Who we are
SteamStack is hospitality management software for Australian cafés and restaurants. In this policy, "we", "us" and "our" mean SteamStack. If you have any question about privacy, email us at admin@steamstack.app — it reaches a person, not a queue.
What we collect on this website
When you register your interest, we ask for:
- your name;
- your email address;
- the name of your venue; and
- optionally, your venue type (café, restaurant, bar, and so on).
If you submit a feature request on our roadmap page, we also keep the title, category and description you wrote, along with your name and email so we can reply.
We collect this directly from you. Giving it to us is voluntary — but we can't add you to the early access list without at least a name, an email address and a venue name.
Why we collect it
We use these details to contact you about SteamStack early access, to send you a confirmation that you're on the list, and to understand what kinds of venues are interested so we can prioritise sensibly. We do not use them for unrelated marketing, and we do not sell or rent them to anyone.
Analytics and cookies
This website does not set advertising cookies and does not track you across other websites.
The SteamStack application (the part you log into, separate from this site) uses PostHog for product analytics, hosted in the European Union. This includes session recording, which captures how the interface is used so we can find and fix problems. Text you type into form fields is masked in those recordings. This helps us improve the product; it is not used for advertising.
Where your information is stored
Expression-of-interest details are stored with Supabase, which hosts our database. Confirmation emails are sent through Resend. Both are service providers acting on our instructions. Some of these providers store or process data outside Australia, which means it may be handled in another country with different privacy laws.
Keeping it secure
Data is encrypted in transit and at rest. Our signup table is configured so that it can only be written to from this website, never read from it — the list of people who have registered is not publicly accessible. Inside the application, each business's data is isolated at the database level using row level security, so one business cannot see another's information.
No system is perfectly secure, but we take this seriously and design for it rather than bolting it on afterwards.
How long we keep it
We keep expression-of-interest details until you ask us to remove them, or until it's clear the early access programme has ended and the information no longer serves a purpose.
Accessing or deleting your information
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email admin@steamstack.app and we'll action it. There's no form to fill in and no cost.
If you're unhappy with how we've handled your information, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
If we change how we handle your information, we'll update this page and change the date at the top. If the change is significant and we hold your email address, we'll tell you directly.
This policy is written in plain English to be genuinely useful rather than to cover every legal eventuality. It is not legal advice, and it may need review by a lawyer before SteamStack launches commercially.