LEGAL

Privacy Policy

RETISYNQ, A TODOLABS PRODUCT · ABN 54 887 498 314 · LAST UPDATED 9 NOVEMBER 2026 · VERSION 1.0

Retisynq needs very little about you to design a reticulation system: your yard, and a sign-in if you want to keep your designs. This page says everything we keep, why, who else sees it, and what you can ask of us.

1Who we are

Retisynq is a product of TODO Labs, a sole trader business in Perth, Western Australia, ABN 54 887 498 314. This policy covers the website at retisynq.com.au and the Retisynq planner at app.retisynq.com.au. For anything about your information, write to hello@retisynq.com.au. The person who built the planner reads it.

2The short version

You can draw a yard and see its sprinkler layout without an account. That plan lives in your own browser, and is sent to our server each time the design is worked out.
With an account, we keep your name and email address from Google or Microsoft, the designs you save, and, if you are an installer, your business details and price list.
Stripe takes the card payment for a report. We never see or store your card number.
No advertising, no analytics, no tracking scripts, and we never sell or trade personal information.
You can download a copy of everything in your account, or delete the account, from the account page at any time.

3Where we stand under the Privacy Act

TODO Labs’ annual turnover is well under $3 million, so it is a small business operator under the Privacy Act 1988 (Cth). The Act and its Australian Privacy Principles do not bind a small business unless one of the Act’s exceptions applies, and none applies to us: we do not sell, buy or trade personal information, we provide no health service, we hold no Commonwealth contract, and we are none of the other kinds of business the Act covers whatever their size.

We have chosen to follow the Australian Privacy Principles anyway, as if they bound us, and this policy is written to meet them. That is a promise we make in this policy, not a law we are under. If TODO Labs grows past the threshold, or chooses to opt in to the Act, the Act will bind us and we will say so here.

The planner’s calculations are automatic: a program lays out sprinklers, sizes pipes and checks pressures from the yard you draw and the figures you enter. It makes no decision about you as a person. Nothing about your rights, what you may buy or what you pay depends on it, and the report costs the same for everyone.

4What we collect, and why

We collect only what is needed to run the planner for you. Nothing is collected from anyone but you, your sign-in provider and Stripe.

WHAT	WHERE IT COMES FROM	WHY, AND WHERE IT GOES
Your plan: the property’s address and lot, the lawns, beds and paving you draw, the tap, your water readings, soil, grass and brand choices, your watering area and house number, and the quote you build in it	You, in the planner	To lay out and check the design and work out the watering program. The plan is kept in your browser. Each time the design is worked out it is sent to our server, which keeps the last few designs in memory for up to two hours (so the same plan opened again, or its report PDF, needs no second run) and otherwise keeps nothing, unless you save the design to your account.
Your name, your email address and your account identifier at your sign-in provider	Google or Microsoft, when you sign in with them	To make your account and keep your designs and purchases with it. We never receive or store a password. The identifier, not the email address, is what tells us it is you.
The designs you save: the whole plan above, with its name, the address and the lot’s position on the map	You	So you can open them again on any device, and so a purchase can be tied to a design on its lot. Stored in our database in Australia (section 7).
Your business details for your quotes (name, ABN, licence, phone, email, street address, terms, deposit and warranty, and a logo you upload) and your price list	You, if you are an installer	So every quote you price, on any device, starts from them. They appear only on the quotes you make, and in your account copy. Nobody else sees them.
Your purchases: which design and lot, the address, the date, the amount and GST, and Stripe’s references for the payment, the Checkout session and the invoice	You and Stripe	To give you the report you paid for, to take it away if a payment is refunded or disputed, and to keep the records tax law requires.
The report PDFs you make from a design you bought: the plan, the design and the address, as printed	Our server, from your design	So you can download a report you paid for again, on any device. Kept in file storage in Australia (section 7).
On Stripe’s payment page: your card details, your billing address, and a business name and ABN if you add them	You, on Stripe’s page	To take the payment and put your business on the tax invoice. Stripe keeps these; we see only that the payment went through and its references. We give Stripe your name and email address, the design’s address for the invoice, so it names the job, and the lot’s position, so the purchase can be matched to it.
Emails you send us	You	To answer you. Kept in our mailbox for as long as the matter is open and a reasonable time after.
Your internet (IP) address and what your browser asks our server for	Your browser, as with any website	To keep one address from overloading the planner (counted in memory, a minute at a time, and not written to our database), and in the hosting’s ordinary server logs, which we use only to keep the service running and to investigate faults or misuse.

