Privacy Policy

Last updated: 31 August 2026

This policy explains how Mesa IT (QLD) Pty Ltd (ABN 72 630 101 870) (“Mesa”, “we”) handles personal information for the Mesa Web service, consistent with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

1. What we collect

Account details you give us: your site name, email address and password (stored only as a secure hash).
Content you add to your site, which may include information about you or third parties.
Billing information you enter at checkout, handled by our payment processor (we don’t store card numbers).
Basic technical logs (e.g. IP address, request time) needed to run and secure the Service.

2. How we use it

To create and operate your account, build and host your site, process payments, provide support, keep the Service secure, and comply with the law. We do not sell your personal information.

3. Service providers we share data with

We use trusted providers to deliver the Service. In doing so, some data is processed by them under their own privacy terms:

Stripe — payment processing. Billing and card data is handled by Stripe, which may process it outside Australia.
Cloudflare — content delivery, DNS and security for the Service and hosted sites.
Binary Lane — Australian server hosting where the Service and your site are run.
Google (Gemini) — where you use AI building features, the site content you ask us to generate or redesign is sent to Google’s Gemini API to produce that content. Don’t put information into AI features that you wouldn’t want processed this way.

Some of these providers operate servers overseas, so relevant data may be processed outside Australia.

4. Your site visitors

If your published site collects information from its visitors (for example a contact or booking form), that information is delivered to you as the site owner. You are the party responsible for how you handle your visitors’ personal information.

5. Retention

We keep your account and site data while your account is active and for a reasonable period afterwards to meet legal, tax and backup obligations, then delete or de-identify it. You can ask us to delete your account.

6. Security

Passwords are stored hashed, traffic is served over TLS, and access to systems is restricted. No online service can be guaranteed perfectly secure, but we take reasonable steps to protect your information.

7. Access, correction and complaints

You can ask to access or correct the personal information we hold about you, or make a privacy complaint, by contacting us. If you’re not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

8. Contact

Mesa IT (QLD) Pty Ltd, ABN 72 630 101 870. Contact [email protected] for privacy enquiries and postal correspondence details.

This is a plain-language draft intended as a starting point and is not legal advice.