What it is
The contract that governs our processing of personal data on your behalf, as the Privacy Act 1988 and the Australian Privacy Principles requires between a controller and its processor. It covers the subject matter and duration, the types of data and categories of data subject, our security obligations, our use of sub-processors, breach notification, and what happens to your data when you leave.
Who is who
For the content you put into the service — names in variations, contractor contacts, people who happen to appear in a site photograph — you are the controller and we are the processor. For your account and billing data we are the controller, and that is covered by the privacy policy rather than the DPA.
It is in English, and that is deliberate
The DPA is one contract, in English, and it governs. We publish it in one language rather than nineteen because a translated contract can drift from the one that binds, and a dispute about which version applies is worse than reading the original. If you need a counter-signed copy, or a translation for your own file, ask and we will provide it.
Questions about any of this: info@variationflow.com.