WindItDown ("we", "us") is a platform and service that helps Australian sole traders and Pty Ltd companies close their business with ASIC, either self-service or done for you. This policy explains what personal information we collect, why, and what you can do about it. It's written to comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What we collect
- Account information: your email address and password (stored as a salted hash, never in plain text).
- Business information: business type, business or company name, and ABN or ACN, if you provide it in your dashboard.
- Documents you upload: any files you choose to store in your records vault.
- Contact form submissions: your name, email, and message.
- Payment information: when payments are enabled, handled directly by our payment processor (Stripe) — we do not store your card details ourselves.
- Basic usage data: standard web server logs (IP address, browser type, pages visited) for security and troubleshooting.
Why we collect it
We use your information to:
- Create and operate your account
- Generate your personalised closure checklist
- Store and let you retrieve your documents for as long as you need them
- Process payments for paid plans and add-ons
- Respond to enquiries sent through the contact form
- Meet our own legal and accounting obligations
We don't use your information for advertising, and we don't sell it.
Who we share it with
We use a small number of service providers to run WindItDown, and your information is only shared with them as needed to provide the service:
- Supabase— our database, authentication and file storage provider. Your account data and documents are hosted in Supabase's Sydney (Australia) region.
- Stripe — our payment processor, once payments are enabled. Stripe handles and stores your card details directly; we never see or store full card numbers.
We don't share your information with anyone else unless required by law, or with your explicit consent (for example, if you ask us to refer you to a tax agent, lawyer or liquidator).
How long we keep it
We keep your account and business information for as long as your account is active, and documents in your records vault for the retention period you choose to keep them for. You can delete individual documents at any time from your dashboard. If you close your account, we'll delete your personal information unless we're required to retain it for legal or accounting reasons (for example, financial records relating to a payment).
Security
Documents and account data are stored in a private, access-controlled database — nothing in your dashboard is publicly accessible, and every record is scoped so only you can read or write your own data. No system is completely immune to risk, but we take reasonable technical and organisational steps to protect your information.
Your rights
You can access, correct, or ask us to delete your personal information at any time. Most of this you can do yourself from your dashboard; for anything else, email us at hello@winditdown.com and we'll action it or explain why we can't.
Cookies
We use a minimal, functional cookie to keep you logged in. We don't use advertising or tracking cookies.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, let you know directly.
Contact us
Questions about this policy or your data? Email hello@winditdown.com or use our contact form.