We do not ask for your phone number, date of birth or anything about your household. We collect nothing from data brokers or social networks. A plan includes your property’s address and lot, and on an estimated lot the street numbers of the neighbouring properties from the public national address file; treat a saved design or a report as you would any document showing your address.

5If you quote for your own customers

Installers can price a job in the planner and print a quote for their customer. The customer’s name you type on that quote, the job’s address and the words you write about the job are saved with that design in your account, like the rest of the plan. We use them only to show you the quote again; we do not contact your customers or use their details for anything. You are responsible for what you tell your customers about the information you hold on them, and deleting the design or your account deletes it from us.

6Looking up your address and map

When you search for an address, the planner has to ask someone who holds the land data:

In New South Wales, Victoria, Queensland, the ACT and Tasmania, your browser asks the state’s own public address and land services directly (NSW Spatial Services, Vicmap, the Queensland Government, ACTmapi and Tasmania’s LIST; Victoria’s and the ACT’s are hosted for them on Esri’s ArcGIS Online), so that service sees the address you typed and your internet address, as it would if you used its own website.
In Western Australia, South Australia and the Northern Territory, your browser asks our server, which searches its own copy of the national address file (G-NAF, from Geoscape) and estimates the lot from the address points around it and the streets near it. The street lines come from OpenFreeMap, fetched by our server, so OpenFreeMap sees the area, not you.
The street map drawn under your plan comes from OpenFreeMap, which your browser asks directly for the map tile around the lot (an area about two kilometres across). OpenFreeMap sees that tile and your internet address, as any map service does.
Building outlines come from OpenStreetMap, through those same tiles, and, where it has none, from Microsoft’s published building footprints, which our server downloads in large regional files and searches itself. Microsoft does not see your search.

Climate and soil figures for the watering program are read from data files on our server (SILO and the Soil and Landscape Grid of Australia). No one outside is asked for them.

7Who helps us run Retisynq, and where your information goes

We share personal information only with the providers we need to run the planner, only for that, and where the law requires it. We never sell it, trade it or hand it to advertisers.

Microsoft Azure (Microsoft Corporation): the planner’s server, its database, the report PDFs, its secrets and its monitoring, all in Microsoft’s Australia East region in Sydney. Your account data and designs are stored in Australia.
Stripe (Stripe Payments Australia Pty Ltd, with Stripe, Inc. and Stripe’s Irish companies): card payments, receipts and tax invoices. Stripe processes payment information in the United States, Ireland and India, and wherever your card scheme operates.
Google (Google LLC) and Microsoft (Microsoft Corporation): signing in, if you choose them. Each sees that you signed in to Retisynq, under its own privacy policy, and processes that in the United States and elsewhere it operates.
Zoho (Zoho Corporation): our email. Mail you send to hello@retisynq.com.au is held in a Zoho mailbox in Zoho’s Australian data centres, in Sydney and Melbourne. Zoho itself is based in India and the United States.
Resend (Plus Five Five, Inc., United States): the one email the planner sends after you buy a report, saying it is kept in your account to download again. For that email Resend receives your name, your email address and the property’s address. It sends from our address mail.retisynq.com.au through its servers in Tokyo, Japan, and processes its customers’ data in the United States. Its open and click tracking is off: we do not know whether you opened the email.
OpenFreeMap (Hyperknot Software Kft., Hungary): the street map, a free public service run from its own servers. It sees the map tile your browser asks for and your internet address; it says it keeps no internet addresses in its access logs, which it deletes after seven days, and sets no cookies.
State land services, named in section 6, when you search an address in their state.

So some of your information is likely to go overseas: to Stripe in the United States, Ireland and India when you pay; to Google or Microsoft in the United States when you sign in; to Resend in Japan and the United States for the email after you buy a report; and to OpenFreeMap in Hungary when the street map loads. It is then handled under the laws of those countries. Each is an established service and we use only its standard terms and the protections that come with them. We do not otherwise send personal information overseas, and we never will for advertising.

