Privacy Policy

Last updated: 18 October 2026 This Privacy Policy explains what SUKKO PTY LTD (ABN 62 701 470 126) ("Sukko", "we", "us") collects through the Sukko customer portal, and why. The Sukko platform itself runs in your own cloud — your platform's runtime data never leaves your infrastructure and never reaches us. What we collect. Your account identity (via Firebase authentication), your organization, your subscription and billing status, and your license records. We do not collect or store the data your platform processes at runtime. Service providers (sub-processors). We share limited account data with the providers that run the portal: Google Firebase (authentication), Stripe (payments — we never store card details), Cloudflare (Turnstile bot protection on our forms), and Postmark (transactional and notification email). These providers process data on our behalf under their own terms; some are located outside Australia, so your account data may be processed internationally. Legal basis and retention. We process account data to provide the portal and to fulfill our contract with you, and we retain billing records for as long as required by law. Marketing. If you opt in at signup, we may send you occasional product updates and tips. Consent is optional and never pre-selected; you can withdraw it anytime via the unsubscribe link in each email or by contacting contact@sukko.dev. Your rights. Subject to applicable law (including the GDPR and the Australian Privacy Act), you may request an export or deletion of your account data from the account page. We honor requests promptly, subject to legal retention requirements for billing records. Enterprise customers requiring a Data Processing Agreement may request one. Cookies. The portal sets a small number of strictly necessary cookies for sign-in sessions, security (CSRF), and your theme preference. We do not use advertising or tracking cookies. Privacy questions or requests: contact@sukko.dev