Privacy Policy

Last updated: April 2026

Questions? Contact us at privacy@blumetechub.com.au

1. Who we are

Prella is operated by Blumetec Hub Pty Ltd (ABN 44 694 990 175), a company registered in Queensland, Australia. In this policy, “we”, “us”, and “our” refer to Blumetec Hub Pty Ltd.

We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

For privacy enquiries, contact us at: privacy@blumetechub.com.au

2. What information we collect

We collect the following personal information when you use Prella:

InformationWhen collectedWhy we need it
Name, email addressAccount registrationTo create and manage your account
Business name, description, industry, locationOnboarding / website generationTo generate a website tailored to your business
Photos and images you uploadWebsite editingTo include on your generated website
Contact details you provide for your website (phone, address)Onboarding / website editingTo display on your generated website
Payment informationSubscription checkoutTo process billing via Stripe (we never see or store your card details)
IP address, browser typeEvery visitSecurity, abuse prevention, and error monitoring
Chat messages (change requests)Website editingTo process your requested changes via AI
Visitor name, email (from your website's contact form)When a visitor submits a form on your published websiteTo forward enquiries to you via email. We do not store visitor data long-term.
Website analytics (page path, referrer, timestamp)When visitors browse your published Pro websiteTo show you traffic data in your dashboard. No cookies, no IP addresses, no personal data collected.

We only collect information that is reasonably necessary to provide the service. We do not collect sensitive information (such as health data, racial or ethnic origin, or political opinions) and ask that you do not include such information in your business descriptions.

3. How we use your information

We use your personal information for the following purposes:

  • To create and manage your account
  • To generate and host your website using AI
  • To process your change requests via our AI engine
  • To process subscription billing
  • To send transactional emails (welcome, billing confirmations, service notifications)
  • To provide customer support
  • To detect and prevent fraud, abuse, and security incidents
  • To monitor and fix errors in the application

We will not use your information for purposes unrelated to providing the service without your explicit consent. We do not sell your personal information to third parties.

4. AI processing

Prella uses artificial intelligence (Anthropic's Claude API) to generate and modify your website. When you describe your business or request changes, your text is sent to Anthropic's servers for processing.

Anthropic's API terms state that data submitted via the API is not used to train their AI models. We verify this annually. Your business descriptions and change requests are used solely to generate your website and are not used by us or Anthropic to train AI models.

AI-generated websites are the output of an automated system. We do not represent AI output as professional advice of any kind.

5. Third-party services

We use the following third-party services to operate Prella. Your data may be transferred to these providers:

ServicePurposeData sharedLocation
SupabaseDatabase and authenticationAccount data, website dataAustralia (Sydney)
Anthropic (Claude API)AI website generationBusiness descriptions, change requestsUnited States
Cloudflare (R2, CDN)Website hosting and CDNGenerated website filesGlobal (nearest edge)
StripePayment processingBilling information (card details handled by Stripe only)United States
ResendTransactional emailEmail address, nameUnited States
VercelApplication hostingIP address, request logsUnited States
SentryError monitoringError details, IP addressUnited States
UpstashRate limitingIP addressUnited States
Google (Sign-In)AuthenticationName, email, profile pictureUnited States

We rely on each provider's Data Processing Agreement as reasonable steps to ensure overseas recipients comply with the Australian Privacy Principles (APP 8).

6. Overseas data transfers

Your primary data (account details, website content) is stored in Australia via Supabase's Sydney region. Generated websites are served globally via Cloudflare's CDN. Some data is processed by services based in the United States as listed above.

We take reasonable steps to ensure that overseas recipients of your data handle it in accordance with the Australian Privacy Principles. This includes reviewing each provider's privacy and data processing policies.

7. Data retention

We retain your personal information for as long as your account is active. If you cancel your subscription, your website is taken offline after a 7-day grace period and your account data is retained for 30 days to allow reactivation. After 30 days, your data is permanently deleted.

You may request deletion of your data at any time by contacting privacy@blumetechub.com.au.

8. Your rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Correct any inaccurate or out-of-date information
  • Request deletion of your personal information
  • Complain if you believe we have breached the Privacy Act

To exercise any of these rights, contact us at privacy@blumetechub.com.au. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, and disclosure. This includes encrypted data in transit (TLS/HTTPS), row-level security on all database tables, rate limiting on all public endpoints, and regular security reviews.

No data storage system is completely secure. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC within 30 days as required by the Notifiable Data Breaches scheme.

10. Cookies and analytics

Prella uses essential cookies required for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

Pro websites include a lightweight analytics script that records page views. This script does not use cookies, does not collect IP addresses, and does not collect any personally identifiable information. It records only the page path, referrer URL, and timestamp. This data is stored in our database and is accessible only to you via your editor dashboard.

We use Google Analytics 4 on prella.com.au (the marketing site) for aggregate traffic analysis. This is subject to Google's privacy policy.

11. Marketing communications

We only send transactional emails related to your account and service (welcome emails, billing notifications, service updates). We will not send marketing emails without your explicit opt-in consent. You can unsubscribe from any communications using the unsubscribe link in our emails or by contacting support@blumetechub.com.au. We will action unsubscribe requests within 5 business days as required by the Spam Act 2003.

12. Children

Prella is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will delete it promptly.

13. Data breach notification

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act 1988. We will take reasonable steps to contain the breach and mitigate any harm.

14. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or by a prominent notice on our website. Your continued use of Prella after any changes constitutes acceptance of the updated policy.