Privacy Policy

Last updated: 30 August 2026

This explains what Packaroo collects, why, where it is kept, and how to have it removed. Packaroo is operated by Packaroo Pty Ltd (ABN 56 688 342 921).

What we collect

Your account. Email address, and the date you signed up. Passwords are handled by our authentication provider and we never see them.

Your work. Projects, artwork you upload, the designs you build, rendered previews, and the Spec Packs you generate.

Billing. Which plan you are on, when your billing period runs, and a record of each Spec Pack generated, refunded or purchased. We do not receive or store your card details - those go directly to our payment processor, and never reach our systems.

Support and feedback. If you send feedback from inside the product, we receive what you wrote along with the page you were on, the product you were working on, your screen size, your browser, and any errors your browser had recently recorded. That technical context is attached so we can reproduce the problem. Who sent it is taken from your signed-in session.

Sharing. If you share a design for approval, we record comments and approvals left against it, including the name or email the reviewer chooses to give.

What we do not do

• We do not sell your personal information.
• We do not use your designs or artwork to train machine learning models.
• We do not share your work with anyone except the people you deliberately send a share link to, and the service providers listed below.

Why we hold it

To run your account, store and render your designs, produce Spec Packs, take payment, provide support, and to meet our record-keeping obligations. Australian tax law requires transaction records to be kept for five years.

Who else handles it

We disclose your information to service providers in these categories, and only what each one needs to do its job:

• Hosting and database, to store your account, projects, artwork and rendered images
• Payment processing, to take payment and hold card details we never see
• Application hosting and delivery
• Email delivery, to send you account and billing emails

Where each category holds your information:

• Hosting and database: Australia (ap-southeast-2)
• Payment processing: United States and elsewhere
• Application hosting: global content delivery
• Email delivery: United States
• Product analytics and session recording: United States

We name the specific providers on request. Ask at info@packaroo.design and we will tell you who they are. They are described by category here so that this policy stays accurate when we change one, rather than quietly going stale between amendments.

Some of your information is disclosed overseas, principally to the United States, because payment processing and email delivery are handled outside Australia. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles, and we use established providers with their own contractual protections. You should be aware that overseas recipients are also subject to their own local laws, and that we may not be able to enforce those protections in every case.

Analytics and session recording

We use a product analytics and session recording tool to understand how people use Packaroo, so we can find where the product is confusing or broken.

What is recorded:

• Pages you visit, and buttons and controls you interact with
• A small set of named events: creating a project, adding artwork, opening the 3D view, creating a share link, generating a Spec Pack, and starting checkout
• A session recording, which is a replay of the interface as you used it
• Your browser, device type and screen size

Session recordings include the design canvas and the artwork on it.

What is not recorded:

• Anything you type. Text entered into fields is masked in your browser before it is sent.
• Sign-in pages, the welcome questions, and shared proof pages. No session recording is made on any of them. The welcome questions ask for your name and company, and the two permission questions there are the one place you decide what we may contact you about - a recording of somebody agreeing to something would itself be a thing they had not agreed to. On a shared proof page we count visits and interactions so the person who sent the link can see it was opened, but we never record the screen.

You are identified to our analytics provider by your Packaroo account ID and nothing else. Not your email, not your name, not your project names.

If you would prefer not to be recorded, email info@packaroo.design and we will exclude your account. We will also delete analytics data on request, along with the rest of your account.

Cookies

We use cookies that are necessary to keep you signed in and to keep the service secure. We do not currently use advertising cookies or third-party tracking cookies.

Share links

A share link is a long, unguessable web address. Anybody who has it can see the design it points at without signing in. Treat a share link like the file itself, and revoke it when it is no longer needed.

Storage buckets and public files

Some rendered preview images are stored so they can be displayed on shared pages. These are served from addresses that are unguessable but not access-controlled, which is what allows a client with no account to open a proof. Your source artwork, your projects and your Spec Packs are not public.

How long we keep it

Your work is kept while your account exists. If you delete a project, it is removed from your account and from our backups on their normal expiry cycle. Billing records are kept for five years as tax law requires, even after an account is closed.

Your choices

You can ask us to:

• Give you a copy of the personal information we hold about you
• Correct anything wrong
• Delete your account and your work

Email info@packaroo.design. We will respond within a reasonable period and, in most cases, within 30 days. Some information may need to be retained where the law requires it, and we will say so if that applies.

Security

Access to production data is restricted, connections are encrypted in transit, and payment details never reach our systems. No service can promise perfect security, and you should keep your own copies of work you rely on.

Children

Packaroo is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.

Changes

We will update this policy as the product changes. Where a change materially affects you we will tell you by email.

Complaints

Contact us first at info@packaroo.design and we will look into it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.