Privacy Policy
Last updated 17 August 2026
This policy explains how Kingdom Software, an Australian sole trader business (“Kingdom Software”, “we”, “us”, ABN 73 404 270 785), handles personal information in connection with SubmitMate (the “Service”), consistent with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). It covers two different people the Service handles data about:
- Account holders — the businesses/individuals who sign up to build and run campaigns.
- Form submitters— members of the public who fill in a form on someone else’s published campaign page. We hold this data as a service provider on behalf of the account holder who owns that campaign, not for our own purposes — see “Form submitters” below.
What we collect
Account holders
When you sign up and use the builder, we collect: your name and email (via our authentication provider, Amazon Cognito), your business/tenant identifier, and the campaign content you create (design JSON, uploaded images, brand kit colours/logo). Once billing is live, our payment processor will also hold your billing details — we don’t store full card numbers ourselves.
Form submitters
Each campaign owner configures their own form fields, so what a public campaign page collects varies — typically at least an email address, plus whatever custom fields the campaign owner has added. This data is stored so the campaign owner can view and export it, and so we can enforce the submission limits the campaign owner set. If you’re a form submitter and want to know exactly what a specific campaign collects or why, contact that campaign’s owner directly — they control the form. If you can’t reach them, contact us at support@kingdomsoftware.com.au and we’ll assist.
How we use it
- To operate the Service: authenticate you, save/publish your campaigns, record and let you export submissions, and enforce per-form/per-campaign submission caps.
- To provide support when you contact us.
- To improve the Service (aggregated, not sold or used for third-party advertising).
- Once billing is live: to process payment and send billing communications.
We do not currently use third-party analytics or advertising trackers on the Service. If that changes, we’ll update this policy first.
Where it’s stored
Data is stored on Amazon Web Services infrastructure in the Sydney (ap-southeast-2) region, and account identity in Amazon Cognito. Your session token is kept in your browser’s local storage, not a cookie.
Who we share it with
We share data with the infrastructure providers needed to run the Service (currently Amazon Web Services, and Amazon Cognito for authentication; once billing launches, a payment processor for that purpose only). We don’t sell personal information, and we don’t share form-submitter data with anyone other than the campaign owner who collected it and the providers above. We may disclose information if required by Australian law.
Retention & deletion
We retain account and campaign data while your account is active. Submission data is retained for as long as the owning campaign/account exists, or until the campaign owner deletes it. If you close your account, or a form submitter or account holder asks us to delete their personal information, email support@kingdomsoftware.com.au — as of this policy, deletion requests are handled manually (there is no self-serve deletion tool yet) and we aim to complete them within 30 days, except where we’re required to keep certain records for longer (for example, financial records once billing is live, which Australian tax law requires us to retain for a set period).
Security
All traffic to the Service is encrypted in transit (HTTPS). Access to stored data is restricted to what the Service needs to function, via AWS identity and access controls. No method of storage or transmission is 100% secure, but we take reasonable steps appropriate to the data we hold.
Your rights & complaints
Under the Australian Privacy Principles you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it (subject to the retention exceptions above). Contact support@kingdomsoftware.com.au. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Children
The Service isn’t directed at children, and we don’t knowingly collect personal information from anyone under 18 through account sign-up.
Changes to this policy
We may update this policy as the Service evolves (for example, once billing or a self-serve deletion tool launches). We’ll post the updated version here with a new “Last updated” date.
Contact
Questions or requests about this policy: support@kingdomsoftware.com.au.