How Cut Tape handles your data

Last updated: Jan 09, 2026

This Privacy Policy explains how Cut Tape ("Cut Tape", "we", "us" or "our") collects, uses, stores and protects information about you when you use our website, app and related services (collectively, the "Service").

Cut Tape is designed to help small businesses understand and track their compliance obligations. Because we deal with sensitive business information, we take privacy and security seriously.

By using Cut Tape, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who we are & how to contact us

Cut Tape is operated by the founder based in Australia. For any questions about this Privacy Policy or how your information is handled, you can contact us at:

Email: alexander@cuttape.com

2. Information we collect

The specific information we collect depends on how you use Cut Tape. In general, we collect the following categories of information:

2.1 Account information

When you create an account or log in, we collect:

Name (if you provide it)
Email address
Password (stored in hashed form and never in plain text)

2.2 Business profile information

To tailor your checklist and obligations, we collect information about your business, for example:

Business name and display name
Country, state or region of operation
Business structure (e.g. Sole trader, Company, Trust)
Industry and sub-industry
Business size (e.g. "Owner only", “2–4 employees”)
Annual revenue band (e.g. "<$75k")
ABN or other tax ID (if you choose to add it)

2.3 Compliance data & uploaded content

As you use Cut Tape, we store the information you add to your checklists and proof log, for example:

Checklist items and their status (e.g. to-do, done)
Due dates, completion dates and notes you record
Uploaded files such as certificates, policies, licence renewals, confirmations and other supporting documents

You are responsible for ensuring you have the right to upload any documents or content you add to Cut Tape.

2.4 Payment information

When you subscribe to a paid plan, payments are processed by Stripe. We do not store your full credit card number on our servers.

Through Stripe we may receive limited information related to your payments, such as:

Billing name
Billing email
Billing address (if provided)
Last 4 digits of your card, card type and expiry month/year
Payment status and subscription status

2.5 Usage, diagnostic & log data

When you use Cut Tape, our infrastructure providers may automatically collect certain technical information, for example:

IP address and approximate location (country or region)
Browser type and version, device type, operating system
Pages viewed, actions taken (e.g. marking a task done)
Date and time of requests and responses
Basic server and application logs used for security, performance monitoring and debugging (for example, error messages if something fails)

This information is typically aggregated and used to ensure the Service is reliable, secure and functioning correctly.

2.6 Cookies and similar technologies

We use cookies and similar technologies to keep you logged in and to provide core functionality. We do not currently use third-party advertising cookies.

3. How we use your information

We use the information we collect for the following purposes:

To provide and maintain the Service – creating your account, authenticating you, and operating the app.
To generate tailored checklists – mapping rules and obligations to your business profile (country, state, structure, industry, size, revenue band).
To send reminders and notifications – for upcoming, due or overdue checklist items, where enabled.
To process payments – managing subscriptions, invoices and payment status through Stripe.
To improve Cut Tape – understanding which features are used, where users get stuck, and how performance can be improved.
To communicate with you – e.g. onboarding messages, important updates about the Service, and responses to support requests.
To protect our Service – preventing misuse, securing accounts, detecting suspicious activity and enforcing our terms of use.
To comply with legal obligations – where we are required to retain or disclose certain information.

We do not sell your personal information to third parties.

4. Legal bases for processing (if applicable)

Where privacy laws such as the GDPR or UK GDPR apply, we rely on a combination of the following legal bases to process your information:

Contract – to provide you with the Service you have signed up for.
Legitimate interests – such as maintaining and improving the Service, preventing misuse, and securing our systems.
Consent – where we ask you for specific permissions (for example, certain marketing emails).
Legal obligations – where we are required to retain or disclose information under applicable law.

5. How we share information

We share your information only where necessary to operate Cut Tape, comply with the law, or with your consent.

5.1 Service providers

We use trusted third-party providers to host and operate Cut Tape. These may include:

Hosting and infrastructure – cloud platforms that provide servers, databases, storage and security services (for example, Supabase and Vercel or similar providers).
Payment processing – Stripe processes your payments on our behalf.
Email delivery and support tools – tools used to send account-related emails and respond to support requests.
Analytics and monitoring – tools that help us understand usage and performance (where used).

These providers only process your data to perform services on our behalf and are subject to confidentiality and security obligations.

5.2 Legal and safety reasons

We may disclose information if we believe it is reasonably necessary to:

Comply with applicable law, regulation or legal process
Respond to valid requests from regulators or authorities
Protect the rights, property or safety of Cut Tape, our users or the public

5.3 Business transfers

If Cut Tape is involved in a merger, acquisition, sale of assets or similar transaction, your information may be transferred as part of that deal. We will notify you if your information becomes subject to a different privacy policy.

6. Data retention

We retain your information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes and enforce our agreements. In general:

Account and profile data is kept while your account is active. If you delete your account, we will delete or anonymise associated personal data within a reasonable period, subject to any legal obligations.
Uploaded documents are stored until you remove them or delete your account, unless we are required to retain certain records by law.
Checklist history may be retained to give you a useful audit trail while your account is active.
Technical logs are typically kept for a limited period (for example, weeks or months) to ensure security and diagnose issues.

7. Data location and international transfers

Cut Tape is operated from Australia. Our service providers may process data in other countries, depending on their infrastructure locations.

Where information is transferred across borders, we take reasonable steps to ensure it is protected in line with this Privacy Policy and applicable laws (for example, by using reputable providers with appropriate security controls).

8. How we protect your data

We apply technical and organisational measures to protect your information from unauthorised access, use, alteration or destruction. These measures include:

Encryption of data in transit (HTTPS)
Encryption of data at rest provided by our infrastructure
Hashed passwords and secure authentication flows
Role-based access controls and least-privilege principles
Regular updates and monitoring of core infrastructure

No online service can guarantee absolute security, but we work to protect your information and review our safeguards as the Service evolves.

9. Your rights and choices

Depending on where you live and which laws apply, you may have some or all of the following rights:

Access – to request a copy of the personal data we hold about you.
Correction – to ask us to correct or update inaccurate information.
Deletion – to request deletion of your personal data, subject to legal obligations.
Restriction – to ask us to limit how we use your data in certain circumstances.
Objection – to object to certain types of processing, such as direct marketing.
Portability – where applicable, to request your data in a structured, commonly used format.

To exercise these rights, please contact alexander@cuttape.com. We may need to verify your identity before responding.

10. Children's privacy

Cut Tape is intended for business use and is not directed at children. We do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices or legal requirements. When we make material changes, we will notify you by updating the "Last updated" date at the top and, where appropriate, via email or in-app notice.

12. How to contact us

If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, you can contact:

Email: alexander@cuttape.com