Legal

Privacy policy

Last updated 26 October 2026

This policy explains how LoadStax (“we”, “us”, “our”) handles personal information when you use our website at loadstax.com and the LoadStax Pallet Builder at app.loadstax.com (together, the service). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. What we collect

When you contact us or request access

If you use a form on our website, we collect what you enter. Depending on the form, that's your name, work email, company name, the topic you choose and your message.

When you create and use a portal account

Account details: your email address, your business name and your password. Passwords are stored in hashed form by our sign-in provider, and we can't see them.
Your portal data: the pallet types, cartons, SKUs, carrier settings, builds and history you create, and any client or customer names you choose to type in. This is mostly business information. Anything personal in it is handled under this policy.
Your agreement: a record that you accepted our Terms and this policy when you signed up.
Billing details, once paid plans launch. Card payments will be handled by a payment provider, and we won't store full card numbers.

Collected automatically

Technical information: our hosting, database and sign-in providers keep standard server logs, which can include your IP address, browser type, the pages or features you request and the time of each request. We use these logs to keep the service running and secure.
Sign-in storage: the portal saves a sign-in session in your browser's local storage so you stay logged in. It's essential for the portal to work, and it's cleared when you sign out.

We don't use advertising cookies or third-party analytics or tracking tools, and we don't sell personal information.

2. How we use it

to create and run your account and provide the portal's features;
to send you service emails, such as confirming your account, resetting your password and important changes to the service or our terms;
to answer your questions and requests for access, and to provide support;
to keep the service secure, prevent misuse and fix problems;
to understand, in aggregate, how the service is used so we can improve it;
to bill you once paid plans launch, and to meet our legal obligations, for example tax records.

We'll only send you marketing emails if you've asked for them or the law allows it, and every one will include an easy way to unsubscribe.

3. Who we share it with

We share personal information only with service providers who help us run LoadStax, and only as much as they need to do that work. They currently include:

Vercel: hosting for the website and the portal;
Supabase: database, sign-in and account emails for the portal;
Google Fonts: the website and portal load fonts from Google, which receives your IP address when it delivers them;
email delivery and form-handling providers that send our emails and receive website form submissions;
a payment provider, once paid plans launch.

We may also disclose information if the law requires it, to protect people's safety or our legal rights, or to a buyer as part of a sale of the business, which would remain bound by this policy. Anything you choose to share with a client through the portal is visible to that client.

4. Storage outside Australia

Our providers store and process data on servers that may be located outside Australia, including in the United States and other countries where they operate. We choose providers that protect information to a standard that is substantially similar to the Australian Privacy Principles, and we take reasonable steps to make sure they handle it securely.

5. How we protect it

We use encrypted (HTTPS) connections, hashed passwords and database access rules that keep each account's data separate from other accounts. Within LoadStax, access to personal information is limited to people who need it. No system is completely secure, so please use a strong, unique password and keep it private. If a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

6. How long we keep it

We keep your account details and portal data while your account is open. When you close your account, we delete it, or make it anonymous, within a reasonable time, usually 90 days, allowing for backups to roll over. We keep information longer only where the law requires it, for example billing records kept for tax purposes. We keep website enquiries for as long as we need them to deal with your request.

7. Your choices and rights

Access and correction. You can see and update your business name and password in the portal. To ask for a copy of the personal information we hold about you, or to correct it, contact us. We'll respond within 30 days.
Deletion. You can ask us to close your account and delete your data.
Anonymity. You can browse the website without telling us who you are. We need an email address to provide an account.
Marketing. You can unsubscribe from marketing emails at any time. Service emails, like password resets, are part of running your account.

If you're outside Australia, you may have additional rights under your local law. Contact us and we'll help.

8. Children

LoadStax is a business service and isn't intended for anyone under 18. We don't knowingly collect information from children.

9. Complaints

If you have a concern about how we've handled your personal information, contact us first and we'll try to resolve it, usually within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes to this policy

We'll update this policy when our practices or providers change, and update the date at the top of this page. If the changes are significant, we'll let account holders know by email or in the portal.

11. Contact us

For privacy questions or requests, use our contact form and choose “Something else” as the topic.