Privacy Policy

Last updated 2 August 2026. How Clientyr collects, uses and protects your information, in plain language.

This Privacy Policy explains how Samuel Roger Lucas (registered business name: LUCAS, SAMUEL ROGER), a sole trader trading as 'Clientyr' under Australian Business Number (ABN) 56 579 114 075, based in Victoria, Australia (“Clientyr,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use our website and our business-diagnostic service (the “Service”). We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

We collect the following kinds of information:

  • Business profile / scanner inputs you give us: your industry, company size, the software and tools you use, and the manual processes or bottlenecks you want to fix. We use this to generate your assessment and Blueprint.
  • Contact details, such as your name, email address, and (if you provide it) your company name, so we can deliver your results and communicate with you.
  • Payment information: payment is processed by Stripe. We do not see or store your full card number; we receive limited confirmation details (that a payment succeeded, the amount, currency, and a transaction reference).
  • Hosted app data (done-for-you customers): if you subscribe to the done-for-you option, we host an app that stores your business profile and Blueprint, your app sign-in email, and any public enquiry-form submissions made through it. Enquiry submissions belong to your business; we process them only to deliver them to you.
  • Usage and device data: basic technical information (IP address, browser type, pages viewed, timestamps) used to operate and secure the Service, and, when product analytics is enabled, how the Service is used via PostHog.
  • Advertising and measurement data: when our ads are running, cookies and similar technologies (the Meta Pixel and Meta's Conversions API) record which of our ads brought you here and which steps you then took. This is measurement of what happened, not of your answers; your scan responses, business data, and Blueprint are never sent to an advertising platform.

2. How we use your information

We use the information we collect to generate your operational assessment and Blueprint; process your payment and provide the service you paid for; send your results, receipts, and service-related messages; respond to your questions and provide support; operate, secure, debug, and improve the Service and prevent abuse; and comply with our legal obligations. We do not sell your personal information, and we do not use your business data to train third-party models for purposes unrelated to generating your own results.

3. Third-party processors we share data with

We share information only with the providers that help us run the Service, and only as needed: Stripe (payments); Supabase (database and authentication hosting); Anthropic (processes your business profile to generate your assessment and Blueprint); Resend (email delivery); Vercel (application hosting); Google Cloud (supporting cloud infrastructure); PostHog (product analytics, when enabled); and Meta (advertising measurement, when our ads are running: the event, its value, and, for a purchase, a one-way hashed version of your email; never your answers, business data, or Blueprint). We may also disclose information if required by law. We do not sell your data to advertisers or data brokers.

4. Automated processing of your business data

To produce your assessment and Blueprint, the business profile information you submit is sent to our software provider (Anthropic), which processes it on our behalf. We share only what is needed to produce your output. The results are guidance generated by software and may contain errors; see our Terms of Service and Disclaimer.

5. How long we keep your data

We keep your information for as long as your account is active or as needed to provide the Service, and afterward only as long as necessary for legitimate business purposes such as recordkeeping, resolving disputes, and meeting legal or tax obligations. We take reasonable steps to destroy or de-identify personal information when we no longer need it, consistent with the Australian Privacy Principles.

6. Your rights and choices

Under the Australian Privacy Act 1988 (Cth) and the APPs, you may request access to the personal information we hold about you and ask us to correct it. Depending on where you live, you may also have rights to export or delete your information, object to or restrict certain processing, and withdraw consent. To exercise any of these rights, contact us below. You can unsubscribe from non-essential emails at any time. If you are not satisfied with how we handle a privacy concern, you may complain to the Office of the Australian Information Commissioner (OAIC). To limit how your activity is used for ads, use your Meta ad preferences, a browser content blocker, or email us to delete the events we hold; note that Conversions API events are sent from our servers, so a browser blocker alone will not stop those.

7. Data security

We use reasonable technical and organisational measures to protect your information and rely on established providers (such as Stripe, Supabase, Vercel, and Google Cloud) for sensitive operations. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

8. International data transfers

We are based in Australia, but some providers store or process information overseas (for example in the United States). Where required, we take reasonable steps to ensure such transfers are handled consistently with the Australian Privacy Principles.

9. Children's privacy

The Service is intended for business owners and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

11. Contact us

If you have questions about this policy or want to exercise your privacy rights, contact Samuel Roger Lucas (trading as 'Clientyr', ABN 56 579 114 075), Victoria, Australia, at admin@clientyr.com.