Legal
Privacy Policy
Last updated: 6 May 2026. Effective date: 6 May 2026.
Previo (operated by Saroj Bhandari, ABN active from 4 April 2026, trading as Previo, VIC 3033) operates the Previo platform, accessible at previo.app and related subdomains (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. We are committed to handling your information in compliance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By creating an account or using the Service, you agree to the collection and use of information described in this policy. If you do not agree, please do not use the Service.
1. Who We Are
Previo is an Australian sole trader business operated by Saroj Bhandari (ABN active from 4 April 2026), providing inventory and supplier management software for independent cafes. Our business is located in Footscray, VIC 3033, Australia. For privacy-related inquiries, contact us at saroj.bhandari@previo.com.au.
2. Information We Collect
Account and Profile Information
When you register, we collect your email address and the name and location of your cafe. You may optionally provide a display name and avatar preference. This information is used to create and manage your account.
Business Data You Enter
The Service stores data you input directly, including inventory items and stock levels, supplier names and contact details, purchase orders and delivery records, menu items and recipes, and invoice details including amounts and due dates. This data belongs to you. We process it solely to provide the Service.
Sales and Order Data from Integrations
If you connect Square POS or Uber Eats, we receive sales transaction data from those services through their official APIs. This includes item names, quantities sold, sale dates, and order identifiers. We do not receive customer payment card details or personally identifiable information about your customers through these integrations.
Billing Information
Subscription payments are processed by Stripe. We do not store your credit card number on our servers. We receive and store a Stripe customer ID and subscription status so we can manage your plan. Stripe's privacy policy governs the handling of your payment details and is available at stripe.com/privacy.
Usage and Technical Data
We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. We use Sentry for error monitoring, which may capture technical information such as stack traces, browser version, and operating system when an error occurs. This data is used exclusively for diagnosing and fixing technical issues.
Communications
If you contact us by email or through the platform, we retain that correspondence to respond to your inquiry and improve the Service. We send transactional emails (such as low stock alerts and invoice reminders) through Resend. You can manage notification preferences from your account settings.
3. How We Use Your Information
We use the information we collect to:
- •Create and maintain your account and authenticate your identity
- •Provide, operate, and improve the core features of the Service
- •Sync data with connected third-party services such as Square and Uber Eats
- •Generate inventory suggestions and reorder recommendations through our pattern engine
- •Send transactional notifications you have opted into, including low stock alerts and overdue invoice reminders
- •Process and manage your subscription through Stripe
- •Monitor the technical health of the platform and diagnose errors
- •Comply with legal obligations and enforce our Terms of Service
We do not use your business data to train AI models, sell advertising, or share it with third parties for their own marketing purposes.
4. Third-Party Services We Use
We work with a small number of trusted third-party providers to operate the Service. Each provider processes only the data necessary for their specific function.
| Provider | Purpose | Data Processed |
|---|---|---|
| Supabase | Database and authentication | All account and business data |
| Stripe | Payment processing | Billing details, subscription status |
| Resend | Transactional email | Your email address, notification content |
| Square | POS sales sync (optional) | Sales transactions, item names |
| Uber Eats | Delivery order sync (optional) | Order items, quantities, timestamps |
| Sentry | Error monitoring | Stack traces, browser info (no personal data) |
| Vercel | Hosting and infrastructure | Request logs, server-side code execution |
All providers are contractually bound to use your data only to deliver the service we have engaged them for, and not for their own commercial purposes. Supabase and Vercel infrastructure is hosted in data centres located in the United States and Australia.
5. Data Storage and Security
Your data is stored in Supabase (PostgreSQL) with row-level security policies enforced at the database layer, ensuring your cafe's data is never accessible to other users. All data is encrypted at rest and in transit using TLS 1.2 or higher.
Sensitive credentials, such as OAuth access tokens for Square and Uber Eats, are encrypted at rest using AES-256-GCM before being stored in our database. Encryption keys are stored separately from the data they protect.
While we implement industry-standard security measures, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to enable two-factor authentication, which is available in your account security settings.
6. Data Retention
We retain your account and business data for as long as your account remains active. If you cancel your subscription, your data is retained for 90 days to allow you to reactivate or export your records. After that period, your data is permanently deleted.
If you request account deletion, we create a secure backup retained for 30 days to allow for recovery in case of accidental deletion. After 30 days, all data in the backup is permanently and irreversibly purged. Sales and usage logs may be retained in aggregated, anonymised form for up to 12 months for service improvement purposes.
7. Your Rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the following rights regarding your personal information:
- •Access: You may request a copy of the personal information we hold about you.
- •Correction: You may request that we correct inaccurate or incomplete information. Most data can be updated directly from your account settings.
- •Deletion: You may request deletion of your account and associated data at any time from Settings. We will process this within 30 days.
- •Portability: You may request an export of your business data in a machine-readable format. Contact us to arrange this.
- •Complaints: If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
To exercise any of these rights, email us at saroj.bhandari@previo.com.au. We will respond within 30 days.
8. Cookies and Tracking
We use session cookies required for authentication and security, including an HttpOnly cookie to maintain your logged-in session and short-lived state cookies used during OAuth flows with third-party services. These are strictly necessary and cannot be disabled without breaking the Service.
We do not use advertising cookies, third-party tracking pixels, or analytics cookies that track you across other websites. We do not use Google Analytics or similar behavioural tracking tools.
9. Children's Privacy
The Service is intended for use by business owners and managers. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.
We encourage you to review this page periodically. Previous versions of this policy are available on request.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your information, please contact our Privacy Officer:
Previo
Operated by Saroj Bhandari (Sole Trader)
Email: saroj.bhandari@previo.com.au
Footscray, VIC 3033, Australia
© 2026 Previo. Operated by Saroj Bhandari (ABN active from 4 April 2026). VIC 3033, Australia.
Return to home