Spine OS · Legal
Privacy & Data Handling Policy
Version v1.0 · Last updated: 13 June 2026
This policy explains what personal information Mindspan Pty Ltd (ABN 88 377 453 125) ("Mindspan", "we", "us") collects through the Spine OS website when you join the waitlist or buy the Kit — and, just as importantly, what it does not collect, because the Kit runs on your machine. It aligns with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. The single most important point
The Spine OS Kit is local-first. Once installed, it runs on your own storage. The operational data and files you create in it — your business records, client information, finances, documents — stay on your machine and are not transmitted to, collected by, accessed by, or hosted by Mindspan. Mindspan cannot see your vault and receives no customer or business data through the operation of the Kit.
This keystone describes the self-install Kit that you set up and run yourself. If you separately engage a Done-For-You service (Lite, Pro, Bespoke, or Retainer) in which Mindspan sets up or works inside your environment, Mindspan may necessarily handle some of your data for the duration of that engagement — that handling is governed by the data-handling terms of the service agreement for that engagement, not by this keystone.
The only personal information Mindspan collects is what you give us through the website (waitlist and purchase) and any direct correspondence. That is what the rest of this policy covers.
2. What Mindspan collects (website only)
| What | When & why | Processor |
|---|---|---|
| Email address (and any name you give) | Joining the Spine OS waitlist — to send launch/product updates you asked for; unsubscribe anytime | Brevo |
| Purchase & billing details (name, email, billing address, the fact/amount of purchase). Card details are entered with and held by the payment processor, not Mindspan | Buying the Kit — to take payment, deliver your download, issue a tax invoice, support you, and meet tax law | Stripe |
| Support correspondence | When you email us — to answer you and keep a record | Gmail / Mindspan email |
| Standard server/security logs (e.g. IP, request time, errors) | Visiting the website — to run it securely and diagnose faults | Vercel |
Card numbers are collected and stored by Stripe under its own PCI-compliant systems. Mindspan does not receive or store your full card number.
Analytics: the website does not use behavioural advertising cookies, cross-site trackers, or advertising profiles, and we do not sell personal information or share it with advertisers. Any website analytics we use are limited to non-identifying, aggregate usage measurement (for example, basic traffic counts from our hosting platform) and never build a profile of you. If we adopt a distinct analytics tool, we will name it in this section and keep this policy true to what the site actually loads.
3. What the Kit collects: nothing, by default
The installed Kit does not "phone home". It does not send your vault, files, records, configuration, or usage back to Mindspan. There is no Mindspan account, login, or server involved in running it.
If a future version offers any diagnostic telemetry, it will be opt-in and de-identified, you will be told before it is enabled, you can decline, and the Kit will work fully if you do.
4. Third-party tools you connect are your responsibility
The Kit integrates with third-party tools you choose (e.g. an AI/LLM provider, a scheduler, an email service, a payment service). Any data flowing to those tools is governed by their terms and privacy policies — not this one. You decide what, if anything, to connect. Mindspan is not a party to those services and does not receive your data through them by default.
5. Your clients' and your own business data
If you use the Kit to handle your own clients' information or your own business records, you are the data custodian and controller of that information, responsible for the professional, legal, and regulatory obligations that apply to you. The Kit gives you local control; it does not transfer custody to Mindspan, and Mindspan is not your data processor for it.
6. Disclosure and overseas recipients
Mindspan discloses the website information in section 2 only to the service providers listed there, for the stated purposes. Some store or process data overseas (e.g. Stripe and Vercel in the USA; Brevo in the EU). Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the APPs (APP 8), relying on those providers' contractual and standard data-protection commitments. We do not sell personal information.
7. Retention
- Waitlist email: kept until you unsubscribe or ask us to delete it.
- Purchase and tax records: kept for 7 years to meet Australian tax and financial record-keeping law.
- Support correspondence: kept while needed to support you and resolve any related issue, then deleted in the ordinary course.
- Server/security logs: kept briefly for security and diagnostics, then rotated out.
8. Security
We use reasonable technical and organisational measures to protect the limited website information we hold, including TLS encryption in transit and reputable processors (Stripe, Brevo, Vercel). No system is perfectly secure. If you believe there has been a security issue affecting your information, contact us immediately at info@mindspan.com.au.
9. Your rights
Under the APPs you may ask to:
- access the personal information Mindspan holds about you;
- correct information that is inaccurate, out of date, or incomplete;
- delete your information — including unsubscribing from the waitlist or asking us to erase your contact details (subject to records we must keep by law, such as tax records); and
- unsubscribe from marketing at any time via the link in any email or by emailing us.
To exercise any of these, email info@mindspan.com.au. We will respond within a reasonable time and, in any case, within 30 days.
10. Children
The Spine OS website and Kit are intended for adults (18+) operating or starting a business. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.
11. Complaints
If you think we have mishandled your personal information or breached the APPs, please contact us first at info@mindspan.com.au so we can try to resolve it. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
12. Changes to this policy
We may update this policy. Material changes will be reflected in a new dated version published on this page. The version and "last updated" date at the top tell you which one is current. See also the EULA, Disclaimer, and Refund Policy.
Contact: info@mindspan.com.au | Mindspan Pty Ltd (ABN 88 377 453 125) | Melbourne, Victoria, Australia | Spine OS Privacy v1.0
Mindspan provides software, education, and business-systems tooling; the Kit is not a registered health service and is not affiliated with or endorsed by any regulator or professional board.