Privacy

Who we are

Smelter is run by Campsite Studios, ABN 76 741 354 178, in Australia. To confirm: the legal name of the entity that holds this ABN Write to us at hello.campsitestudio@gmail.com.

The law we follow

The Privacy Act 1988 and its Australian Privacy Principles (APPs) set the rules for handling personal information. A business with annual turnover of $3 million or less is generally exempt, and Campsite Studios may be. We handle personal information as the APPs require anyway, because the health practices Smelter works for are covered by the Act whatever their size. To confirm: whether Campsite Studios opts in to the Act under section 6EA

Two kinds of information

• About you, as someone who uses Smelter or asks about it. We decide how it’s used, and this page covers it.
• Inside a client’s account: details of the client’s staff, patients, candidates and customers that the work involves. We handle these only to do the work the client asked for, under our agreement with them. The client stays responsible for them, under its own privacy policy.

What we collect, and why

• If you ask to hear when Smelter opens: your name, email address, business name, state or territory, the departments you’re interested in, anything you write in the message box, and the wording you agreed to with the time you agreed. We use them to send one email confirming it, and to email you when Smelter opens and when your departments are available. Nothing else.
• If you have an account: your name, your email address and your role in each account. Sign-in links work once and last 15 minutes. We store only a scrambled form (a hash) of each link and each session, never the link or the session itself.
• To stop abuse: when you sign in or use a public form, we keep a keyed hash of your connection’s internet address so we can limit how many requests come from it. It can’t be turned back into the address.
• If you pay: Stripe takes the payment. We never see or store your full card number.
• The work itself: what each department needs, such as posts and review replies for Marketing, security settings and device status for IT, and rosters and staff records in Minishift for HR.
• What you send us: emails and messages in the portal.

Email and the Spam Act

We send transactional email without asking: sign-in links, confirmations such as the one for the interest list, notices about your account and your sign-offs, and invoices. The Spam Act 2003 allows these because they are about something you asked for or already have. Anything else we send only with your consent; it names Campsite Studios as the sender and has a working unsubscribe link, which takes effect straight away.

The interest list’s consent reads: “Email me when Smelter opens and when my departments are available. Nothing else; I can unsubscribe any time.”

Where it’s kept

Smelter runs on Cloudflare. Cloudflare Workers run the app, Cloudflare’s D1 database holds the records, and Cloudflare R2 holds uploaded files in a private bucket. Cloudflare runs data centres around the world, so information may be processed outside Australia. To confirm: where the database and files are stored

Other services that handle personal information for us: Resend, which delivers our email, and Stripe, which takes payments once Smelter opens. Some of them are based overseas, including in the United States. The AI providers are named on the How we use AI page before launch. To confirm: a list of every provider and the countries each one uses

Who at Smelter can see your account

Smelter’s staff can open a client’s account only when the account’s owner grants them access, for a set number of days (from 1 to 366). Access ends by itself when that time runs out, and the owner can revoke it at any time. Staff without a live grant can’t see anything in the account.

Only the owner can grant or revoke staff access. Each grant and revocation is recorded in the account’s audit log. Staff never sign off their own work: sign-offs are yours.

Automated decisions

From 10 December 2026, the Privacy Act requires a privacy policy to say when a computer program makes, or does much of the work of making, a decision that could significantly affect a person’s rights or interests, and what personal information it uses. Smelter makes no such decision by software alone. No decision about a staff member’s pay, hiring or employment is made by software.

The How we use AI page lists each place software is used, what it does, who makes the decision and what information it uses.

Keeping it safe

• Sessions live on our server, so signing out ends them there, not just in your browser.
• Uploaded files are kept private.
• If a data breach affects your information, we tell the affected client the facts within 24 hours, and follow the Notifiable Data Breaches scheme where it applies.
• Client data isn’t used to train AI models.

How long we keep it

• The interest list: until you unsubscribe. When you do, we stop emailing you straight away and delete your entry within 30 days. To confirm: how long entries are kept for people who don’t unsubscribe
• The rate-limit records for public forms: deleted after two days.
• Checkout details saved while Smelter isn’t taking payments: deleted after 12 months. An unfinished checkout: deleted after 90 days.
• A client’s account: when a client cancels everything, it has 90 days to export its records. Then we delete the account’s data and files, and email the owner to confirm it’s done. People who belong to no other Smelter account have their name and email wiped too.
• Invoices and payment records: as long as tax law requires, generally five years.

Seeing, correcting and removing your information

Ask for a copy of the personal information we hold about you, or for it to be corrected, by emailing hello.campsitestudio@gmail.com. We reply within 30 days. To come off the interest list, use the link in the email we sent you.

Complaints

Email hello.campsitestudio@gmail.com first. If you aren’t satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.