Privacy

Privacy Policy

Console & client portal · Last updated: 7 July 2026

Who this covers

Number One Systems is a Melbourne-based AI automation consultancy. This policy explains how we handle personal information in our Console and client portal (app.numberonesystems.com) — the secure, sign-in area where we manage projects and where our clients track their work. It sits alongside the privacy policy on our main website. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we hold in the portal

Depending on your relationship with us, the portal may hold:

Your account details — name, email address and password (passwords are stored hashed by our authentication provider; we never see them)
Your business details — business name, contact details and the services you've engaged us for
Project information — onboarding answers, tasks, deliverables, meeting notes and progress
Files and documents you or we upload for the project
Messages you exchange with us through the portal
Results and reporting — the metrics and monthly reports we prepare for you
Billing information — your invoices and payment status (card details are handled entirely by Stripe; we never store them)

Why we hold it

We use this information to deliver the services you've engaged us for: to set up and run your project, to communicate with you, to report on results, and to bill for the work. We don't sell your information, share it with advertisers, or use it for anything unrelated to serving you.

Who processes it on our behalf

Your information is stored securely in our database. To run the Console and portal we rely on a small number of trusted providers who process data on our behalf:

Supabase — our database, authentication and file storage
Stripe — payment processing for setup fees and subscriptions
Resend — sending the emails you receive from us (confirmations, reminders, reports)
Vercel — hosting the application

These providers may store data outside Australia, and each handles it under their own privacy terms. We only share what's needed for them to perform their function.

How your data is kept separate and secure

Access is protected by sign-in, and every account only ever sees its own information — this is enforced at the database level (row-level security), not just hidden in the interface. Clients cannot see each other's data, and staff access is limited to their role. Data is encrypted in transit. No system is ever completely secure, but we take reasonable, active steps to protect what we hold.

How long we keep it

We keep your information for as long as you're a client and for a reasonable period afterwards. When an account is closed or a subscription cancelled, related data is scheduled for automatic clean-up and removal. You can also ask us to remove your information sooner.

Access, correction and deletion

You can view and update much of your information directly in the portal's Account area, including closing your account. You can also ask us at any time to show you what we hold, correct it, or delete it — email help@numberonesystems.com and we'll action it promptly.

Changes to this policy

If we change how we handle personal information, we'll update this page. The date at the top reflects the latest revision.

Questions about this policy or your information? help@numberonesystems.com