Privacy Policy

Last updated: 9 August 2026

This Privacy Policy describes how The JourneyLab Company Pty Ltd ("we", "us", "our") collects, uses, and protects your information when you visit journeylab.io (the "Site") and use journeylabapp.com (the "Service").

These terms complement our Terms of Service.

Information We Collect

For information we collect directly through the Site, we act as the data controller. For platform data that you or your organisation upload to the Service, we act as a data processor on your behalf.

Contact Form

When you submit a request through our contact form, we collect:

  • Your name, email address, phone number, company, and job title
  • Any message you choose to include
  • Technical data automatically provided by your browser and network, including your IP address, approximate location (country/timezone), and device type

We use this information solely to respond to your inquiry and manage our business relationship with you.

Website Analytics

We use Cabin (withcabin.com), a privacy-first analytics service, to understand how visitors use our Site. Cabin does not use cookies, track IP addresses, fingerprint browsers, or identify individual visitors. The data we receive is entirely aggregate and anonymous. No personal information is collected through our analytics.

Platform Account

When you create an account on the Service, we collect:

  • Your name, email address, and (if you choose to provide it) company name
  • Login activity and session information (stored in browser LocalStorage, not cookies)
  • Technical data for security and fraud prevention

Platform Data

When you use the Service, you create and upload content. This data is yours (or your organisation’s). We process it only to provide the Service to you. For ownership and use restrictions, please see our Terms of Service.

Cookies and Local Storage

We do not use cookies for tracking, advertising, or analytics purposes.

The Service uses browser LocalStorage to maintain your login session so you can stay signed in. This is necessary for the Service to function and does not track your activity across other websites. You may clear LocalStorage through your browser settings at any time, though this will log you out of the Service.

What We Do Not Do

  • We do not track your individual browsing behaviour across websites
  • We do not use Google Analytics, Facebook Pixel, or similar third-party tracking tools
  • We do not sell, rent, or trade your personal information or platform data to advertisers or data brokers
  • We do not use your platform data to train artificial intelligence or machine learning models

How We Use Information

  • To respond to contact form submissions
  • To detect and prevent spam (we use Google reCAPTCHA on our contact form)
  • To improve our Site through anonymous, aggregate analytics
  • To provide, maintain, and secure the Service

We only share data with the following service providers, strictly as necessary to operate the Site and Service:

  • Amazon Web Services (AWS) — for securely hosting, storing, and processing all data, and for sending email notifications
  • Google — solely for reCAPTCHA spam protection on the contact form

Data Location

All platform data is stored and processed within Amazon Web Services infrastructure in Sydney, Australia (ap-southeast-2). We do not transfer your data outside Australia.

Security

We take reasonable measures to protect your information from unauthorised access, use, or disclosure. All data is processed and stored securely within AWS infrastructure in Australia.

Data Breaches

If we become aware of an unauthorised breach of personal information that is likely to result in serious harm, we will notify affected users and the relevant authorities as required by law.

Data Retention and Deletion

We retain your personal information and platform data while your account is active.

You may export your data from the Service at any time. You may also request deletion of your data at any time, and we will action that request promptly.

An account is considered inactive when no user has logged in for 12 consecutive months. If this occurs, we may contact you and ultimately delete the associated data. Backups may be retained for a brief period for disaster recovery purposes before they are also removed.

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request corrections or updates
  • Request deletion of your personal information
  • Request deletion of your platform data, if you are an authorised representative for your organisation
  • Complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you believe we have mishandled your personal information

To exercise any of these rights, or if you have questions about this policy, please contact us at https://journeylab.io/contact.

Changes

We may update this policy from time to time. Any changes will be posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us at https://journeylab.io/contact.