Privacy policy

1. Who this policy applies to

This policy applies to SubmitSignal customers, people who visit our website, and people whose information is contained in a form response processed for a SubmitSignal customer. NorthAxis is the operator of SubmitSignal.

For form-response information, our customer decides why the information is collected and which advertising destinations receive qualified conversions. NorthAxis processes that information to provide SubmitSignal on the customer's instructions.

2. Information we handle

• Account details, such as your name, email address, organisation and login records.
• Connected-form responses, which may include names, email addresses, phone numbers, answers, qualification scores and other fields selected by the customer.
• Advertising attribution identifiers, such as GCLID, GBRAID, WBRAID, FBP, FBC or another supported destination identifier.
• Configuration, diagnostic and delivery information needed to connect sources, evaluate rules, prevent duplicates and explain delivery results.
• Messages you send to NorthAxis for support, privacy or account assistance.

Customers must not use SubmitSignal to send information they are not authorised to collect or share, information about children under 13, or sensitive information that advertising platforms prohibit from conversion measurement.

3. How we use information

• Operate, secure, troubleshoot and improve SubmitSignal.
• Authenticate users and keep customer workspaces separate.
• Receive form submissions, map fields and evaluate qualification rules.
• Send qualified conversion information to destinations selected by the customer.
• Maintain delivery, security and audit records.
• Respond to support, access, correction and deletion requests.
• Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use a customer's form responses to advertise NorthAxis services to the people named in those responses.

4. When information is shared

Information may be shared only as needed with:

• Advertising platforms selected by the customer, such as Google Ads, Meta Ads or another supported destination.
• Infrastructure and service providers that host, secure or support SubmitSignal under contractual confidentiality and data-protection obligations.
• Professional advisers, regulators, courts or law-enforcement bodies where reasonably necessary or legally required.
• A successor if NorthAxis undergoes a genuine business sale or restructure.

Customers are responsible for telling form respondents about their own collection and advertising measurement practices, and for obtaining consent where required.

5. Hosting, security and international processing

We use access controls, tenant separation, encrypted connections, restricted service credentials and privacy-conscious logging to reduce the risk of unauthorised access, loss or misuse. No online service can guarantee absolute security.

SubmitSignal uses Supabase for its primary database and authentication services. Our primary stored application data, including account records and connected-form data, is hosted in Supabase's Sydney, Australia region. SubmitSignal uses Vercel to host the application, and its server-side application functions are configured to run in Sydney, Australia.

Primary hosting in Sydney does not mean that every part of the service is processed only in Australia. Vercel operates a global content-delivery network, and Supabase, Vercel, their service providers, support and security operations, or a customer-selected advertising destination may process limited information in other countries. Where required, NorthAxis and its customers are responsible for appropriate safeguards, notices and permissions for that processing.

6. Retention

We retain information only for as long as needed for the purposes described here, subject to operational, security and legal requirements. The applicable periods and deletion process are described in our data retention policy.

7. Access, correction and deletion

You may ask to access or correct personal information NorthAxis holds about you, or ask us to delete it where applicable. If your information was submitted to one of our customers, contacting that business directly may be the fastest option because it controls the original form and the purpose of processing.

Email privacy@northaxis.com.au. We may need to verify your identity and confirm the relevant customer or form before acting.

8. Changes and questions

We may update this policy as SubmitSignal changes. The effective date above will be revised when material changes are published.

Privacy questions and complaints can be sent to privacy@northaxis.com.au. General product support is available at support@northaxis.com.au.