Privacy Policy

Last Updated: January 2026

1. Introduction

Intrepid Projects Pty Ltd (ABN 17 647 285 023) (we, us, or our) operates Orcado (Orcado or the Service), a personal productivity web application designed to help professionals manage their work, commitments, and delegated tasks.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use Orcado. By using our Service, you agree to the collection and use of information in accordance with this policy.

We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the Spam Act 2003 (Cth) for marketing communications.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address (used for authentication and communication)
  • Name (optional display name)
  • Password (securely hashed, never stored in plain text)
  • Subscription and payment status

2.2 User-Generated Content

As you use Orcado, you may create and store:

  • Commitments: Task and commitment descriptions you create
  • Contacts: Names and optional details (email, role, notes) of people you delegate work to. These contacts are reference data only and are not Orcado users
  • Domains: User-defined categories or areas of responsibility
  • Activity history: Timestamps and actions taken on commitments (created, completed, delegated, deferred, etc.)

2.3 Technical and Automatically Collected Data

We automatically collect certain information when you access our Service:

  • IP address
  • Browser type and version
  • Device information
  • Usage analytics (page views, feature usage)
  • Cookies for session management

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process your subscription and manage billing
  • Authenticate your access and secure your account
  • Send transactional communications (account verification, password resets, subscription notifications)
  • Send marketing communications (with your consent, and you may opt out at any time)
  • Analyse usage patterns to improve our product
  • Respond to your enquiries and provide customer support
  • Comply with legal obligations

4. Data Storage and Security

4.1 Infrastructure

Your data is stored using the following service providers:

  • Hosting: Vercel
  • Database: Convex
  • Data Location: United States

4.2 Security Measures

We implement appropriate technical and organisational measures to protect your personal information, including:

  • HTTPS encryption for all data in transit
  • Encryption at rest for database storage
  • Secure password hashing using industry-standard algorithms
  • No storage of payment card details (handled by our payment processor)

5. Third-Party Services

We use the following third-party services to operate Orcado. Each service has its own privacy policy governing their use of your data:

Stripe (Payment Processing)

We use Stripe to process subscription payments. Stripe receives your email address and payment method tokens. We do not store your credit card numbers. Stripe's privacy policy is available at stripe.com/privacy.

Clerk (Authentication)

We use Clerk for user sign-up, sign-in, and subscription management. Clerk receives your email address and securely manages your password. Clerk's privacy policy is available at clerk.com/privacy.

PostHog (Analytics)

We use PostHog to understand how users interact with our Service. PostHog receives anonymised usage events and page views. PostHog's privacy policy is available at posthog.com/privacy.

Loops (Email Communications)

We use Loops for transactional emails (account verification, password resets, subscription notifications) and marketing communications. Loops receives your email address and name. Loops' privacy policy is available at loops.so/privacy.

6. Data Retention

We retain your personal information as follows:

  • Active accounts: Your data is retained for as long as your account remains active
  • Cancelled subscriptions: Your data is retained for 120 days after cancellation, after which it is deleted
  • Account deletion requests: When you request deletion of your account, your data is purged immediately
  • Backups: Database backups are retained for 90 days for disaster recovery purposes

7. Your Rights and Controls

You have the following rights regarding your personal information:

  • Access: You can export your data (commitments, contacts, activity history) at any time
  • Correction: You can update or correct your personal information through your account settings
  • Deletion: You can delete your account and all associated data at any time
  • Opt-out: You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or contacting us
  • Complaint: You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have handled your personal information inappropriately

To exercise any of these rights, please contact us at nathan@intrepidprojects.com.au.

8. Data Sharing and Disclosure

8.1 What We Do Not Do

We do not:

  • Sell your personal information to third parties
  • Share your content with other users (Orcado is a personal productivity tool)
  • Use your content to train artificial intelligence or machine learning models
  • Provide your data to advertisers

8.2 When We May Disclose Data

We may disclose your personal information:

  • When required by law (court order, subpoena, or other legal process)
  • To protect our rights, safety, or property, or those of our users or others
  • In connection with a business transfer, such as a merger, acquisition, or sale of assets (in which case you would be notified)

9. Cookies

We use the following types of cookies:

  • Essential cookies: Required for session management and authentication. These are strictly necessary for the Service to function
  • Analytics cookies: Used by PostHog to understand how users interact with our Service

We do not use advertising or tracking cookies from third-party ad networks.

10. International Data Transfers

Your data is stored on servers located in the United States. By using our Service, you consent to the transfer of your data to the United States.

In accordance with Australian Privacy Principle 8, we take reasonable steps to ensure that our overseas service providers (including Vercel, Convex, Stripe, Clerk, PostHog, and Loops) handle your personal information in a manner consistent with the Australian Privacy Principles. These providers maintain appropriate security certifications and data protection practices.

11. Children's Privacy

Orcado is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Business Name: Intrepid Projects Pty Ltd
ABN: 17 647 285 023
Email: nathan@intrepidprojects.com.au
Address: PO Box 642, Dubbo NSW 2830

For complaints about the handling of your personal information, you may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.