Legal

Privacy notice

A clear account of the information Fallow needs, why it needs it and the controls that limit exposure.

Scope

This notice explains how Fallow Software Pty Ltd handles personal information when you visit our website, create a workspace or use the Fallow service. Customer content processed from connected SaaS systems is handled on behalf of the workspace customer.

Information we collect

We collect account and workspace information needed to provide the service, including names, business contact details, authentication records, region and preview settings, and support correspondence. No payment processing is enabled for the current private preview.

Connected-platform scans may process user access, license, activity, group and role information. Raw source responses are encrypted in regional blob storage; Postgres stores derived metrics and tenant-salted hashes where possible.

How we use information

  • Provide, secure and support the Fallow service.
  • Authenticate users and enforce workspace permissions.
  • Generate requested scans, reviews, reports and audit evidence.
  • If a future commercial offering is enabled, process billing through a disclosed payment provider.
  • Monitor reliability without placing customer PII in analytics or logs.

Storage and security

Hosted access is paused during an infrastructure migration. The target architecture retains regional Postgres, encrypted object storage and separate workspace encryption keys. Raw scan retention and short-lived report downloads must be verified before hosted onboarding resumes.

Service providers

The public website is moving to OpenAI Sites. Cloudflare provides DNS, delivery and waitlist services; Neon provides Postgres and Resend provides transactional email. Replacement application hosting, storage and key management are being validated before hosted onboarding resumes. Stripe is planned for a future commercial offering but payment processing is not enabled for the current private preview. Providers process information only for the services they supply.

Your choices and rights

Subject to applicable law, you may request access, correction, export or deletion of personal information by contacting us. Automated workspace export and verified erasure are not yet available in the private preview; the source-only design is intended to destroy tenant keys, blob objects and workspace records after verification and a waiting period.

Contact

For privacy questions or requests, email privacy@fallowonline.com. Do not include credentials or customer exports in email.