Privacy Policy
Idea In Hand (“we”, “us”) handles your personal information under the Privacy Act 1988 and the Australian Privacy Principles (APPs). This policy explains what we collect, why, who we share it with and your rights.
What we collect
- Account: your username, password (stored only as a salted hash — we can’t see it), the email address and email preferences you choose to give us, and the version of the terms you agreed to.
- Your designs: designs and their edit history, images and photos you upload (which may show people), AI-generated images, and your conversations with the design assistant.
- Orders: recipient name, email, phone, delivery address, order notes, after-sales requests and photos, and your address book.
- Payments: card payments are processed by Stripe and we never receive your full card number; for bank transfers we see the payment record.
- Technical information: your IP address (used to stop password guessing and abusive sign-ups), cookies and local settings in your browser (see our Cookie Notice), and server logs.
How we use it
- To provide the service: saving your designs, running the design assistant, making and delivering products, taking payment, after-sales and refunds;
- To keep you updated on orders: order placed, payment received, shipped, refunds and after-sales replies;
- If you opt in, to remind you about items left in your cart and send offers — you can unsubscribe at any time;
- To keep accounts secure and prevent fraud and abuse;
- To improve the site and meet legal obligations (such as keeping tax records).
We do not sell your personal information.
Who we share it with
- AI providers: the text, designs and images you send to the design assistant are processed by the companies that provide the AI models (such as OpenAI, Anthropic, and model providers accessed through OpenRouter) to generate results;
- Production partners: the factories and suppliers who make your products receive the production files and the delivery details they need;
- Couriers: recipient name, phone and address;
- Payments: Stripe;
- Running the site: hosting and network providers (such as Cloudflare) and our email provider;
- Authorities, where required by law.
These providers only use your information for the purposes above.
Overseas disclosure
Some of the providers above (such as AI providers, Stripe and Cloudflare) process data outside Australia, for example in the United States. We take reasonable steps to require them to protect your information to a standard comparable to the Australian Privacy Principles.
Photos of people
Please get permission before uploading photos of other people. Photos are only used to create your designs and make your products; other users can’t see them unless you publish to the Workshop or share a link yourself.
How long we keep it
- Account and designs: kept while your account exists; deleted designs go to “Recently deleted” before being removed for good; images not used by any design or order are cleaned up automatically.
- Order and payment records: kept as required by tax and accounting law (generally 5 years).
- If you ask us to close your account, we delete your information or remove what identifies you, except order records we must keep by law.
Security
The site uses HTTPS, passwords are stored as salted hashes, and order files are only available to the person who ordered and our administrators. No system is perfectly secure; if a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
Your rights
- You can ask to access or correct your personal information, or ask us to close your account and delete your data. We usually respond within 30 days.
- You can unsubscribe from marketing emails at any time: every email has an unsubscribe link, or switch it off under “Email reminders” in your account menu.
- If you are unhappy with how we handle your information, please contact us first; if we haven’t resolved it within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC, www.oaic.gov.au).
Contact us
Idea In Hand · Email [email protected]