Privacy

What the website collects

raisin.day is a set of static pages. Visiting it collects nothing that identifies you unless you choose otherwise.

• Nothing by default — No analytics runs, no cookie is set and nothing about your visit goes to anyone else until you accept analytics.
• If you accept analytics — Google Analytics records the pages read, the city and country the visit came from, the device and browser, and the site or search that led here. It also records interactions with a page: how far down it is scrolled, and clicks on links leading off the site.
• Asking for an invite — The name, email address, company, entity type and state you enter, together with how you first arrived at the site — the campaign, referring site or search that brought you. That last part is recorded in your browser when you arrive and only sent if you submit the form.
• Server logs — Netlify serves the site and keeps ordinary web server request logs: an IP address, a page path, a browser string, a timestamp. They deliver pages and defend against abuse. This happens whatever you choose about analytics, and Raisin does not use those logs to build a picture of a visitor.

What the application collects

The application at app.raisin.day is invite-only during the alpha. It collects what it needs to assemble and keep your plan, and nothing beyond it.

• Account — Your name and email address.
• Company — The business name, ABN, entity type and the states it operates in, along with the obligations and dates you confirm.
• Documents you provide — Certificates, registrations and similar paperwork you upload, and their contents.
• Reference data Raisin looks up — Raisin reads published business reference data, such as an Australian Business Register record, to save you typing details it can already see. These are reads of published reference data and nothing more. Raisin does not check your standing with any regulator, and nothing it does is a live check of any government system.
• Usage — How the application is used: which screens are opened and which actions taken, so it can be made to work better.

What Raisin does with it

Raisin does not sell personal information, does not run targeted advertising, and does not use your business data to train machine-learning models.

• Assembles and maintains your plan, and shows you what it holds.
• Sends the notifications and reminders the plan produces, and replies to support requests.
• Improves the product, including understanding which parts are used and which are not.
• Meets legal obligations.

Who else holds it

These are the services Raisin uses that hold personal information. Each is named with what it is for, what reaches it, and where it processes.

Information that leaves Australia

Your account, your company details and the documents you upload are held in Australia, in Supabase’s Sydney region. They are not sent overseas.

Two services do process outside Australia, in the United States: Resend, which sends the application’s email, and Google Analytics, if you accept it. Sending personal information to them is a cross-border disclosure under Australian Privacy Principle 8, and Raisin takes reasonable steps to confirm each handles personal information consistently with the Australian Privacy Principles before using it.

HubSpot sits in between. Its data centre for this account is in Australia, so invite requests are stored here rather than overseas. HubSpot is a United States company and its staff can reach the account for support, so the same Principle 8 steps apply to it.

Google Analytics is the one you control directly. Nothing reaches Google unless you accept it: no script, no cookie and no request is made to Google before you do, and declining leaves the site in the same state as never having been asked.

Cookies

The website sets no cookie at all unless you accept analytics. If you do, Google Analytics sets the following.

Email from Raisin

Raisin doesn’t count opens or clicks in its marketing emails. Those emails don’t contain a tracking pixel, so Raisin cannot tell whether one was opened, or when, or on what.

Links go straight to where they say they go. Nothing is rewritten to route a click through somewhere else on the way, which you can check by hovering one.

Changing your mind about analytics

Analytics preferences, at the foot of every page, reopens the choice whenever you want. Withdrawing stops collection on the page you are already on rather than only on the next one, and deletes the cookies above.

Your choice is remembered in your browser for twelve months, after which you are asked again. It is not sent anywhere.

How long it is kept

Analytics data is kept by Google for 14 months from the event, after which it is deleted. The records tied to a returning browser are extended each time that browser comes back, and expire 14 months after its last visit.

Invite requests are kept while the alpha is running and while there is a reason to reply to them.

Application data is kept while the account is open, and deleted when you ask. How long anything is kept after an account closes is not settled yet; this page will say so once it is.

If your business has record-keeping obligations of its own, they are yours rather than Raisin’s. Export anything you are required to keep before asking for deletion.

Security

Data is encrypted in transit and at rest. Access to production systems is restricted to the people who need it. Raisin serves its own typefaces rather than loading them from a third party, so no request leaves the page to anyone who was not named above.

If a data breach happens that is likely to cause serious harm, Raisin will notify the Office of the Australian Information Commissioner and the people affected, under the Notifiable Data Breaches scheme in Part IIIA of the Privacy Act.

What you can ask for

Under the Australian Privacy Principles you can ask to see the personal information Raisin holds about you, correct it if it is wrong or out of date, ask for it to be deleted, or complain if you think Raisin has mishandled it.

If you are not satisfied with the answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

This page is updated when what it describes changes, and the date at the top moves with it. Where a change is material, the people it affects are told directly rather than left to notice.

Contact

Questions about this policy, or about information Raisin holds, go to privacy@raisin.day.