Privacy Policy
Last updated: 20 July 2026
This policy explains what personal data Off Grid Builder collects, why, where it is stored, and the rights you have over it. Off Grid Builder is operated by Falloy, a sole operator based in Australia (ABN 50 026 311 620). We serve users worldwide.
1. Who we are
The data controller is Falloy (“we”, “us”). You can reach us at support@falloy.com.au for any privacy question, including to exercise the rights described below.
2. What we collect and why
Account data
When you create an account we store your email address and authentication details. If you sign in with Google, we receive your email address and basic profile identifier from Google. Passwords are handled by Supabase Auth and are never stored by us in plain text. We use this data to let you log in, save and re-open your work, and to contact you about your account.
Saved layouts
The electrical layouts you create and choose to save — boards, components, wiring and any names or notes you add — are stored against your account so you can return to them. Treat any personal information you type into a layout as data you have chosen to store with us.
Payments
Payments are processed by Stripe. When you buy a licence, your card and billing details are collected and processed by Stripe, not by us — we never see or store full card numbers. We retain a record of the transaction (licence status, amount, date and a Stripe reference) to fulfil the licence and meet our tax and accounting obligations. See Stripe’s privacy policy at stripe.com/privacy.
Analytics (consent-gated, privacy-first)
We use PostHog Cloud (EU region) to understand how the app is used. Our analytics are anonymous and cookieless by default:
- Until you make a cookie choice, and if you choose “Essential only”, analytics run in a cookieless, anonymous mode — no cookies are set, no cross-session identity is created, and no personal information (PII) is sent. We cannot link this data back to you.
- Only if you click “Accept all” on the cookie banner do we upgrade to cookie-based, identified analytics, which can associate usage with your account across sessions to help us improve the product.
- Your choice is remembered in an
ogb_consentcookie and can be changed at any time.
3. Legal bases (GDPR)
For users in the UK/EEA, we rely on the following legal bases under the GDPR:
- Contract — to provide your account, save your layouts and deliver a licence you have purchased.
- Legitimate interest — for essential, anonymous, cookieless analytics and for keeping the service secure and functioning, balanced against your rights.
- Consent — for cookie-based identified analytics, which run only after you click “Accept all”. You can withdraw consent at any time.
- Legal obligation — to keep tax and transaction records.
4. Where your data is stored
Accounts and saved layouts are held in a self-hosted Supabase / PostgreSQL database on infrastructure controlled by the operator, located in Fremantle, Western Australia. Analytics data is held by PostHog in the EU region. Payment data is held by Stripe. Because we serve a global audience, your data may be transferred and stored outside your own country; where required we rely on appropriate safeguards such as Standard Contractual Clauses provided by our processors.
5. Retention
We keep account and layout data for as long as your account is active. If you delete your account, we delete your account and saved layouts within [30 days], except where we must retain limited transaction records to meet legal, tax or accounting obligations. Anonymous analytics are retained only as long as useful for product improvement.
6. Your rights
Depending on where you live (e.g. under the GDPR or the Australian Privacy Act), you may have the right to:
- Access a copy of the personal data we hold about you;
- Correct inaccurate data;
- Delete your account and associated data;
- Export your saved layouts (you can also export layouts as JSON from the app at any time);
- Withdraw consent to identified analytics, or object to processing;
- Complain to your local data protection authority.
To exercise any of these, email support@falloy.com.au.
7. Third parties we share data with
- Stripe — payment processing.
- PostHog (EU) — product analytics, on the consent-gated basis above.
- Google — only if you choose to sign in with Google OAuth.
- Self-hosted infrastructure — our own servers and hosting provider that run the Supabase/Postgres database.
We do not sell your personal data.
8. Cookies
For details of the specific cookies we use and how to change your choice, see our Cookie Policy.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the “last updated” date above.
10. Contact
Privacy questions: support@falloy.com.au.