Legal

Privacy notice

A clear account of the information Fallow needs, why it needs it and the controls that limit exposure.

Scope

This notice explains how Fallow Software Pty Ltd handles personal information when you visit our website, create a workspace or use the Fallow service. Customer content processed from connected SaaS systems is handled on behalf of the workspace customer.

Information we collect

We collect account and workspace information needed to provide the service, including names, business contact details, authentication records, region and preview settings, and support correspondence. No payment processing is enabled for the current private preview.

Connected-platform scans may process user access, license, activity, group and role information. Raw source responses are encrypted in regional blob storage; Postgres stores derived metrics and tenant-salted hashes where possible.

How we use information

  • Provide, secure and support the Fallow service.
  • Authenticate users and enforce workspace permissions.
  • Generate requested scans, reviews, reports and audit evidence.
  • If a future commercial offering is enabled, process billing through a disclosed payment provider.
  • Monitor reliability without placing customer PII in analytics or logs.

Storage and security

Fallow uses regional Postgres, Azure Blob Storage and per-tenant Azure Key Vault keys. Sensitive values and raw scan data are envelope-encrypted. Raw scan blobs are scheduled for deletion after 30 days by default and up to 90 days on eligible plans. Report downloads use short-lived, file-scoped signed URLs.

Service providers

Fallow relies on a limited set of service providers, including Microsoft Azure for compute, storage and key management; Neon for Postgres; Resend for transactional email; and Cloudflare for DNS and delivery. Stripe is planned for a future commercial offering but payment processing is not enabled for the current private preview. Providers process information only for the services they supply.

Your choices and rights

Subject to applicable law, you may request access, correction, export or deletion of personal information by contacting us. Automated workspace export and verified erasure are not yet available in the private preview; the source-only design is intended to destroy tenant keys, blob objects and workspace records after verification and a waiting period.

Contact

For privacy questions or requests, email privacy@fallowonline.com. Do not include credentials or customer exports in email.