Privacy Policy

1. Who we are

Appa Technologies Pty Ltd (ABN 71 654 768 984), 31/4 Greenwood Place, Freshwater, NSW 2096, Australia. BlueBasket Labs is a part of Appa Technologies Pty Ltd, which operates this website. Our delivery affiliate in India is BlueBasket Labs Private Limited (CIN U62099TZ2023PTC029025).

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where they apply, we also respect rights under the EU/UK GDPR and India's Digital Personal Data Protection Act 2023 (DPDP).

2. What we collect

Only what you send us through our forms and tools (contact, free scan, Launch package, the AI project scoper, the security quick-check and the Ask BlueBasket chat handoff):

• name and email address
• company and website, if you provide them
• your message, or the project idea you enter in the AI project scoper, together with the AI-generated outline and any project size or timeline you select
• your consent to be contacted
• your country, derived from your connection (two-letter code only)

We do not store your IP address. We do not use third-party analytics, advertising trackers or marketing cookies on this website.

3. How it is processed

• Website and forms are hosted on Cloudflare Pages; submissions are stored in a Cloudflare D1 database.
• To prevent abuse we rate-limit submissions using a one-way hash of your IP address combined with a secret salt and the current day. The hash rotates daily, cannot be reversed to your IP, and is deleted after 24 hours.
• We may use Cloudflare Turnstile to check that a submission is not automated. Cloudflare processes your IP address for that check.
• We may receive an email notification of your submission via our email provider (Resend).
• The AI project scoper sends the idea you type to an AI model run by Cloudflare Workers AI on Cloudflare's network. Cloudflare does not use this content to train its models. We store your idea and the generated outline in our D1 database (with your email only if you choose to give it) so our team can follow up and improve our service. Please don't enter personal or confidential information into the scoper.
• The Ask BlueBasket chat assistant sends your question (and the recent messages in that chat) to Cloudflare Workers AI to generate an answer from this website's content. We do not store chat transcripts: they exist only in your browser tab and are discarded when you close it. If you choose "Talk to a person", only the details and message you submit in that form are stored, like any other enquiry.
• The security quick-check reads public information about the domain you enter (its home page response headers and public DNS records). We only store the domain and its results if you choose to give your email, so we can follow up.
• Our admin area is protected by Cloudflare Access and limited to authorised staff.

4. Why we use it

To reply to your enquiry, scope and deliver services you request, and keep records of our communications. We do not sell personal information. AI-generated outlines are rough estimates only; we do not use them to make decisions that legally or significantly affect you.

5. Overseas disclosure

Our service providers (Cloudflare, Resend) may process data outside Australia, including in the United States and other countries where they operate. Our delivery affiliate in India, BlueBasket Labs Private Limited, may access enquiries to respond to you and deliver services. We take reasonable steps so that recipients handle it consistently with the APPs.

6. Retention

We keep enquiries only as long as needed for the purposes above or as required by law, then delete them.

7. Your rights

You can ask to access, correct or delete your personal information, withdraw consent, or object to or restrict processing. Where GDPR applies you may also request data portability; under DPDP you may nominate a person to exercise your rights. We respond within 30 days. Email support@bluebasketlabs.com.

8. Security

Data is encrypted in transit (HTTPS). Access is restricted to authorised staff through Cloudflare Access. No method is completely secure, but we work to protect your information and will notify you and regulators of eligible data breaches as required by law.

9. Complaints

Contact us first at support@bluebasketlabs.com. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to your local data protection authority.

10. Changes

We may update this policy and will post the new version on this page.