Privacy Policy

1. About us

Play Forge Labs Pty Ltd (ABN 24 668 726 645), trading as LeadPost, is the entity responsible for the personal information described in this policy. Contact: team@leadpost.com.au

2. What personal information we collect

We collect personal information only from the trade businesses that sign up for LeadPost. This includes:

• Business name, ABN, and trading details
• Contact name, email address, and phone number
• Business postal address (used on letters)
• Logo and letter content you upload or create during onboarding
• Payment information processed by Stripe (we do not store card numbers)

We do not collect personal information from homeowners. Recipient property addresses are sourced from publicly available NSW Government planning approval records (Development Applications and Complying Development Certificates). These records are public documents and contain no private contact details such as phone numbers or email addresses. We do not derive, buy, or sell homeowner contact information.

3. How we use your information

We use the information you provide to:

• Create and manage your LeadPost account
• Print and post letters on your behalf
• Process payments and issue tax invoices
• Send service notifications (account activity, letter status, low credit alerts)
• Respond to your support requests
• Improve the service

We will not use your information for purposes unrelated to the service without your separate consent.

4. Third-party service providers

We share your information only with service providers necessary to operate LeadPost:

• Stripe— payment processing. Stripe's privacy policy applies to all payment data: stripe.com/au/privacy
• PostGrid— physical letter printing and delivery. Your business details and letter content are transmitted to PostGrid to fulfil each send.
• Brevo— transactional and service email delivery.
• Supabase— database hosting and authentication. Data is stored on servers in Australia or the United States. Supabase is SOC 2 Type II certified.
• Google— optional sign-in via Google OAuth. If you use Google sign-in, Google's privacy policy applies to that authentication.

We do not sell your personal information to third parties.

5. Direct marketing and opt-out

We may send you service-related communications (e.g. low credit alerts, new feature announcements) to the email address on your account. You can opt out of non-essential marketing emails at any time by clicking the unsubscribe link in any email or by emailing team@leadpost.com.au.

6. Data security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. These steps include encrypted data storage, access controls, and use of certified third-party infrastructure.

No data transmission over the internet is completely secure. While we do our best, we cannot guarantee absolute security.

7. Access and correction

You have the right to request access to the personal information we hold about you, and to ask us to correct information that is inaccurate, incomplete, or out of date. You can update most information directly from your account settings. For anything else, contact us at team@leadpost.com.au.

We will respond to access or correction requests within 30 days.

8. Retention

We retain your account data for as long as your account is active, and for up to 7 years after closure for tax, legal, and audit purposes consistent with Australian law. Letter send records (without personal homeowner data) are kept for service quality and billing audit purposes.

9. Cookies

The LeadPost app uses session cookies required for authentication. We do not use advertising or tracking cookies. Third-party services we use (Stripe, Google) may set their own cookies governed by their respective policies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to active account holders. The current version is always available at this URL.

11. Complaints

If you have a privacy complaint, please contact us first at team@leadpost.com.au. If we cannot resolve it to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.