Privacy policy
Last updated 1 November 2026. How we handle personal information. Paying for a plan is covered by the subscription terms.
Draft: this text hasn't been reviewed by a lawyer yet and may change.
1. Who we are and what this covers
Attune Base is online software that businesses use to take bookings, make sales and invoices, and run their staff, stock and memberships. It's run from Australia by a sole trader ("we", "us"). This policy explains how we handle personal information on this website and in the app.
Two groups of people are covered. Businesses and their staff, who have accounts with us. And the businesses' own customers, who book, buy or join through a business's pages. For customers' information, the business is in charge of it: it decides what to collect and what to send, and we store and process it for them. If you're a customer, the business you dealt with is the first place to ask about your information, and its own privacy policy also applies.
2. What we collect
From businesses and their staff: name, email address, phone number, password (stored only as a secure hash by our login provider), the business's details (name, address, ABN, time zone, opening hours, prices), and everything the business enters into the app, such as services, products, invoices, rosters, timesheets and payslips. For staff, a business may also record pay rates, tax and superannuation details, emergency contacts and certificates. We never store tax file numbers.
From a business's customers, when they book, buy, join or are added by the business: name, email address, phone number, booking details and notes, answers to the business's own client form, purchases, invoices and payments, memberships, check-ins and loyalty points.
Card details are entered into Stripe's secure form and go straight to Stripe. We never see or store a full card number. When a business asks you to save a card for a no-show or late-cancellation fee, the card is kept only for that fee, and it's removed from the business's Stripe account and from your booking once the booking is settled (completed and paid, cancelled with any fee charged or waived, or 14 days after the booking).
When you use the site: the pages you visit and basic device and browser information (through Vercel Analytics, which doesn't use cookies), your IP address for security and to guess your language, and a record of important changes made in the app (who did what, and when), which businesses see as their history.
When you contact us or send feedback from inside the app: what you write, your email address and, for feedback, the page you were on.
3. How we use it
To run the service: log you in, show each business its own information, take bookings and payments, and send the emails and texts the business has switched on (confirmations, reminders, invoices, receipts and so on).
To keep it safe: stop spam sign-ups and fake bookings, limit repeated attempts, and investigate problems.
To bill businesses for their plan, to answer questions and feedback, and to improve the product using counts of how features are used.
We don't sell personal information, and we don't use businesses' or customers' information for advertising.
5. Google user data (Connect with Google)
A business can connect its own Gmail account so that its emails to customers and staff come from its own address. When the owner chooses "Connect with Google", Google asks them to allow one permission: to send email on their behalf (the gmail.send scope). We also receive the Google account's email address, to show which mailbox is connected.
We use this access only to send the emails the business itself sends from Attune Base: booking confirmations and reminders, invoices and receipts, messages the business writes to its clients and staff, and the other emails it has switched on. We can't read, search or delete anything in the mailbox, and we don't.
Google gives us a refresh token, which we store encrypted (AES-256-GCM) in our database. We don't store the emails in the mailbox, and we don't use, transfer or share Google user data for any other purpose: not for advertising, not to build profiles, not to train AI models, and not with anyone else except as needed to send the email, for security, or where the law requires it. Nobody at Attune Base reads it, except with the business's permission to fix a problem, for security, or where the law requires it.
The business can stop this at any time with Disconnect in Settings → Business email, which also removes the access at Google, or from its Google Account at myaccount.google.com/permissions. We then delete the stored token.
Attune Base's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Read Google's API Services User Data Policy.
7. How long we keep it and how to delete it
Business information is kept while the business has an account. Cancelling a plan doesn't delete anything: after a business cancels, we keep its records read-only for 7 years, so it can still meet its record-keeping duties, unless the owner asks us to delete them sooner.
Files an owner sends us to set their business up ('Send us your files and we'll set it up') are stored privately and only the Attune team can open them. We delete them 30 days after the setup is marked done.
To have a business and its information deleted, email us from the owner's address (Settings → Business details → Delete this business). Before you ask, check what the law needs you to keep: in Australia, staff records for 7 years and sales and tax records for 5 years; in Hong Kong, both for 7 years. Deleting can't be undone.
A business's customers who have had no activity (bookings, classes, sales, memberships, loyalty or check-ins) for the business's retention period (7 years unless the owner chooses 12 months, 2 years or never) are anonymised automatically: their name, contact details, notes, allergies, tags, form answers, treatment notes and signed names on consent forms are cleared. Invoices and sales stay, as tax records, and the numbers stay for the business's reports. The owner is told at least 30 days before, and nothing is anonymised while a business is paused or its plan is cancelled. A customer can also ask the business to remove them sooner.
Owners can download all of their business's information at any time, in Settings → Import and export, with no need to ask us.
8. Keeping it safe
Each business can only see its own information: the database enforces this on every table. Data is encrypted in transit and at rest, mailbox passwords and Google tokens are encrypted again on top of that, accounts can turn on two-step verification, and idle sessions sign out after 15 minutes. No system is perfectly secure, so if we learn of a breach that is likely to cause serious harm, we'll tell the people affected and, where required, the Office of the Australian Information Commissioner.
9. Seeing, correcting or deleting your information
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Most of it you can see and change yourself in the app. If you're a business's customer, ask the business first; if it can't help, contact us and we'll work with it.
If you're unhappy with how we've handled your information, please tell us first and we'll reply within 30 days. If you're still not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
10. Changes to this policy
When this policy changes, we'll update the date at the top, and we'll email businesses about changes that affect them.
11. Contact us
For any privacy question or request, email attunebase@gmail.com or use the contact page.