Privacy Policy

This policy is effective from 14 July 2026.

We collect account information such as name, email address, authentication identifiers, workspace details, plan information, and account activity needed to provide the service.

We also collect project content that you upload, enter, generate, or save in carousel.build. This may include images, screenshots, notes, captions, slide text, project names, and related metadata.

Technical information may include IP address, browser and device information, log data, security events, API activity, and runtime configuration required to operate the application.

We use personal information to provide and secure the service, authenticate users, maintain workspaces and projects, generate and export carousel content, communicate with users, process billing, troubleshoot issues, improve reliability, and comply with legal obligations.

Billing and subscription workflows may be processed by Stripe. carousel.build does not need to store full card numbers. Payment processors, cloud infrastructure providers, authentication providers, support tools, and professional advisers may process personal information where needed to deliver the service.

The service uses AWS infrastructure and Amazon Cognito for authentication. Account and project data may be stored in cloud services, databases, logs, and backups used to operate carousel.build across staging and production environments.

We currently use necessary cookies or browser storage for core site and account functionality. More detail is available in the Cookie Notice.

carousel.build is operated from Australia, and service providers may process information in Australia, the United States, the European Economic Area, or other countries where they operate. When personal information is transferred internationally, we use reasonable safeguards appropriate to the service and applicable law.

We keep personal information for as long as needed to provide the service, meet legal and tax obligations, resolve disputes, maintain security, and preserve legitimate business records. Project content and account data may remain in backups for a limited period after deletion.

We use administrative, technical, and organisational safeguards designed to protect personal information. No online service can guarantee absolute security, so users should keep credentials confidential and notify us of suspected unauthorised access.

Depending on where you live, including under Australian privacy law and GDPR-style rights, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Some requests may be limited by legal obligations, security needs, or service functionality.

Privacy requests and complaints can be sent to legal@carousel.build. We will respond within a reasonable period. If you are not satisfied, you may have the right to contact a privacy regulator, including the Office of the Australian Information Commissioner.