Skip to main content

Privacy Policy

Last updated: March 2026

PaperFlow is a product of DigiGroup Pty Ltd (ACN 685 208 226). This policy explains how we collect, use, store, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

We collect personal information through our website forms:

Email signup form:

  • Name
  • Email address
  • Marketing consent preference
  • Form submission source (automatically recorded)

Shortlist registration form:

  • Name
  • Email address
  • Company name
  • Phone number (optional)
  • Team size
  • Current software
  • Marketing consent preference
  • Form submission source (automatically recorded)

We also collect technical data automatically:

  • Anonymised website usage data via Google Analytics 4 (page views, device type, approximate location)
  • IP address and browser type (standard web server logs)

2. How We Use Your Information

We use your personal information to:

  • Follow up with you about PaperFlow access
  • Personalise our communication based on your team size and current software
  • Send marketing communications, only with your explicit consent
  • Improve our website and understand how visitors use it

3. Marketing Communications

We comply with the Spam Act 2003 (Cth). We will only send you marketing emails if you have given your explicit opt-in consent via the checkbox on our forms.

You can withdraw your consent at any time by contacting us at info@paperflow.com.au. We will action your request promptly.

4. Data Storage & Security

  • Your data is stored in Google Firebase (Firestore), with servers located in Australia where available, otherwise the nearest available region
  • All data is transmitted over HTTPS (encrypted in transit)
  • Firebase provides encryption at rest by default
  • Access to your data is limited to authorised DigiGroup staff

5. Analytics

We use Google Analytics 4 to understand how visitors use our website. GA4 collects anonymised data, we do not use it to identify individual users.

You can opt out of Google Analytics by using browser extensions such as the Google Analytics Opt-out Browser Add-on or by adjusting your browser privacy settings.

6. Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

To exercise any of these rights, contact us using the details below.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy. You can request deletion of your data at any time by contacting us.

8. Third Parties

We use the following third-party services:

  • Google Firebase - data storage and website hosting
  • Google Analytics 4 - anonymised website usage analytics

We do not sell, rent, or share your personal information with any other third parties.

9. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us:

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.