The privacy promise.

I'm Peter, and I'm building Domio. This page is the plain-English version of how I handle your data. If anything here is unclear, email me at peter@domio.au and I'll fix the wording.

What I collect

Today, on this pre-launch site, I collect:

• your email address;
• if you complete the short questionnaire, your answers (the type of property you have and your home-maintenance priorities);
• if you choose PRO, the fact that you subscribed and the customer and subscription IDs that Stripe gives me;
• basic technical information collected automatically by the tools described under "Cookies and analytics" below.

I don't ask for your home address, phone number or date of birth, and your card number goes straight to Stripe, never to me.

When you use the Domio app, I also store what you choose to upload, such as receipts, manuals, warranty certificates, building and pest inspection reports, photos of equipment, and the reminders you create — together with the details you record about your home and its appliances.

Where it's stored

I want to be straight with you about where your data physically lives. There are two parts: this marketing site and its waitlist, and the Domio app itself.

• Waitlist data (your email, tier choice, any questionnaire answers, and your Stripe customer ID if you chose PRO) is stored in Supabase, in their Singapore region (ap-southeast-1). Encrypted in transit (TLS) and at rest. Singapore is the closest region with mature infrastructure. Once Domio launches the product proper, I plan to move customer data into the AWS Sydney region.
• Your home records — your properties, appliances, service history, reminders and settings — are stored in the same Supabase project and region. Each row is tied to your account, and the database itself refuses to return another person's rows rather than relying on the app to ask nicely.
• Documents you upload — receipts, manuals, certificates, photos — are stored in a private Supabase storage area, again in Singapore. There is no public link to them. When you open one, the app asks for a signed link that works for sixty seconds and then stops working.
• The website is hosted on Vercel's global edge network. Page requests are served from whichever Vercel edge is closest to you, and the small amount of server-side code (the signup endpoint and the Stripe webhook receiver) runs in Vercel's serverless functions.
• Payments for the PRO subscription are processed by Stripe. Your card details go directly to Stripe and never touch my servers (I use Stripe-hosted Checkout). I only ever see the Stripe customer and subscription IDs.
• Transactional email (the welcome email after you join the waitlist) is sent via Resend, which processes your email address purely to deliver the message.

Sending data overseas

Some of my providers store or process your information outside Australia: Supabase (Singapore), PostHog (European Union), Stripe (United States), Resend (United States), Anthropic (United States, for the document-reading features described below), and Meta (United States, for the advertising pixel described below). I take reasonable steps to make sure each provider handles your information consistently with the Australian Privacy Principles.

Who can see it

Your documents and your home records: just you and me. The providers named above only see the slice of data they need to do their specific job, and each is bound by its own privacy terms. The one thing other Domio customers can see is described under "What other Domio customers can see" below — appliance brands and models, never anything that identifies you.

I will never sell your data. I will never share it with insurers, real-estate agents, banks, advertisers, or anyone else trying to upsell you because they noticed your gate motor is due for a service. Your home, your data.

Cookies and analytics

I use a small number of measurement tools on this site:

• Vercel Web Analytics for basic page-view counts. Cookieless, no personal information collected.
• PostHog (hosted in the European Union) for product analytics and session replays. Replays record on-page activity such as clicks, scrolls and mouse movement, so I can see how the site is being used. Form fields are masked, so anything you type, like your email, appears as *** in any recording.
• The Meta (Facebook) pixel, which helps me measure how my ads perform and reach people who have visited the site. The pixel sends your IP address, device and browser details, and the pages you view to Meta Platforms, Inc. in the United States. It does not send your name or email.

These tools run when you visit the site. If you'd rather not be tracked by the Meta pixel or PostHog, email me and I'll exclude you, or use your browser's tracking controls.

AI features

Two features in the app send information to an AI provider. Today that provider is Anthropic, the makers of Claude, in the United States. If I ever change provider I will update this page.

Reading a document you upload. When you upload a receipt, a manual or a photo of an appliance label, a copy is sent to Anthropic to be read, and what it finds — the brand, model, dates, price and so on — is filled into the form for you. Photos are made smaller before they are sent. Nothing is saved to your home record until you press Save, and you can change or clear anything it read before you do.

Finding a manufacturer's manual. When an appliance record has a brand and model but no manual attached, Domio searches for the manufacturer's manual and reads what it says about servicing. Only the brand and model leave Domio for this — never the serial number, your address, or anything else on the record. What the manual says is shown to you as a suggestion; it is not applied to your record unless you accept it.

Anthropic's commercial API terms provide that content sent to it is not used to train their models, and I chose it on that basis. Their own privacy terms govern what happens to a copy once it reaches them.

These features are automated and best-effort. They can misread a document or find the wrong manual, which is why nothing they produce is saved without you seeing it first. Always check anything that matters — particularly anything to do with gas, electrical work or safety — with a qualified professional. You can ask me how a particular automated output was produced.

What other Domio customers can see

Domio keeps a shared list of appliance brands and models, so that when the next customer starts typing "Rinn…" they are offered "Rinnai" rather than typing it from scratch. When you save an appliance record, its brand, model and category join that list.

That is all that joins it. Your serial numbers, who you bought from, who installed it, your purchase dates, the documents themselves, your name, your email and your address are never shared with another customer, and nothing in the shared list is linked back to you or to your home.

What you paid contributes to a typical price range for that model, but only under three limits, each enforced by the database rather than by good intentions: at least five different owners must have entered a price for that exact model before any range appears; the highest and lowest figures are thrown away before the range is worked out; and what is left is rounded outward to the nearest $50. Your exact figure is never shown to anyone.

If you would rather not contribute at all, leave the model field blank, or email me and I will remove your entries.

Your rights

Under the Australian Privacy Principles (APPs) in the Privacy Act 1988, you can:

• Ask what data I hold about you, and get a copy.
• Correct anything that's wrong.
• Ask me to delete everything.
• Complain to me first, and to the Office of the Australian Information Commissioner (OAIC) if you're not happy with my response.

Deleting everything

One email to peter@domio.au with the subject "delete me". I'll confirm within seven days, then wipe your account and any data I hold within thirty. Backups roll off naturally within ninety days.

How long I keep your data

If you join the waitlist and never become a customer, and you don't ask me to delete you, I'll delete your waitlist data within 24 months of launch. You can ask me to delete it sooner at any time.

If something goes wrong

If there's a data breach that's likely to cause you serious harm, I'll act quickly to contain it, assess it, and tell you and the OAIC where the law requires it.

Changes

If I change anything here that affects you, I'll email PRO subscribers before it takes effect. I won't quietly add new uses for your data and bury them in a paragraph nobody reads. I'll also update the version and date at the top of this page.

Contact

Peter, founder of Domio. Email: peter@domio.au.