CircleBAS is operated by The Circle Digital ("we", "us", "our"). This policy explains what personal information we collect through CircleBAS, why we collect it, who we share it with, and how you can access or correct it.
| Category | Examples |
|---|---|
| Account details | Name, email address, password (stored locally in your browser, not on our servers — see Section 7) |
| Business details | Restaurant/business name, ABN, state, optional LINE ID |
| Receipt data | Photos or PDFs of receipts and invoices you upload, and the vendor, date, amount, and GST information our AI extracts from them |
| Billing information | Subscription status and plan. Card details are entered directly into Stripe's checkout page — we never see or store your card number. |
| LINE login data | If you sign in with LINE, we receive your LINE user ID and basic profile info from LINE to create your account |
| Usage data | Scan counts and timestamps, used to enforce plan limits and for basic troubleshooting |
We do not sell your personal information, and we do not use your receipt data to train AI models.
We use a small number of service providers to run CircleBAS. Each only receives the data it needs to do its job:
| Provider | What they receive | Purpose |
|---|---|---|
| Anthropic (Claude AI) | The receipt/invoice image or PDF you upload | Extracts vendor, date, totals, and GST from the document |
| Stripe | Your email and payment details | Processes subscription payments — Stripe is PCI-DSS compliant; we never receive your full card number |
| Supabase | Your account and scan data | Database hosting for the service (data centre located in Japan) |
| LINE | Your LINE user ID, if you link or log in with LINE | Login, and optional scan-confirmation messages |
Some of these providers are located, or process data, outside Australia (including the United States and Japan). By using CircleBAS you consent to your information being handled by these overseas providers for the purposes described above.
We do not otherwise share your personal information with third parties, except where required by law.
We keep your account and scan data for as long as your account is active, so your BAS history remains available to you. If you want your account and data deleted, contact us (Section 10) and we will delete it, except where we're required to retain records for legal, accounting, or fraud-prevention purposes.
CircleBAS uses your browser's local storage to keep you signed in and to cache your scan history for offline viewing — this is not a third-party tracking cookie. We do not currently use analytics or advertising trackers.
We take reasonable steps to protect the personal information we hold from misuse, loss, and unauthorised access. However, no method of storage or transmission is 100% secure, and we cannot guarantee absolute security. CircleBAS is an early-stage product under active development — if you become aware of a security issue, please let us know (Section 10) so we can address it.
Note on passwords: if you sign in with email and password (rather than LINE), your password is currently stored only in your browser's local storage and is not verified against a server. Don't reuse a password you use elsewhere, and prefer LINE login where possible.
Under the Australian Privacy Principles, you can ask us to:
To make a request, contact us via Section 10. We'll respond within a reasonable timeframe.
CircleBAS is intended for business owners and is not directed at children. We do not knowingly collect personal information from anyone under 18.
Questions, requests, or complaints about this policy or your data: message us on LINE at lin.ee/ni4Scpc.
If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
We may update this policy from time to time as the service changes. Continued use of CircleBAS after an update means you accept the revised policy.
← Back to CircleBAS