Privacy

Klar Cite is run by Klar Advisory Pty Ltd (ABN 32 698 209 871) ("Klar Cite", "we"). This page says what we collect about people, why, who else handles it, how long we keep it, and what you can ask of us. Questions go to corrections@klarcite.com.

1. The short version

• You can read the whole register without an account, and we keep nothing that identifies you.
• With an account, we keep your email address, your sign-in, and the work you save. Your schedules are yours: nobody else sees them unless you share them.
• Product pages never show a person's name.
• We don't sell personal information, we don't advertise, and we don't build profiles of anyone.
• Ask, and we delete your account. It can be restored for 30 days, and then it is gone.

2. Reading the site without an account

• Visit counts. We count visits with Cloudflare Web Analytics. It sets no cookie and keeps nothing that identifies you. We see totals per page and per day.
• Limits on reading clause wording. Some publishers allow their wording to be shown only in limited amounts. To hold to that, we keep a key for each reader for 24 hours. The key is made from your IP address and a secret value, and the IP address itself is never stored. It can't be turned back into your address, and it is deleted after 24 hours.
• Watching the register. If you sign up to hear when a build changes what a scheme requires, your email address goes to Buttondown, which sends those emails for us. Buttondown asks you to confirm first. Every email has a link to stop them.

3. With an account

What we keep:

• Your sign-in. This is your email address and either a password or your Google sign-in. Passwords are stored in a form we can't read back. Choosing Google means visiting Google, which applies its own terms to that visit.
• Your profile. This is your role (specifier or manufacturer), your plan, and, if you give them, your organisation and job title. They are never shown on a product page.
• Your work.
  • Your schedules, products, the credentials you enter, and the product pages you publish.
  • Schedules are readable only by you, and by people you share one with.
  • Records you add to a product page carry your role, not your name.
• Sharing. When you share a schedule, we keep the email address you shared it with, so that person can open it after signing in.
• Manufacturers applying to publish. We keep the details you send so we can check that you speak for your company:
  • your name, position, company, contact email, website and, if you give it, a LinkedIn link;
  • anything else you send in support.
• Counting citations. When a product page's citation is copied, we count it once per account, page and day. We keep that record for 31 days, and it is never shown to anyone.

Why we keep it:

• to run your account and keep your work;
• to send the emails the site needs to send:
  • sign-in and confirmation links;
  • a schedule someone shared with you;
  • for manufacturers, reminders that a certificate is about to expire, alerts when a standard changes, and when a page is cited or changed;
  • monthly notes you can switch off;
• to take payment, for manufacturers who subscribe;
• to check, by hand, that a manufacturer's people speak for their company.

We use it for nothing else.

Who can see it at Klar Cite: the site's owner can see each account's email address, and its schedules, for one purpose only: to help when you ask. We never publish them.

4. Others who handle it for us

Service	What it does for us	What it receives
Lovable Cloud (Supabase)	Hosts the site's database and sign-in	Everything in section 3. It is held in Japan (Tokyo).
Lovable	Sends the site's emails, from notify.klarcite.com	Your email address and the email's content
Cloudflare	Serves the site and counts visits	Each request, including your IP address. See section 2 for what is kept.
Stripe	Takes payment from manufacturers	Your email address and account number. Card details go straight to Stripe, and we never see them.
Buttondown	Sends "watch the register" emails	Your email address, if you sign up
Google	Sign-in, if you choose it	Your sign-in, if you use it

Some of these services hold data outside Australia: the database is in Japan, and some services, such as Stripe and Buttondown, hold data in the United States. We choose services that protect it to a standard comparable to Australian law, but their own policies govern what they do.

5. Your browser

• Signing in keeps a session in your browser's own storage, not in a tracking cookie.
• The site also remembers a few page settings in your browser, such as which section you left open. They never leave your device.
• While a manufacturer is paying, the site briefly remembers which pages to publish once payment completes.
• The site sets no advertising or tracking cookies.

6. How long we keep it

• Your account and work: as long as the account is open.
• When you ask us to delete your account: we close it at once. We can restore it for 30 days in case the request was a mistake. After that it is removed for good, with its schedules.
• A schedule you delete yourself: kept for 30 days, in case you want it back, then removed.
• Product pages:
  • A published page's link lives in other people's specifications, so the page stays when its publisher's account is closed.
  • Anything that pointed to the person who published it is cleared, and pages never named a person anyway.
• Reading keys: 24 hours (section 2).
• Citation counts per account: 31 days (section 3).
• A manufacturer's application to publish: the details in section 3 are kept as the record of who we checked, for as long as the company is on Klar Cite, including after the person's account is closed. Ask, and we delete them.
• Payment records: Stripe keeps these, and we keep what tax law requires.

7. What you can ask of us

Write to corrections@klarcite.com to:

• see the personal information we hold about you;
• correct it;
• have your account deleted;
• stop the emails you can switch off. Account and payment emails continue while the account is open.

We answer within 30 days. If you aren't satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or, in New Zealand, to the Office of the Privacy Commissioner (privacy.org.nz).

8. If something goes wrong

If personal information we hold is lost or reaches someone it shouldn't, and that is likely to cause serious harm, we tell the people affected and the Information Commissioner, as the Notifiable Data Breaches scheme requires.

9. Changes

When this page changes, the date at the top changes. If a change affects how we use information we already hold, we email account holders first.