Last updated: 2 September 2026
Big Smoke Data Pty Ltd (ACN 672 147 090) (“Big Smoke Data”, “we”, “us”, or “our”) is based in New South Wales, Australia. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use bigsmokedata.com, our applications, APIs, and embeddable widgets (collectively, the “Service”).
Customer accounts and Team members:
Billing and payments:
REST API users:
Visitors to embedded widgets:
We may share personal information with service providers and technology providers who help us operate and deliver the Service, including:
We may also disclose information where required or authorised by law, or where reasonably necessary to protect our rights, users, systems, or the Service.
We do not sell personal information.
Our embedded widgets do not currently use cookies or persistent browser identifiers for analytics.
Widget requests may be recorded for purposes such as measuring widget usage, identifying the widget being used, recording the domain and page where a widget is embedded, and understanding basic usage patterns. An IP address may be processed temporarily for security and rate-limiting purposes but is not retained as widget analytics.
Our website may use services such as Google Analytics or Microsoft Clarity if these services are introduced. Where we introduce cookies, persistent identifiers, or other tracking technologies that materially change how personal information is collected or used, we will update this Privacy Policy as appropriate.
Customers are responsible for considering and meeting their own privacy and cookie disclosure obligations in relation to their websites and their use of our widgets.
We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include access controls, authentication and security measures, secure infrastructure, and other safeguards appropriate to the nature of the information we hold. API keys are stored in hashed form rather than as plaintext credentials.
Personal information may be stored or processed in Australia and in other countries where we or our service providers operate. While we take reasonable steps to protect information, no method of transmission, storage, or electronic security is completely secure, and we cannot guarantee absolute security.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as otherwise required or permitted by law.
Following closure of an account or Team, we may retain certain information where necessary for legal, accounting, security, fraud prevention, dispute resolution, compliance, or other legitimate operational purposes. Backups may also retain information for a limited period after deletion.
When personal information is no longer required, we take reasonable steps to delete or de-identify it, taking into account applicable legal, operational, and security requirements.
Where applicable, the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles provide individuals with rights in relation to their personal information.
You may contact us to request access to personal information we hold about you or to request correction of information that is inaccurate, incomplete, or out of date. You may also contact us about how we handle your personal information, including marketing communications.
We may need to verify your identity before processing a request. In some circumstances, we may be unable to provide access to or make changes to personal information where permitted or required by law.
To make a request or raise a privacy concern, contact us at [email protected].
Some of our service providers may store or process personal information outside Australia. This may include providers used for cloud infrastructure, payment processing, authentication, email delivery, content delivery, analytics, security, and other technology services.
Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure that the disclosure and handling of that information complies with applicable privacy laws.
Customers may provide information or content when configuring their Teams and widgets, including logos, colours, branding, widget titles, descriptions, contact details, domains, and other configuration information.
Customers are responsible for ensuring that information they provide to Big Smoke Data, including any personal information, may lawfully be provided to us and processed in connection with the Service.
Where we process personal information on behalf of a customer, we generally process that information in accordance with the customer's instructions and the terms governing their use of the Service.
Big Smoke Data is a business-to-business service and is not directed towards children. We do not knowingly seek to collect personal information from children for the purpose of providing the Service.
We may update this Privacy Policy from time to time to reflect changes to our Service, practices, technology, or legal obligations. We will update the “Last updated” date when changes are made. Where appropriate, we may notify users of material changes through the Service, our website, or email.
Big Smoke Data Pty Ltd
[email protected]
See also our Terms of Service.