8Cookies and browser storage

The planner sets two cookies of its own, both only on the planner’s own address and both unreadable by scripts:

__Host-rq_session: keeps you signed in, for up to 30 days. It holds a random token; we store only a scrambled (hashed) copy of it, so a copy of our database holds no working session.
__Host-rq_login: lives for the ten minutes of a sign-in with Google or Microsoft, to check that the answer coming back belongs to the sign-in you started.

The planner also keeps a few things in your browser’s own storage, which never leave it except as described above: retisynq.project.v1 (your plan), retisynq.design.v1 (which saved design it is), retisynq.business.v1 and retisynq.prices.v1 (your business details and price list while you are signed out; signing in moves them into your account and clears them from the browser), retisynq.panel (how wide you dragged the side panel), retisynq.tab (the tab you had open) and, for one visit, retisynq.keepLocal (that you chose not to save the plan yet). Clearing your browser’s site data removes them all.

There are no advertising, analytics or social-media cookies or scripts anywhere on the website or in the planner. This website itself sets no cookies and loads nothing from anyone else: its fonts and videos are our own. Stripe’s payment page and the Google and Microsoft sign-in pages are theirs and set their own cookies under their own policies.

9Keeping it safe, and for how long

Sign-ins are checked in full against the provider’s published keys. Sessions are stored only as hashes. Card details never reach our servers. Your designs and files are stored under your account’s own identifier and are never served to anyone else. Access to our systems is restricted to us, and secrets are kept in a vault, not in code. No online service is perfectly secure, so we cannot promise absolute security.

We keep information only as long as we need it for the purpose above, then delete it:

Your account, saved designs, business details and price list: until you delete them.
A deleted design: 30 days, so you can undo it, then gone, with its report PDFs.
Report PDFs: the newest 20 of each design, until you delete the design or your account.
Sessions: until you sign out, or 30 days.
A plan sent to be designed without saving: in memory for up to two hours, then gone.
Purchase records: while you have the account, as they are what you paid for. When you delete it, the address, the lot’s position, your name and your email address go with it; the date, the amount and GST and Stripe’s references stay five more years, as Australian tax law requires, then are deleted. The invoices themselves are Stripe’s, kept under its own policy.
Backups: something deleted can stay in our database’s backups for up to 8 hours, and a deleted report PDF can be recovered by us for 7 days, then both are gone.
Server logs and monitoring: up to 90 days. Our monitoring discards internet addresses before it stores anything.
Emails: while the matter is open and a reasonable time after.

10Your choices and your rights

You can use the planner without an account. Signed in, you can do most things yourself on your account page in the planner: see and change your business details, download a copy of your account as a file (your details, sign-ins, designs, business details, price list, purchases and the list of your report PDFs, which you can download one by one), see your purchases and invoices, sign out of every device, or delete your account. Deleting an account removes its designs, report PDFs, business details, price list, sign-ins and sessions; the purchase records the law requires stay, as section 9 says.

You can also ask us for a copy of the personal information we hold about you, to correct it, or to delete it, by writing to hello@retisynq.com.au. We will reply within 30 days. We may ask you to write from the email address on your account, so we do not give your information to someone else. If we cannot do what you ask, we will say why.

Your name and email address come from your sign-in provider; to change them, change them there and sign in again.

11If something goes wrong

If personal information we hold is lost, or is taken or seen by someone who should not have it, and that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as soon as we can, and tell you what we are doing about it and what you can do. The Notifiable Data Breaches scheme does not bind a small business, but we will follow it.

12Children

Retisynq is made for homeowners and the trades, and is not directed at children. We do not knowingly keep an account for anyone under 18; if you believe we have, write to us and we will delete it.

13Questions and complaints

If you have a question or a complaint about how we have handled your information, write to hello@retisynq.com.au first. We will acknowledge it within a week, look into it, and give you our answer within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992, GPO Box 5288, Sydney NSW 2001. The Commissioner normally expects you to have complained to us first.

14Changes

When we change this policy we will post the new version here with its date and version number. If a change matters to how we use information you have already given us, we will tell account holders by email first, at the address on the account. The only emails we send are those: replies to you, notices about your account or this policy, and one email after you buy a report saying it is kept in your account. Receipts and tax invoices come from Stripe. We send no marketing email.