Privacy policy

This policy explains what Legitkit (Bulent Kay, ABN 30 779 077 297) collects, why, and what you can do about it. We follow the Australian Privacy Principles in the Privacy Act 1988.

1. What we collect

Your email address and the details you type into a document questionnaire (business name, ABN, addresses, names of the other party, amounts, dates). Payment details go to Stripe, not to us. We also collect ordinary web logs: pages visited, browser, approximate location from your IP address.

2. Why we collect it

To generate your document, send your receipt and files, let you regenerate documents for 12 months, email you when a document you bought is updated, and keep the site running and secure. We do not sell your details and we do not use your documents or answers to train any model.

3. Where it is stored

Your account, answers and generated files are stored with Supabase in Sydney, Australia. Payment records are held by Stripe. Transactional email is sent through Resend. Errors are logged with Sentry with personal details stripped. Each of these providers may process data outside Australia to deliver their service.

4. Who sees it

Bulent Kay and the providers named above, only as needed to deliver the service. Nobody else, unless the law requires it.

5. How long we keep it

Account data and documents for as long as you have an account, plus 7 years for tax records of purchases as required by the ATO. Ask us to delete your account and we delete everything except the purchase records we must keep.

6. Cookies

One session cookie to keep you signed in. No advertising cookies. No third-party trackers.

7. Your rights

Ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email hello@legitkit.au. If you are not happy with our answer you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Changes

This policy carries a date at the top. When it changes, the date changes.