Privacy Policy

Last Updated: February 8, 2026

1. Introduction

BowerBird ("we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy details how we collect, use, store, and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using the BowerBird web monitoring system, Chrome Extension, API, or related services (collectively, the "Service"), you consent to the data practices described in this policy.

2. Information We Collect

We collect information that is reasonably necessary for the provision of our web monitoring and change detection services.

2.1 Personal Information

Account Details: When you register (via Google OAuth), we collect your name, email address, and Google profile picture.
Organization Data: If you are part of a team, we collect information about your organization and your role within it.
Communications: Records of your interactions with our support team or responses to feedback questionnaires.

2.2 Usage and Technical Data

Monitoring Data: The URLs you submit for monitoring and the specific configuration of your monitoring rules.
Extension Activity: When you use our Chrome Extension, we process the content of the pages you actively select to analyze and generate monitoring rules. We do not passively track your browsing history across all websites.
Device Information: IP address, browser type, time zone settings, and operating system.

3. How We Collect Information

Direct Interaction: When you sign up, create a monitoring rule, or submit feedback forms.
Automated Technologies: Via cookies, server logs, and similar technologies.
Third Parties: We authenticate users exclusively via Google OAuth and receive basic profile information directly from Google.

4. Purposes of Collection and Use

We use your information to provide services, authenticate users, improve our scraping algorithms, provide customer support, and send service updates.

5. Data Storage and Security

5.1 Location of Data (Australian Sovereignty)

We are committed to data sovereignty. Our primary infrastructure and databases are hosted in Sydney, Australia (Google Cloud australia-southeast1 region). This ensures your sensitive monitoring data remains within Australian legal jurisdiction.

5.2 Security Measures

We implement encryption in transit (TLS/SSL) and at rest, strict role-based access control (RBAC), and secure JWT authentication.

6. Disclosure of Personal Information

We do not sell your personal information. We may disclose information to trusted service providers (e.g., Google Cloud) who are bound by confidentiality, or if required by law.

7. International Data Transfers

While our primary servers are in Australia, some third-party providers may process data in other jurisdictions (e.g., USA). By using the service, you consent to this practice.

8. Your Rights

Under the Australian Privacy Principles, you have the right to request access to your data, correction of inaccuracies, or deletion of your account. Contact us to exercise these rights.

9. Web Scraping and Third-Party Content

BowerBird is a tool for monitoring public/authorized web content. When you configure the Service to monitor a URL, you represent that you have the right to access that content.

10. Contact Us

For privacy questions or complaints, please contact our Privacy Officer:

Email: privacy@bowerbird.io
If unsatisfied, you may contact the OAIC at www.oaic.gov.au.