Stokd
Legal

Privacy Policy

Last updated: 26 September 2026

This Privacy Policy explains how Gavin Groombridge, trading as Stokd ("we", "us", "our"), collects, uses, stores, and shares your personal information in connection with the Stokd desktop application, the Stokd mobile app for iPhone and Android, and the stokd.com.au website (together, "Stokd").

Stokd is operated from Kettering, Tasmania, Australia. We handle your personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What information we collect

Information you provide directly

When you use Stokd, you may provide us with:

  • Business contact details (business name, address, ABN, contact email and phone)
  • Personal contact details (your name, email, phone number) when you create a user account or contact us for support
  • Customer information you enter into Stokd (your customers' names, addresses, contact details, order history)
  • Product and pricing information
  • Payment and licence information when you purchase a Stokd licence

Information collected automatically

When you visit stokd.com.au, our hosting provider may collect basic technical information such as your IP address, browser type, and the pages you visit. This is used for security and to understand how the website is used.

The Stokd applications do not collect telemetry or usage analytics.

Information captured by the mobile app

When a delivery is marked as delivered in the Stokd mobile app, the app may capture a signature drawn on the screen and a photograph of the delivery. These are proof that the delivery was made, they are attached to the delivery record, and they are stored as described below.

The mobile app uses the camera only for that photograph. It does not open, read or save anything in your photo library, and it does not ask for or receive your location: the app requests no location permission on either iPhone or Android, so the operating system does not provide location information to it.

Information from third party integrations

When you connect Stokd to third party services such as Shopify, Square, WooCommerce, Squarespace, or Xero, Stokd retrieves order, customer, and product information from those services on your behalf. This information is held on your devices and on our servers, as described below.

How we use your information

  • To provide, maintain, and improve Stokd
  • To process licence purchases and provide customer support
  • To respond to your enquiries and communicate with you about Stokd
  • To send you important updates about the application (such as security notices)
  • To comply with our legal obligations

We do not sell your personal information. We do not use your information for advertising. We do not share your business or customer data with third parties except as described below.

Where your data is stored

Stokd keeps a copy of your business data on each device you use it on, so that it keeps working when the network does not. A driver can mark a delivery with no signal and the app will send it when coverage returns. On a Windows machine that copy is an encrypted database file.

Stokd also keeps the authoritative copy of your business data on servers we operate, so that your desktops and phones stay in step with each other. That copy is held in storage dedicated to your business and separate from every other customer's. Delivery photographs and signatures are kept in our object storage rather than in that database, for size reasons, and are reachable only through your own account.

This is a change from earlier versions of Stokd, which kept your data only on the machine it was installed on. We now hold your business data, and we act as an intermediary between Stokd and the third party services you connect.

Information you provide to us via the website (such as support enquiries) is stored using our email and customer support tools, which may be hosted outside Australia.

Licence and payment information is processed by our payment provider, who handles transactions on our behalf.

Sharing your information

We share your personal information only in the following limited circumstances:

  • Service providers: Third party providers who help us operate Stokd, such as our hosting provider, payment processor, and email provider. These providers are bound by contractual obligations to protect your data.
  • Legal requirements: When required by law, regulation, court order, or government request.
  • With your consent: When you explicitly authorise us to share your information for a specific purpose.

Sending information overseas

Some of the services we use to run Stokd operate outside Australia, which means your information may be stored or processed overseas. We rely on these providers and disclose them here so that you can make an informed decision.

  • Cloudflare hosts the Stokd service and stores your business data, delivery photographs and signatures. Global network, including outside Australia.
  • Amazon Web Services holds the encryption keys that protect the credentials for your connected services. Sydney, Australia.
  • Lemon Squeezy processes subscription payments and holds billing records. United States.
  • Our email and support tools handle enquiries you send us. These may be hosted outside Australia.

We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles. By using Stokd you acknowledge that information handled by the providers above may be held outside Australia, and that Australian Privacy Principle 8.1 may not apply to their handling of it.

Third party integrations

When you connect Stokd to a third party service, your use of that service is governed by their own terms and privacy policy. We recommend reviewing the privacy policies of any service you connect:

How we protect your information

We take reasonable steps to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of the credentials for your connected services using keys held in a managed key service in Sydney, Australia
  • Encryption of the local copy of your business data on a Windows machine
  • Secure transmission of data between Stokd and connected services using HTTPS
  • Limiting access to personal information to authorised personnel only
  • Regular review of our security practices

No method of electronic storage or transmission is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

How long we keep your information

We retain personal information for as long as necessary to provide Stokd to you, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. We keep your business data for as long as your Stokd account is active.

When you delete a record in Stokd, it is hidden from you immediately and is removed from our systems within ninety days. The delay exists so that your other devices learn about the deletion before the record disappears; a device that has been offline for longer than ninety days downloads a fresh copy of your data rather than relying on what it held.

We keep backups so that we can recover your data if something goes wrong. Restoring from a backup restores your business data as it was at the time the backup was taken, so a record deleted after that point may reappear, and would then be deleted again on its ordinary schedule.

The copy of your business data held on your own devices is under your control. You can remove it by uninstalling the application, or the mobile app, from that device.

Your rights

Under the Australian Privacy Act 1988 you have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Withdraw consent for any processing that relies on your consent
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at hello@stokd.com.au. We will respond to your request within 30 days.

If you are not satisfied with how we have handled your personal information or your request, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Cookies

The stokd.com.au website uses minimal cookies, only those required for the website to function correctly. We do not use tracking, advertising, or analytics cookies.

Children's privacy

Stokd is intended for use by businesses and is not directed at children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify existing customers by email.

Contact us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at:

Gavin Groombridge, trading as Stokd
Kettering, Tasmania, Australia
Email: hello@stokd.com.au