Legal
Privacy
How Cord8 will handle your personal information.
Last updated: 7 November 2026 (draft)
Draft. This page is a draft waiting for legal review. It is not yet in force and may change.
Overview
Draft. This page is about this website and its forms. The details are provided to XE TECHNOLOGIES PTY. LTD., ABN 93 685 624 711, ACN 685 624 711. The full privacy policy will be published here before it takes effect.
Collection notice
Draft. The website forms collect only what each form asks for: the waitlist form collects your name and email, plus optional business name, team size and interest; the enquiry form collects your name, email, business name, topic, message and an optional phone number. Each form also records the version of the collection notice you agreed to, and when.
We use these details to contact you about your waitlist place or to reply to your enquiry. Our staff and the services that run this site (Cloudflare and Brevo, our email provider) can see them. You can ask us to withdraw or delete your details through Enquire more.
When you join the waitlist or send an enquiry, we email the details you entered to our team using Brevo, our email provider. Brevo may handle those details outside Australia. For a waitlist entry the email has your name, email, business name, team size, interest and referral code. For an enquiry it has your name, email, phone, business name, topic and message. The product news box is not sent in the email.
If you arrived through a referral link, we record the referral code with your waitlist entry and put it in that email.
An optional box on the waitlist form lets you ask for product news; it is not ticked unless you tick it, and agreeing to the service purpose does not agree to news. We do not send marketing email yet.
We use a rate limit to slow down abuse. It works from your network address, which is not saved with your details.
How long we keep it
Draft, proposed periods:
- Waitlist entries: until we invite you and you sign up, or you ask us to remove them. We review the list at 12 months.
- Enquiries: 12 months after you send them, then deleted.
- Submissions our spam checks flag as suspicious are kept for review, then deleted after 30 days.
- The
c8_site_refcookie: 30 days. - The network address used for the rate limit: not saved with your details.
Disclosed overseas
Draft. Cloudflare (which hosts this site and its database) may handle your details outside Australia. Brevo, our email provider, emails the details you entered on the waitlist and enquiry forms to our team, and may handle them outside Australia. To see, correct or delete your details, contact us through Enquire more.
Cookies and storage
Draft. If you arrive through a referral link, we set a cookie called c8_site_ref. It holds the first and the most recent referral code you arrived with and the time of each. It lasts 30 days, is only sent to this website, and cannot be read by scripts on the page. If you join the waitlist, we save the codes that are under 30 days old with your entry.
Draft. Our forms can use Cloudflare Turnstile, a check that tells people from bots. Where it is switched on, Cloudflare loads a script on the form and receives details from your browser, including your network address, to run the check.
The Cord8 app
Draft. This draft does not yet cover the Cord8 app: workspaces and their team members, the invoice images you scan, and payments. That part of the privacy policy will be added before it takes effect.