Privacy Policy — Steady Sprout Studio

Last updated: 20 October 2026

Steady Sprout Studio ("we", "us") makes printable planners, digital templates, a grants digest and small online tools, and sells them through Gumroad, Etsy and Redbubble. We are a small team of people and AI tools working together. This policy explains what personal information we handle and how. We follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) as good practice.

1. What we collect

• Purchases. When you buy from us, the marketplace (Gumroad, Etsy or Redbubble) processes your payment and shares with us your name, email address, country and what you bought. We never see or store your full card details.
• Email list (opt-in only). If you sign up to a free download or our newsletter (sent with Kit), we keep your email address, first name if you give it, and a record of when and where you signed up (your consent).
• Messages. If you email us, we keep your email address and the message so we can reply.
• Done-for-you file services. If you buy a service where you send us a file (for example contact-list cleaning), we handle that file only to do the job (see section 4).
• Links and stats. Our links may carry tracking tags (for example utm_campaign) so we can see which post or video brought a visit. Marketplaces and social platforms give us summary statistics; we do not track you across other sites.

We do not knowingly collect information from children under 16, and we do not collect sensitive information (such as health, financial account or government ID details).

2. Why we use it

To deliver what you bought, provide support and refunds, send the emails you asked for, keep business and tax records, prevent fraud, and improve our products. We will not sell or rent your personal information.

3. Who we share it with

Only the services we use to run the shop, each under its own privacy policy: Gumroad (store and payments), Etsy, Redbubble, Kit (email newsletter), Google (email and file storage), Buffer, Pinterest, YouTube and TikTok (social posting; no customer data is shared with these), and our cloud computer and AI tool providers (which help us prepare products and replies). Several are based overseas, mainly in the United States and Ireland. We may also disclose information if the law requires it.

4. Files you send us for a service

• We use your file only to deliver that order, and never to build, sell or share lists.
• Our process looks only at column headers and row counts. We don't read the contents of your rows, and we don't feed them to AI chat tools.
• Files are kept in a private folder and our mailbox, and are deleted within 7 days after delivery (our email provider permanently erases deleted mail within 30 days). We keep a short deletion log without the file contents.
• Please don't send sensitive information, card numbers or government identifiers. We will refuse files that contain them.

5. Email marketing

We only email people who opted in. Every marketing email names us, gives a contact address and has a working unsubscribe link; unsubscribing takes effect within 5 working days. Purchase receipts and delivery emails are not marketing.

6. Security and retention

We use strong unique passwords, two-factor authentication where offered, and restricted access. We keep purchase and tax records for at least 5 years as Australian tax law requires, email-list records until you unsubscribe (plus a consent record), and service files as described in section 4.

7. Your choices and rights

You can ask to see or correct the personal information we hold about you, or ask us to delete it where we're not required to keep it. Email us and we'll respond within 30 days. You can unsubscribe from marketing at any time.

8. Google user data

Our own YouTube tool uses Google's YouTube Data and YouTube Analytics access only to upload videos to, and read statistics for, our own Steady Sprout Studio channel. Its access tokens are stored privately on our own systems, and we never share or sell this Google data. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time at https://myaccount.google.com/permissions. Questions: steadysproutstudio@gmail.com.

9. Complaints

Contact us first at the address below. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Contact

Steady Sprout Studio — steadysproutstudio@gmail.com

We may update this policy; the date at the top shows the latest version.