Privacy Policy

Last updated: 30 June 2026 · BISH Digital, Melbourne, Australia

What we collect

When you use /start to generate a preview:

• Brief data: the business name, brief text, and email you submit
• Technical data: your IP address (used for rate limiting; not retained beyond 24 hours), the slug of any generated preview, build logs
• Generated content: the HTML, images, and metadata produced by the AI from your brief

If you purchase, Stripe collects your payment details directly — we never see your card information.

Why we collect it

• To deliver the preview link to you by email
• To follow up if you've requested revisions
• To prevent abuse (rate limits on builds and tweaks)
• To process your payment (via Stripe)

Who we share it with

• Google Stitch (Google LLC) — your brief text is sent to Stitch's MCP API to generate the site. Subject to Google's Privacy Policy.
• Stripe — if you pay, your payment data is processed by Stripe under Stripe's Privacy Policy.
• Postmark — emails we send to you are relayed via Postmark. Subject to Postmark's Privacy Policy.
• fal.ai — image generation (when used) routes through fal.ai. Subject to fal.ai's privacy terms.

We do not sell your data to third parties. We don't run advertising trackers.

Retention

• Build state files: 90 days (rolling deletion)
• Generated preview HTML: kept while the slug is live; deleted on request
• Customer emails: retained as a customer record while you have an active service with us
• IP addresses for rate limiting: 24 hours

Your rights

Under the Australian Privacy Act 1988 (Cth) you can:

• Request a copy of the personal information we hold about you
• Request correction of incorrect information
• Request deletion of your information (subject to legal record-keeping requirements)
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we've mishandled your data

Email bish@bish.com.au to exercise any of these rights.

Security

Data lives on our self-hosted infrastructure in Melbourne. We use TLS for all traffic, regular OS patching, and least-privilege access for our team. No system is 100% secure; in the rare event of a breach we'll notify affected users in line with the Notifiable Data Breaches scheme.

Children

BISH services are intended for businesses operated by adults. We don't knowingly collect data from anyone under 18.

Changes

We'll update this page when our practices change. The "Last updated" date at the top tells you when.

Contact

Privacy queries: bish@bish.com.au.