Privacy Policy

Account information: your name, email address, password (stored securely hashed) or Google sign-in details, workspace name and team members.

Content you upload: PDFs, images, logos, interactive elements and settings.

Reader activity: when someone views a Bappa page we record page views, time spent, clicks, device type, browser, approximate location and referring site, so customers can see how their documents perform.

Lead and form data: details readers choose to submit through lead forms, contact forms, bookings or demo requests.

Order data: order totals and references that a customer's own store sends to Bappa. We do not process or store card details.

• To provide, run and improve the Bappa service.
• To show customers analytics and leads for their documents.
• To send account emails such as sign-up confirmation and password resets.
• To respond to support, contact and demo requests.
• To keep the service secure and prevent abuse.

If you sign in with Google, we receive your name, email address and profile picture only, and use them solely to create and access your Bappa account. We do not access your Gmail, Drive or other Google data, and we do not sell or share Google user data. Our use complies with the Google API Services User Data Policy, including its Limited Use requirements.

For reader activity and leads collected on a customer's page, the customer decides what is collected and how it is used; Bappa processes it on their behalf. Readers should contact the business that shared the page for questions about their data.

We use essential browser storage to keep you signed in and remember preferences. Customers may connect their own Google Analytics to their pages; where they enable consent, readers are asked before any analytics cookies are set.

We do not sell personal information. We share data only with service providers who help us run Bappa (such as hosting, database and email delivery), when required by law, or with your permission.

We keep information for as long as your account is active or as needed to provide the service. Data is encrypted in transit and protected by access controls. You can delete content at any time, and ask us to delete your account.

Depending on where you live, including under the Australian Privacy Act and the GDPR, you can ask to access, correct, export or delete your personal information, or object to certain uses. Email us and we'll respond within 30 days.

Bappa is not intended for anyone under 16, and we do not knowingly collect their information.

We may update this policy. We'll change the date above and, for significant changes, notify account holders by email.

Questions about privacy? Email contact@bappa.co.