Privacy Policy

Last updated: 21 July 2026

The short version

We collect the minimum we need to run the service: your account details, the timeline content you create, and enough billing metadata to know whether your account is paid. Your proposal content is confidential — we don't sell it, share it, or use it to train models. We never see your card details.

1. Who this covers

This policy explains how Donald Bloomfield (Sole Trader) (ABN 30 178 103 700) handles personal information in Proposal Timeline, in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Privacy questions go to support@isdon.net.

2. What we collect

3. Your proposal content is confidential

Proposals are commercially sensitive, and we treat them that way. We do not sell or rent your content, we do not share it with third parties for their own purposes, and we do not use it to train machine-learning models. Staff access is limited to what's needed to support you, investigate a fault, or meet a legal obligation.

4. How we use it

To operate the service: rendering your Gantt chart, generating PDF and Excel exports, enforcing access to paid features, and keeping an audit trail of project edits. We use your email address for account verification, password resets, collaborator invitations, receipts, and occasional service notices (for example, a change to these policies or planned downtime). We don't send marketing email unless you've asked for it.

5. Who we share it with

We do not sell your personal information to anyone.

6. Where it's stored, and security

Data is hosted in Australia. Stripe processes payments overseas, so billing metadata may be handled outside Australia. Traffic is encrypted in transit (HTTPS), passwords are hashed, and access to production systems is restricted. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.

If a data breach occurs that is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

7. Cookies

We use a session cookie to keep you logged in and a security cookie to protect forms against cross-site request forgery. These are necessary for the service to work. We don't use advertising or third-party tracking cookies.

8. How long we keep it

Project content is kept while your account is open, so your timelines are there when you return — including after a subscription lapses. Archiving a project keeps it; deleting it removes it. If you ask us to close your account, we delete your content within 30 days, except where we're required to keep records longer — financial and tax records, for instance, must be retained for 5 years under Australian tax law. Server logs are kept for 90 days.

9. Accessing, correcting and deleting your information

You can view and edit most of your information in the app directly. You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and content. Email support@isdon.net and we'll respond within 30 days, as required by the Australian Privacy Principles.

10. Complaints

If you think we've mishandled your personal information, contact us first at support@isdon.net and we'll investigate and respond. If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes to this policy

We'll update this page when our practices change, and revise the date at the top. If a change materially affects how we handle your information, we'll tell you by email or in the app.

See also the Terms of Service and the Refund Policy.