Support communications: Messages and any attachments you send through our support channels
Information collected automatically
- Usage data: Pages visited, features used, and actions taken within the dashboard
- Error and performance data: Application errors and performance metrics collected via Sentry to help us diagnose and fix issues
- Session data: IP address, browser type, and device information associated with your login sessions
Your website content
We host files, databases, and media that you upload as part of your WordPress site. We do not access, analyse, or use your website content except as necessary to provide the hosting service (for example, serving pages, performing backups, or diagnosing technical issues at your request).
2. How we use your information
We use the information we collect to:
- Provide, operate, and maintain the hosting service
- Process payments and manage your subscription
- Respond to support requests
- Monitor and improve the reliability and performance of our platform
- Detect and prevent abuse, fraud, or security incidents
- Comply with legal obligations
We do not sell your personal information. We do not use your information for advertising or marketing purposes beyond essential service communications (such as billing notices or critical security alerts).
3. Third-party services
We share information with the following third-party services as necessary to operate doddle:
- Stripe — Payment processing. Stripe handles and stores your payment card details. See Stripe's Privacy Policy.
- Enhance — Hosting infrastructure. Your website files, databases, and server resources are managed through Enhance.
- Bunny CDN — Content delivery. Your website's public content is cached and served through Bunny CDN's global network.
- Sentry — Error tracking. Application error reports and performance data are sent to Sentry to help us diagnose issues.
- Featurebase — Support and feedback. Messages sent through our support widget are processed by Featurebase.
- Supabase — Database hosting. Account and application data is stored in a Supabase-hosted database.
These services have their own privacy policies and may process data outside of Australia. We select providers that maintain reasonable security and privacy standards, but we are not responsible for the privacy practices of third-party services.
4. Cookies
We use essential cookies only. These are required for authentication and session management. We do not use advertising, analytics, or third-party tracking cookies.
Third-party services embedded in our platform (such as Sentry or Featurebase) may set their own cookies. Refer to their respective privacy policies for details.
5. Data storage and security
Your account data and website content are primarily stored on servers located in Sydney, Australia. Some third-party services we use may process or store data in other locations.
We take reasonable measures to protect your information, including encryption in transit (TLS), access controls, and regular security updates. However, no method of storage or transmission is completely secure, and we cannot guarantee absolute security.
6. Data retention
We retain your account information for as long as your account is active. If you cancel your account, we may retain certain information for a reasonable period as needed for legal, accounting, or operational purposes.
Website files, databases, and backups may be deleted at any time following account closure. We do not guarantee the availability of your data after cancellation.
7. Your rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated personal information
- Export your website data at any time through your dashboard or by contacting support
To exercise any of these rights, contact us at support@doddle.au. We will respond within 30 days.
8. Data breaches
In the event of a data breach that we believe is likely to result in a risk to your rights or interests, we will notify affected users as soon as reasonably practical and no later than 72 hours after becoming aware of the breach. We will also notify the Office of the Australian Information Commissioner (OAIC) where required.
9. Children
You must be at least 18 years of age to use our services. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, please contact us and we will investigate and take appropriate action.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or through your dashboard. Your continued use of the services after the changes take effect constitutes acceptance of the updated policy.
11. Contact
If you have questions or concerns about this policy or how we handle your data, contact us at support@doddle.au.