Legal
Privacy notice
A clear account of the information Fallow needs, why it needs it and the controls that limit exposure.
Scope
This notice explains how Fallow Software Pty Ltd handles personal information when you visit our website, create a workspace or use the Fallow service. Customer content processed from connected SaaS systems is handled on behalf of the workspace customer.
Information we collect
We collect account and workspace information needed to provide the service, including names, business contact details, authentication records, region and plan settings, billing references and support correspondence.
Connected-platform scans may process user access, license, activity, group and role information. Raw source responses are encrypted in regional blob storage; Postgres stores derived metrics and tenant-salted hashes where possible.
How we use information
- Provide, secure and support the Fallow service.
- Authenticate users and enforce workspace permissions.
- Generate requested scans, reviews, reports and audit evidence.
- Process billing and communicate service information.
- Monitor reliability without placing customer PII in analytics or logs.
Storage and security
Fallow uses regional Postgres, Azure Blob Storage and per-tenant Azure Key Vault keys. Sensitive values and raw scan data are envelope-encrypted. Raw scan blobs are scheduled for deletion after 30 days by default and up to 90 days on eligible plans. Report downloads use short-lived, file-scoped signed URLs.
Service providers
Fallow relies on a limited set of service providers, including Microsoft Azure for compute, storage and key management; Neon for Postgres; Stripe for billing; Resend for transactional email; and Cloudflare for DNS and delivery. Providers process information only for the services they supply.
Your choices and rights
Subject to applicable law, you may request access, correction, export or deletion of personal information. Workspace owners can request a workspace export or deletion. Deletion is designed to destroy tenant keys, blob objects and workspace records after the applicable verification and waiting period.
Contact
For privacy questions or requests, email privacy@fallowonline.com. Do not include credentials or customer exports in email.