Stokd
Legal

Privacy Policy

Last updated: 4 May 2026

This Privacy Policy explains how Mr Bridges Pty Ltd ("we", "us", "our") collects, uses, stores, and shares your personal information in connection with the Stokd software application and the stokd.com.au website (together, "Stokd").

Mr Bridges Pty Ltd is an Australian company based in Kettering, Tasmania. We are the data controller responsible for your personal information.

What information we collect

Information you provide directly

When you use Stokd, you may provide us with:

  • Business contact details (business name, address, ABN, contact email and phone)
  • Personal contact details (your name, email, phone number) when you create a user account or contact us for support
  • Customer information you enter into Stokd (your customers' names, addresses, contact details, order history)
  • Product and pricing information
  • Payment and licence information when you purchase a Stokd licence

Information collected automatically

When you visit stokd.com.au, our hosting provider may collect basic technical information such as your IP address, browser type, and the pages you visit. This is used for security and to understand how the website is used.

The Stokd application itself does not collect telemetry or usage analytics. The application stores all of your business data locally on the Windows machine where it is installed.

Information from third party integrations

When you connect Stokd to third party services such as Shopify, Square, WooCommerce, Squarespace, or Xero, Stokd retrieves order, customer, and product information from those services on your behalf. This information is stored locally on your machine. We do not have access to it.

How we use your information

  • To provide, maintain, and improve Stokd
  • To process licence purchases and provide customer support
  • To respond to your enquiries and communicate with you about Stokd
  • To send you important updates about the application (such as security notices)
  • To comply with our legal obligations

We do not sell your personal information. We do not use your information for advertising. We do not share your business or customer data with third parties except as described below.

Where your data is stored

Stokd is a desktop application that stores your data locally on the Windows machine where it is installed, in an encrypted SQLite database. Your business data does not leave your machine unless you explicitly connect a third party integration or share it yourself.

When you connect Stokd to a third party service such as Shopify or Xero, your data is exchanged directly between Stokd and that service. We do not act as an intermediary.

Information you provide to us via the website (such as support enquiries) is stored using our email and customer support tools, which may be hosted outside Australia.

Licence and payment information is processed by our payment provider, who handles transactions on our behalf.

Sharing your information

We share your personal information only in the following limited circumstances:

  • Service providers: Third party providers who help us operate Stokd, such as our hosting provider, payment processor, and email provider. These providers are bound by contractual obligations to protect your data.
  • Legal requirements: When required by law, regulation, court order, or government request.
  • With your consent: When you explicitly authorise us to share your information for a specific purpose.

Third party integrations

When you connect Stokd to a third party service, your use of that service is governed by their own terms and privacy policy. We recommend reviewing the privacy policies of any service you connect:

How we protect your information

We take reasonable steps to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of platform credentials in the Stokd application using Windows Data Protection API (DPAPI)
  • Secure transmission of data between Stokd and connected services using HTTPS
  • Limiting access to personal information to authorised personnel only
  • Regular review of our security practices

No method of electronic storage or transmission is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

How long we keep your information

We retain personal information for as long as necessary to provide Stokd to you, to comply with our legal obligations, to resolve disputes, and to enforce our agreements.

Your business data stored within the Stokd application is under your control. You can delete it at any time by removing the application and its database file from your machine.

Your rights

Under the Australian Privacy Act 1988 you have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Withdraw consent for any processing that relies on your consent
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at hello@stokd.com.au. We will respond to your request within 30 days.

Cookies

The stokd.com.au website uses minimal cookies, only those required for the website to function correctly. We do not use tracking, advertising, or analytics cookies.

Children's privacy

Stokd is intended for use by businesses and is not directed at children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify existing customers by email.

Contact us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at:

Mr Bridges Pty Ltd
Kettering, Tasmania, Australia
Email: hello@stokd.com.au

Note: This is a starting Privacy Policy. Before going live with paying customers, or applying to the Xero App Partner Programme, this policy should be reviewed by a lawyer to ensure it meets all applicable requirements including the Australian Privacy Principles, Xero's partner requirements, and any GDPR obligations if you sell to customers in the European Union.