Privacy Policy
1. Who we are
NextKnock is operated by Joel B. Johnson, trading as NextKnock (ABN 56 386 043 210), referred to as "we". You can contact us at support@nextknock.com.au. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
2. What we collect
- Account details. Your email address. If you sign in with Google, we ask Google only for your email address. If you use an emailed sign-in link, we collect the address you enter.
- Subscription details. Your Stripe customer ID, plan, subscription status and billing dates. Payments are handled by Stripe. We never see or store your card details.
- Search activity. The industry, state, city and filter you choose, the number of results (including whether a search found nothing), and the time of the search. For free previews we also record your IP address to enforce daily limits.
- Cookies. One essential cookie that keeps you signed in for up to 30 days, and a short-lived cookie used during Google sign-in. We don't use advertising or analytics cookies.
- Messages. Anything you send us, such as support emails.
3. Business listing data
Search results show publicly available information about businesses from Google Maps, such as name, address, phone number, website, rating and links to social pages a business lists. We retrieve it when you search and don't keep a copy. The only thing we keep is a note that a particular search (an industry and a place) found no businesses, for up to 30 days, so that repeating it doesn't cost anything. Some businesses are sole traders, so a listing can include personal information. If you are listed and have a concern, contact us. To change or remove a listing at its source, use your Google Business Profile.
4. How we use information
We use your information to sign you in, provide and secure the service, apply search limits, manage subscriptions and billing, answer your questions, and meet legal obligations. We don't sell personal information and we don't build advertising profiles.
5. Who we share it with
We use these service providers, who process information on our behalf: Cloudflare (hosting and database), Google (sign-in and Maps data), Stripe (payments) and Resend (the emails we send you: sign-in links, and welcome, subscription and cancellation emails). Some of them store or process information outside Australia, including in the United States. We take reasonable steps to make sure they handle information appropriately. We may also disclose information where the law requires it.
6. How long we keep it
- Account and subscription details: while your account is open, and for five years where tax or accounting rules require billing records.
- Free-preview IP addresses: deleted after 30 days.
- Emailed sign-in links: expire after 15 minutes.
- Notes that a search found no businesses: deleted after 30 days.
- On request, we will delete your account and the personal information we hold, apart from what we must keep by law.
7. Security
We take reasonable steps to protect information, including encrypted connections and storing sign-in session tokens in hashed form. No system is completely secure, so please protect your own account.
8. Access and correction
You can ask to see, correct or delete the personal information we hold about you by emailing support@nextknock.com.au. We will respond within 30 days.
9. Complaints
Contact us first. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
10. Changes
We may update this policy. The effective date at the top shows the latest version.