Privacy Policy

1. Scope and commitment

This policy applies to herbilous.com, Herbilous member accounts, Herbilous Plus and related support communications. We aim to manage personal information transparently and in accordance with applicable Australian privacy requirements, including the Australian Privacy Principles where they apply.

Herbilous is an educational reference. We do not ask you to upload medical records or use Herbilous as a substitute for personal healthcare.

2. Information we collect

Account and membership information

• Email address, account identifier and authentication records.
• Membership plan, account role, subscription status and renewal period.
• Account confirmation, password-reset and security events.

Payment information

Stripe processes subscription payments. Herbilous may receive transaction identifiers, Stripe customer and subscription references, payment status, plan and renewal information. We do not receive or store your complete payment-card number.

Communications

If you contact us, we collect the information you provide, such as your name, email address, message and any material attached to it. Please do not send sensitive health information unless it is necessary for your enquiry.

Technical and usage information

Our hosting and security providers may process IP address, browser or device information, request logs, timestamps and diagnostic information needed to deliver, secure and troubleshoot the service.

Health-related tool inputs

Herbilous tools are designed so that health interests, calculator entries and draft formulas remain in your browser or device unless a feature clearly tells you otherwise. They are not added to your member profile. If you include health information in a support message, we will handle it as part of that correspondence.

3. How information is collected

We collect information directly from you when you create an account, subscribe, contact us or make a request. We also receive limited information from service providers that operate authentication, payments, email delivery, hosting and security.

Essential browser storage may be used to keep you signed in, remember limited app preferences and protect account access. Herbilous does not currently use third-party behavioural advertising trackers. If that changes, this policy and any required consent controls will be updated.

4. Why we use information

• To create and secure accounts and provide the requested service.
• To provide free or Plus access and administer subscriptions.
• To send account confirmation, password-reset, billing and other service messages.
• To respond to support, privacy, cancellation and refund requests.
• To detect misuse, protect users and maintain technical reliability.
• To comply with legal obligations and enforce our terms.
• To send marketing only where we have consent or another lawful basis, with a working unsubscribe method.

We do not sell personal information.

5. Service providers and disclosure

We disclose only the information reasonably needed for trusted providers to perform services for Herbilous. These may include:

• Supabase for account authentication and membership data.
• Stripe for payments, subscriptions and billing management.
• Resend for transactional email delivery.
• OpenAI Sites and related infrastructure providers for website hosting and delivery.
• Professional advisers, insurers, regulators, law-enforcement bodies or courts where reasonably necessary or legally required.

These providers operate under their own privacy and security terms. We do not authorise them to use Herbilous member information for unrelated advertising.

6. Overseas processing

Some service providers or their infrastructure may process or store information outside Australia. Countries can vary as provider infrastructure changes. We take reasonable steps to select reputable providers and require information to be handled consistently with the services we have engaged them to provide.

7. Security and retention

We use access controls, encrypted connections, restricted server credentials and reputable service providers. No online service can promise absolute security, but we take reasonable steps to prevent loss, misuse, unauthorised access, modification or disclosure.

We retain account and subscription information while an account is active and afterwards only for as long as reasonably required for support, fraud prevention, taxation, accounting, dispute resolution and legal obligations. Information that is no longer required is deleted or de-identified where practicable.

8. Access, correction and deletion

You may ask what personal information we hold about you, request correction, withdraw optional marketing consent or request account deletion by emailing info@wholesomepress.com. We may need to verify your identity before acting. Some records may be retained where required by law or reasonably needed to complete transactions and resolve disputes.

Deleting an account does not automatically create a refund. If you have a paid subscription, cancel it first or ask us to cancel it as part of your request.

9. Email and marketing choices

Service messages necessary for account security or transactions are not marketing. Commercial electronic messages will identify the sender and include a functional unsubscribe option. We aim to action unsubscribe requests within five working days.

10. Privacy complaints

Send a written complaint to info@wholesomepress.com with enough information for us to investigate. We will acknowledge it and aim to provide a substantive response within 30 days. If you are not satisfied and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner.

11. Changes to this policy

We may update this policy when Herbilous features, providers or legal obligations change. The current version will always show its effective and last-updated dates. We will give reasonable notice of material changes that affect how existing member information is handled.