Privacy Policy

The Short Version

We only collect the information you give us, and we only use it for the reason you provided it. If you contact us, apply to The Practice, or join the Trellis waitlist, we use your details to reply or notify you. If you order a Bracket, we use your details to design and deliver your project.

We do not sell your data, we do not rent it, and we do not use it for advertising. Your Brief, your files, and the Directions we design for you remain strictly private.

1. What Information We Collect

We collect personal and commercial information when you interact with our site or use our services:

• Enquiries & Applications: If you use our contact form or apply to The Practice, we collect your name, email address, selected topic, and your message.
• Trellis Waitlist: Your email address and your preferred gaming platform (optional).
• Bracket Orders: Your name, email address, business name, homepage URL, website platform, and your confirmation that you hold the authority to have the site reskinned.
• Payments: Payments are processed securely on Stripe’s hosted checkout. We never see or store your credit card details. Stripe simply provides us with the transaction status, amount, promo codes used, and reference IDs required to process refunds.
• Your Brief & Assets: Your answers to our onboarding questions and any files you upload (e.g., logos, brand guidelines, photos).
• Your Current Homepage: After payment, we capture a screenshot of your existing homepage. We also read its public content and SEO data, and retrieve its Google PageSpeed score. While your homepage is public, we store this data privately alongside your order.
• Post-Order Communications: Your chosen “Pick”, revision notes, consent to feature in “Our Work”, and any Small Changes requested.
• Installation Access: If we install your Bracket, you must provide a temporary administrator account. This is used solely for installation, is never saved in our order system, and is deleted by you immediately afterward.

Note: You do not need to provide personal information to simply browse our public website. We do not require clients to create passwords; your Dashboard is accessed via a secure, private link emailed directly to you.

2. How We Use Your Information

We use your information strictly to provide our services and communicate with you:

• To read and reply to your messages or applications.
• To notify you when Trellis launches (if you joined the waitlist).
• To fulfil your Bracket order: reviewing your Brief, generating the three Directions, finalising your Pick, executing installations, and completing Small Changes.
• To send transactional emails (from orders@mizar.com.au) regarding your order milestones (e.g., payment confirmed, Brief received, Directions ready).
• To process payments, issue refunds, and maintain financial records required by Australian tax law.
• To feature your finalised Bracket on our “Our Work” portfolio (only if you explicitly grant permission at the Pick stage).

How we use AI in our design process: We utilise industry-leading design tools, including generative AI models (detailed in Section 4), to create your Directions. We provide these tools with your Brief, uploaded files, and homepage screenshot. Crucially, a human at Mizar reviews your Brief, directs the AI, and rigorously quality-checks every Direction before it reaches your Dashboard. We do not use your Brief, files, or Directions to generate designs for any other client.

3. Cookies and Analytics

We use Google Analytics 4 (GA4) on our public pages only to understand how our site is used (e.g., visitor numbers, referral sources, basic device/browser data, and approximate city/country location derived from your IP address).

• Cookies: GA4 sets cookies (named _ga and _ga_ followed by an ID) to recognise returning browsers. Mizar sets one internal cookie (__Host-mz_gaffer) solely to maintain active staff sign-ins for order processing.
• Privacy Protections: We have explicitly disabled Google Signals and ad personalisation. None of this data is used for advertising or remarketing. Furthermore, your private Dashboard and Share links do not load Google Analytics or any other trackers. Directions are shown as they will look on your site, so they may load fonts and stylesheets from third-party providers such as Google Fonts.
• Opting Out: You can opt out by blocking cookies in your browser or installing the Google Analytics Opt-out Browser Add-on. Our site functions perfectly without cookies.

4. Who Handles Your Data (Our Sub-Processors)

We utilise a select group of trusted service providers. They are authorised to process your details only to the extent necessary to provide their specific service to us:

• Vercel: Hosts our website, forms, and your Dashboard. Vercel processes basic technical data (e.g., IP addresses) to deliver the site. Vercel’s BotID checks technical browser signals to prevent automated spam. Vercel also securely stores your Brief files and Bracket deliverables.
• Neon: Hosts the database where form submissions and order records are stored.
• Stripe: Securely processes payments and refunds. When paying, you are subject to Stripe’s privacy policy.
• Resend: Manages the delivery of our transactional emails to you, and internal notification emails to us.
• Google: Provides GA4 analytics (see Section 3) and PageSpeed Insights. We only send your public homepage URL to Google via our API key to retrieve your performance score.
• Anthropic (Claude) & OpenRouter: We use Claude AI models to assist in generating Directions. Data Protection: Your Brief and assets are not used to train AI models. Claude also evaluates your homepage screenshot to ensure it renders correctly on your Dashboard; this check is routed through OpenRouter, a provider configured for zero data retention.

We will never share your details with any other third party unless compelled by law.

5. Confidentiality & Who Sees Your Bracket

Your Bracket project is strictly confidential. Your Dashboard, Brief, assets, Directions, and delivered files are visible exclusively to:

1. You: Via your secure Dashboard link (emailed only to the authorised Contact).
2. Your Invitees: Anyone you send your “Share” link to. (This link shows your business name, homepage screenshot, Directions, and order status, but allows no edits. You can revoke this link at any time from your Dashboard).
3. Us: Mizar personnel fulfilling your order.

Nothing we create for you is made public by us, except on your own live website, or on our “Our Work” portfolio if you have opted in (which you may withdraw at any time via email).

6. Security and Data Retention

We mandate TLS encryption for all data in transit. We restrict internal access to your information to staff actively fulfilling your order. Dashboard and Share links are generated as complex, randomised cryptographic strings that cannot be guessed.

• Unpaid Orders: Will be deleted entirely (including all associated data) after 48 hours of inactivity (non-payment).
• Paid Orders: Once your Bracket is closed, we securely retain your Dashboard files so you may access them in the future. Financial and transaction records are retained for five (5) years to comply with Australian tax law.
• Right to Erasure: You may ask us to delete your Brief, files, Directions, waitlist sign-ups, or messages at any time.

7. Cross-Border Data Transfers

To provide a high-quality service, our digital infrastructure providers (listed in Section 4) may store or process your data on secure servers located outside of Australia, primarily in the United States. By using our website and services, you consent to this cross-border transfer, knowing we only partner with providers compliant with strict, global data protection standards.

8. Your Rights

Under the Privacy Act 1988 (Cth), you have the right to request access to the personal information we hold about you, and to ask us to correct or delete it.

• To exercise these rights, email support@mizar.com.au. We will respond within 14 days. For order-specific requests, please write from the email address attached to the order so we can verify your identity.
• If you have a privacy concern, please contact us first so we can resolve it quickly. If you are not satisfied with our response, you have the right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC).

9. Changes to this Policy

We may update this policy periodically. The newest version will always be published on this page, and the “Status” date at the top will be updated accordingly.

10. Contact Us

• For general privacy queries: support@mizar.com.au
• For order-related queries: orders@mizar.com.au