Privacy

Placeholder. Have this reviewed by a lawyer before you rely on it or collect personal information from real customers. It is not legal advice.

Fairsaid is operated by Craig, an Australian sole trader. Before you collect real personal information, add your legal name, ABN, address, and a contact email here. The address privacy@fairsaid.example is a placeholder and is not a working mailbox.

What the app stores

• Account email, name, and a password hash if you set a password.
• A session cookie so you stay logged in. Magic-link tokens are stored as hashes and expire after 30 minutes.
• Business name, the public link, the question you ask, and any incentive description.
• Testimonials: name, optional role or company, optional photo, star rating, text, and whether the person agreed to public display.
• A removal code so the person who wrote a testimonial can delete it without an account.

Who can see a testimonial

The business owner can read testimonials they receive. A testimonial is shown on the public collection page and in the widget only if the customer agreed to public display and the owner approved it. Photos of testimonials that are not public are not served to other visitors.

How long it is kept

Testimonials stay until the customer uses their removal link, or the owner deletes them or the space. Deleting an account removes that person’s spaces, testimonials, and photos from this app. Take your own backup of the database file if you need a copy. This MVP does not promise a retention schedule.

Cookies

The app sets one httpOnly cookie, fairsaid_session, to keep an owner logged in. It is not used for advertising.

Australian privacy law

If you are covered by the Privacy Act 1988, you will need a privacy policy that matches the Australian Privacy Principles. Some small businesses fall under an exemption. Do not assume this placeholder meets that Act. Have it reviewed before launch.