Privacy Policy — Clynchd

1. About this policy

Clynchd ("we", "us", "our") operates the Clynchd platform, including the website at clynchd.com, the consumer portal at app.clynchd.com, the retailer portal at retailer.clynchd.com, and the Clynchd Shopify app. This policy explains how we collect, use, and protect personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

Consumers

Name and email address (account registration)
Delivery address (required for placing a bid)
Bid history, product searches, and order history

Retailers

Business name, ABN, and contact details (account registration)
Catalogue data including product GTINs and pricing
Bid response history and order history
Shopify store domain and OAuth access token (Shopify merchants only)

Website visitors

Name, email, postcode, and product category interests (registration of interest form)
Standard server logs (IP address, browser type, referring URL)

3. How we use your information

We use personal information to:

Operate the Clynchd platform and process bids and orders
Communicate with you about your account, bids, and orders
Verify retailer business details via the Australian Business Register
Collect the Clynchd platform fee from direct-connect retailers via Stripe
Improve the platform and understand usage patterns
Contact registrants of interest when early access is available

We do not sell personal information to third parties.

4. Disclosure to third parties

We share personal information only with the following service providers, strictly for the purpose of operating the platform:

Supabase — database and authentication (data hosted in Sydney, Australia)
Stripe — platform fee collection for direct-connect retailers
Resend — transactional email delivery
Shopify — for merchants using the Clynchd Shopify app
Railway / Vercel — application hosting infrastructure

When a consumer wins a bid, the winning retailer receives the delivery address and order details necessary to fulfil the order. We do not share payment card details with retailers.

5. Data security

We store data in Australian data centres where possible. Access to personal data is restricted to authenticated requests using role-based controls. Clynchd does not collect or store consumer payment details — consumers pay the winning retailer directly through the retailer's own checkout. For direct-connect retailers, fee-collection details are handled entirely by Stripe and never stored on Clynchd servers. API communications are encrypted in transit via TLS.

6. Data retention

We retain account data for as long as your account is active. If you close your account, we will delete or de-identify your personal information within 30 days, except where we are required by law to retain it.

7. Your rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to legal retention obligations)
Complain about a breach of your privacy rights

8. Shopify app — customer data

The Clynchd Shopify app accesses Shopify merchant data (products and orders) under the scopes granted during installation. Consumer customer data (name and delivery address) is accessed only when a bid is won and an order must be fulfilled, subject to Shopify's Protected Customer Data requirements. This data is used solely to create the fulfilment order and is not used for marketing or shared with other parties.

9. Cookies

The Clynchd website uses only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

10. Contact us

For privacy enquiries, to access or correct your information, or to make a complaint, please contact us via the contact page.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).