Customer data terms
Last updated 29 October 2026.
These terms are part of our terms of service. They cover the personal information your shop keeps in Halftonik about other people: your customers and their staff, club and school store members, people who order through your order page, portal or presentations, delivery recipients, and anyone else you add. We call this customer data. They're between your shop and Cross Angle Australia Pty Ltd (ABN 59 665 279 863), trading as Halftonik.
1. Who decides what
Your shop decides what customer data to keep and why. Halftonik stores and handles it for you, only to provide Halftonik, and only as you direct by how you use it, such as sending a quote, texting a customer or connecting another service. We don't use customer data for our own purposes, we don't sell it, and we don't use it for advertising or to train AI.
2. Your part
- Collect customer data lawfully, and tell people how you handle it, for example in your own privacy policy.
- Use Halftonik for messages about customers' own work, not marketing emails. Send marketing texts only to people who've agreed to them, as the Spam Act 2003 requires.
- Keep only what you need, and remove what you no longer need.
- Give access only to the people in your team who need it, using the roles in Halftonik.
- Send a supplier's link only to that supplier. For work sent out, it shows the artwork your customer approved, so the other shop can do the work; it never shows your customers' names or your selling prices.
3. Our part
- Handle customer data only to provide Halftonik to you, or where the law requires us to.
- Keep it confidential. Only people who need to, to run and support Halftonik, can reach it, and they're bound to keep it confidential.
- Look at your shop to help you only when your owner turns on support access in Settings, Security. It lasts 24 hours or until you turn it off, it's read only, it never shows card or bank details, and each look is recorded in your activity log.
- Protect it with the safeguards on our security page, including encryption, separation of each shop's information in the database, two-step sign-in for owners and admins, and daily backups.
- Keep it stored in Australia, except what goes to Stripe for card payments and to services you choose to connect.
- Help you answer requests from people to see, correct or delete their information. Most of this you can do yourself in Halftonik.
4. If something goes wrong
If we become aware that customer data has been accessed, disclosed or lost without permission, we'll tell the shop owner without undue delay, and within 72 hours. We'll explain what happened, what information is involved and what we're doing about it, and help you decide whether the breach must be reported under the Notifiable Data Breaches scheme and whom to tell.
5. Services that help us
These providers handle customer data to run Halftonik. Each is bound to protect it and to use it only to provide its service to us.
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, databases, file storage, backups, sending and receiving email (including customers' replies), text messages and AI help (Claude by Anthropic, through Amazon Bedrock) | Australia (Sydney, with backups in Melbourne) |
| Stripe | Card payments into the shop's own Stripe account, and our subscription billing | Australia and the United States |
We'll update this list, and email shop owners, at least 30 days before adding a provider that handles customer data. If you have a reasonable objection, tell us, and if we can't resolve it, you can cancel and we'll refund what you've paid for the time after the change.
Services you choose to connect
When you connect one of these, Halftonik sends or reads what's needed, on your instruction. They work under their own terms and privacy policies, and may handle information outside Australia.
| Service | What's shared |
|---|---|
| Your accounting system, such as Xero or QuickBooks | Invoices, customers and payments the shop sends to its books |
| Shippit | Delivery names, addresses, phone numbers and parcel details for bookings |
| Shopify, WooCommerce, BigCommerce, Squarespace or Wix | We read paid orders from the shop's own store |
| Zapier | The events the shop chooses to send |
6. When your account ends
You can download your customers, jobs, invoices and payments any time, including after a trial or plan ends. When your account ends, you have 30 days to ask for a copy of your information. We then delete customer data, except what the law requires us to keep. It's gone from backups within 35 days, and earlier file versions within 90 days.
7. Checking our safeguards
If you need details of our security for your own records or a customer's questionnaire, email support@halftonik.com and we'll give you what we reasonably can.
8. If these terms and others differ
For customer data, these terms apply ahead of the terms of service if the two ever differ. Questions? Email support@halftonik.com.