Privacy policy
LignaFlow Shopfloor is run by Xylep Pty Ltd, trading as LignaFlow (“we”, “us”). This policy explains what we collect when your business uses LignaFlow, why, and what you can do about it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
- Account details – the name, email address and password you sign up with (passwords are stored only as a one-way hash).
- Your shop’s data – everything you and your team enter: jobs, items, clients, drawings, site measures and photos, variations, work orders, stock, schedules, timesheets and pay rates.
- Billing details – handled by Stripe. We never see or store your full card number.
- Delivery locations – if staff scan a delivery on site, the phone’s location at that moment is saved against the delivery so you can confirm it reached the right site.
How we use it
Only to run the service for your business: to show your data to the people you invite, send the emails you ask it to send, bill your subscription and help when you contact us. We don’t sell your data and we don’t use it for advertising.
Who else handles it
- Railway hosts the app and its database.
- Stripe processes subscription payments.
- Anthropic processes the text and photos you send to Ask LignaFlow and photo auto-detect, only when you use those features.
- Microsoft – if you connect Outlook, emails are sent from your own Microsoft 365 account.
These providers may store or process data outside Australia. We only share what each needs to do its job.
Where it’s kept and how it’s protected
Your shop’s data is kept in a managed PostgreSQL database run by Railway and is only reachable over encrypted (HTTPS) connections. Each shop’s data is kept separate, and only people you invite can see it. Staff accounts can’t see pay rates or change jobs. Owners and managers can download all of their data as a single file at any time from Settings → Access & data.
How long we keep it
While your account is open. If the account lapses it stays read-only, so you can come back or take a copy. To have your shop’s data deleted, email us and we’ll delete it within 30 days, except billing records the law requires us to keep.
Your choices
You can see, correct or export your information in the app, or ask us to delete your account. To make a privacy request or complaint, email contact@lignaflow.com. If you’re not happy with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).