Privacy Policy

1. Introduction

No Half Days, operated by Your Figment Pty Ltd ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job management and equipment tracking platform at nohalfdays.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored securely using bcrypt hashing)
• Profile picture (if signing in with Google)
• Authentication method (email/password or Google OAuth)

2.2 Business Information

To use our estimating and invoicing features, you may provide:

• Business name (company name, trading name, or registered name)
• Business address, phone number, and email
• ABN (Australian Business Number) or equivalent business identifier
• Business logo
• GST/VAT registration status and rate
• Region/country preference

2.3 Financial Information (Australia Only)

For Australian sole traders and PAYG workers, you may optionally provide:

• Superannuation details (fund name, USI, member number)
• Tax File Number (TFN) - stored encrypted
• Date of birth
• Bank details for payment terms (account name, BSB, account number) - stored encrypted

Note: All sensitive financial information is encrypted at rest using industry-standard encryption (AES-256 via Fernet).

2.4 Job and Project Data

When you use our job management features, we store:

• Job/project names and descriptions
• Client information (business name, billing address, contact details)
• Shoot dates and schedules
• Phase rates and labour calculations
• Day sheets with call times, wrap times, and break information
• Equipment usage per job
• Expense line items
• Invoice totals and GST calculations

2.5 Equipment Data

Our equipment tracking feature stores:

• Equipment names, descriptions, and categories
• Purchase prices and dates
• Daily rental rates
• Serial numbers (for your internal tracking only)
• Usage history and income tracking
• ROI calculations
• Disposal/sale information

2.6 Third-Party Integration Data

If you connect third-party services:

• Xero: OAuth tokens, tenant ID, and account mappings for exporting job data
• Google: Basic profile information when using Google Sign-In

2.7 Technical Data

We automatically collect:

• IP address (for rate limiting and security)
• Browser type and version
• Session tokens and authentication data
• Last login timestamps

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Generate job estimates and PDF documents
• Calculate equipment ROI and usage statistics
• Track job profitability and labour costs
• Sync data with connected third-party services (e.g., Xero)
• Send service-related communications
• Provide customer support
• Protect against fraudulent or unauthorized activity
• Comply with legal obligations

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored on MongoDB Atlas cloud infrastructure. We use industry-standard security measures including:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive fields (bank details, TFN)
• Secure password hashing (bcrypt with 12 rounds)
• Rate limiting to prevent abuse
• Secure session management with HTTP-only cookies

4.2 Data Retention and Deletion

We retain your data for as long as your account is active. If you delete your account, all associated data (jobs, equipment, clients, settings) is immediately and permanently deleted. This deletion cannot be undone or recovered. We recommend exporting any data you wish to keep before deleting your account.

Demo session data is automatically purged after 1 hour.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these circumstances:

• With your consent: When you explicitly connect third-party services like Xero
• Service providers: Cloud infrastructure providers (MongoDB Atlas) who help us operate the Service
• Legal requirements: If required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights and Choices

You have the right to:

• Access: View all data associated with your account through the Settings page
• Correction: Update your account information at any time
• Deletion: Delete your account and all associated data from Settings > Account
• Data portability: Export your job and equipment data (PDF exports available)
• Withdraw consent: Disconnect third-party integrations at any time
• Opt-out: Disable email notifications in Settings

7. Cookies and Tracking

We use essential cookies only for authentication and session management. We do not use tracking cookies, analytics cookies, or advertising cookies. The only cookie we set is:

• session_token: HTTP-only, secure cookie for maintaining your login session

8. Third-Party Services

Our Service integrates with:

• Google Sign-In: For optional social authentication. See Google's Privacy Policy
• Xero: For accounting integration. See Xero's Privacy Policy
• MongoDB Atlas: For secure data storage. See MongoDB's Privacy Policy

9. International Users

While No Half Days is primarily designed for Australian freelancers and video professionals, we support users from the United States, United Kingdom, and European Union. Your data may be transferred to and processed in countries where our cloud infrastructure is located.

For EU users: We process your data based on legitimate interests (providing the Service you requested) and, where applicable, your explicit consent.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through an in-app announcement.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: