Privacy Policy

MeasureFlow · measureflow.com.au

Entity: Paul Robert Snelling (ABN 58 531 491 408) trading as MeasureFlow

Contact / Privacy Officer: enquiry@ctikitchens.com.au

Effective date: 25 July 2026 · Version: 1.0

MeasureFlow respects your privacy and handles personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains what we collect, why, how we use and share it, and your rights.

1. Who this covers

This policy covers personal information we handle about: (a) our customers (the studios and their staff who hold accounts); and (b) individuals whose information a customer puts into the Service (for example, a customer's own client whose kitchen is being surveyed). Customers are responsible for having the right to provide their clients' information to us (see clause 6).

2. What we collect

Account information — name, business name, email, phone, and login credentials (passwords are handled by our auth provider and stored hashed, not by us in plain text).

Billing information — plan, subscription status, and payment records. Card details are collected and stored by Stripe, not by us; we receive limited billing metadata (e.g. last-4, status, customer ID).

Content you create — room surveys, sketches, specifications, notes, and photos you upload, plus the design briefs and AI renders generated from them. These may include information about your clients and their premises.

Usage information — projects used, render history, feature usage, and technical logs (IP address, device/browser type, timestamps) used to operate, secure and meter the Service.

Cross-product identifiers — a shared business identifier (your lower-cased account email, company_email) used to link your account across MeasureFlow and related products (CabinetCare, MeasureFlow Studio) so you have one connected login and consolidated billing.

We do not intentionally collect sensitive information (as defined in the Privacy Act). Please don't upload sensitive information into surveys or notes.

3. How we collect it

We collect information directly from you when you create an account, subscribe, and use the Service; automatically as you use the Service (usage/technical data); and from third parties who help provide the Service (e.g. Stripe for payment status, Google sign-in if you use it).

4. Why we use it

We use personal information to: create and manage your account; provide the Service's features (including generating renders and producing exports/hand-offs you request); process payments and manage subscriptions and top-ups; meter and enforce plan usage; provide support; secure the Service and prevent misuse; comply with legal obligations; and communicate with you about your account and service (including transactional emails such as receipts and usage notices). We will only send marketing communications where permitted, and you can opt out at any time.

5. AI render processing

When you generate renders, the photo(s) and the design brief you provide are sent to our AI provider, Google (Gemini), to produce the render images. This processing is to deliver the feature you requested. We do not control Google's independent handling of data under its own terms; we choose a reputable provider and send only what is needed to generate your renders. Do not upload photos containing information you are not entitled to share (see clause 6).

6. Your responsibilities for client information

If you upload information about your own clients (e.g. photos of their home, their name or contact details), you are responsible for having a lawful basis and any necessary consent to do so, and for telling your clients how their information will be used, including that photos are processed by an AI provider to generate renders. You act as the primary handler of your clients' information; we process it on your behalf to provide the Service.

7. Who we share it with

We share personal information with service providers who help us run the Service, under contractual protections and only as needed:

• Stripe — payment processing and billing.
• Supabase — account, database and authentication hosting.
• Google (Gemini) — AI render generation.
• Netlify — website and serverless function hosting.
• Related products — CabinetCare and MeasureFlow Studio, where you choose to connect your account or send a job to Studio, and for shared login/billing.

We may also disclose information where required by law, to enforce our Terms, to protect our or others' rights and safety, or in connection with a sale or restructure of our business (subject to this policy). We do not sell personal information.

8. Overseas disclosure

Some of our providers (including Stripe, Google and Netlify) store or process data on servers located outside Australia (for example, in the United States or other countries). Where we can, we choose Australian data regions (our own database is hosted in the Sydney region). By using the Service you acknowledge that some information may be handled overseas, where privacy laws may differ from Australia's; we take reasonable steps to ensure providers protect your information appropriately.

9. Security and retention

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including encryption in transit, hosted infrastructure with access controls, row-level security on our database, and keeping secrets on the server rather than in the browser. No system is completely secure; we cannot guarantee absolute security.

We keep personal information only as long as needed for the purposes above or as required by law (for example, tax records). When information is no longer needed, we take reasonable steps to delete or de-identify it. You can ask us to delete Your Content, subject to legal retention obligations.

10. Your rights — access, correction and complaints

You can ask to access or correct the personal information we hold about you by emailing enquiry@ctikitchens.com.au. We will respond within a reasonable time and may need to verify your identity. If you have a privacy concern or complaint, contact us first and we will try to resolve it. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Cookies and similar technologies

We use essential cookies/local storage to keep you signed in and to operate features. We may use limited analytics to understand and improve usage. You can control cookies through your browser, though some features may not work without them.

12. Children

The Service is for business/trade use and not directed at children. We do not knowingly collect information from anyone under 18.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new effective date and, for material changes, take reasonable steps to notify you.

14. Contact

Privacy questions or requests: enquiry@ctikitchens.com.au · MeasureFlow · measureflow.com.au

Draft prepared as a starting point for MeasureFlow. Not legal advice. Confirm your entity/ABN, data locations, retention periods, and any analytics/marketing tools in use before publishing.