PatioHub — Privacy Policy
Last updated: 14 May 2026
This Privacy Policy explains how PatioHub ("we", "us", "our") — a sole-trader business operated by Wesley Fischer in Australia — collects, uses, and protects your personal information when you use our mobile app, website, and services.
We are committed to handling your personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. What we collect
When you use PatioHub, we may collect:
a. Account information
- Name
- Email address
- Phone number
- Suburb and postcode
- Account password (stored encrypted; we never see it in plain text)
- User role (customer, builder, installer, or admin)
b. Design information you create
- Photos you upload of your install area
- Dimensions and specifications you select
- AI-generated renders of your designs
- Notes you add to designs
c. Order information
- Customer contact details
- Order reference number
- Payment status (we do not store card details)
- Internal notes about your order
d. Technical data
- Device type, operating system, app version
- Anonymous usage analytics (which screens you visit, where you tap)
- IP address (for security and fraud prevention)
e. Communications
- Records of emails, SMS, or calls between us and you regarding your account or order
2. How we collect it
- Directly from you when you sign up, design a patio, place an order, or contact us
- From your device (with permission) — your camera, photo library, and approximate location
- From third-party services we use to deliver PatioHub: Supabase (database), Google Gemini (rendering), Stripe (future payments), Resend (email)
3. Why we collect it
We use your information to:
1. Deliver the service — render your designs, calculate quotes, manage your orders, dispatch installers
2. Communicate with you — order confirmations, schedule reminders, support replies
3. Improve PatioHub — analytics show us where the app is confusing so we can fix it
4. Comply with the law — record-keeping for ATO, ASIC, and consumer protection obligations
5. Prevent fraud and abuse — flag suspicious accounts, protect other users
We do not sell your personal information to third parties. Ever.
4. AI rendering
When you upload a photo for rendering, that photo is sent to Google's Gemini API for processing. Google's processing is subject to their own privacy terms (https://ai.google.dev/terms).
We retain the original photo and the rendered output in your account so you can revisit your designs. You can delete a design at any time, which deletes both images.
We may use anonymised, aggregated rendering data (e.g., "x% of users picked Colorbond steel") to improve PatioHub. We will not use your individual identifiable images for any purpose beyond delivering the service to you.
5. Who we share it with
We share your information only with:
- Service providers we use to run PatioHub:
- Supabase (database, file storage) — hosted in Sydney, Australia
- Google Cloud / Gemini (AI rendering) — global
- Stripe (payments — future) — global, PCI-DSS Level 1 certified
- Resend (transactional email)
- Sentry (error tracking, anonymised)
- PostHog (product analytics, anonymised)
- Our installers and trades when they need your address to perform an on-site measure or install
- Government / law enforcement if required by law (warrant, subpoena, court order)
- A successor entity if PatioHub is sold or merged — your data would transfer subject to this Privacy Policy
We never sell or rent your information to advertisers or data brokers.
6. Where it's stored
- Database (Supabase) — hosted in the AWS Sydney region
- Photos and renders — Supabase Storage, Sydney region
- Email and SMS records — Resend (USA) and Australian SMS gateways
- AI rendering — Google Gemini (global; transient processing only)
Some service providers process data outside Australia. Where this occurs, we take reasonable steps to ensure they protect your data to a standard comparable to the Australian Privacy Principles.
7. How long we keep it
| Type | Retention |
|---|---|
| Active account data | While your account is open |
| Order records (for tax and warranty) | 7 years after order completion |
| Photos and renders | Until you delete the design, OR 2 years after account closure |
| Anonymous analytics | Indefinite, in aggregate form only |
| Email/SMS records | 7 years (for consumer law compliance) |
You can request deletion of your account and all associated data at any time (see Section 10).
8. Security
We protect your data with:
- HTTPS encryption everywhere
- Row-level security on the database (you can only access your own data)
- Encrypted password storage (bcrypt)
- Two-factor authentication available on admin accounts
- Service-role keys (which can access all data) restricted to server-side only — never in the app
- Regular security audits of dependencies and infrastructure
No system is 100% secure. If we discover a data breach that affects you, we will notify you within 72 hours, as required by the Notifiable Data Breaches scheme under the Privacy Act.
9. Your rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or out of date
- Delete your account and associated data
- Withdraw consent for marketing communications (we'll keep order records for legal reasons)
- Lodge a complaint if you think we've handled your data improperly
To exercise any of these rights, email hello@patiohub.com.au with your request. We'll respond within 30 days.
10. Children
PatioHub is intended for users 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has used PatioHub, contact us and we'll delete the account.
11. Marketing
When you sign up we may send you:
- Transactional emails about your account and orders (you cannot opt out of these while your account is active)
- Marketing emails about new features or offers (you can opt out anytime — every email has an unsubscribe link)
We don't send marketing SMS unless you've explicitly opted in.
12. Cookies and tracking (website)
Our website uses:
- Essential cookies for sign-in sessions and core functionality
- Analytics cookies (PostHog) to understand how the site is used — anonymised
- Advertising cookies (Meta and Google) only if you've engaged with our paid ads
You can disable cookies in your browser, though some features may stop working.
13. Complaints
If you have a complaint about how we've handled your personal information:
1. First, contact us at hello@patiohub.com.au with the subject "Privacy Complaint". We'll investigate and respond within 30 days.
2. If unresolved, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or call 1300 363 992.
14. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you via email and posted at patiohub.com.au/legal/privacy with a new "Last updated" date.
Contact us
PatioHub (sole trader operated by Wesley Fischer)
ABN: [insert your ABN here]
Email: hello@patiohub.com.au
Address: [insert your business address here]
This Privacy Policy is governed by the laws of New South Wales / Queensland, Australia.