Privacy Policy

Who we are

This website is operated by [LEGAL ENTITY NAME] (ABN [ABN]), trading as [TRADING NAME / SUBPLOT] ("Subplot", "we", "us"). Contact: hello@bysubplot.com.

We are based in Australia. This policy is written with the Australian Privacy Principles (APPs) in mind and aims to be readable for visitors familiar with GDPR-style expectations.

What we collect

Through the brief form, we collect the details you enter:

• Name
• Work email
• Company
• Website (optional)
• What decision you are trying to make
• Markets or competitors of interest
• Budget range and timeline preference

For spam prevention and security, our hosting and bot-protection providers may also process your IP address, basic request metadata and server logs (for example time of request and user agent).

Please do not include confidential or non-public information in the brief form. We agree terms before any sensitive material is shared.

Why we collect it

We use this information only to:

• Review your brief
• Reply if an engagement may be a fit
• Prevent spam and abuse of the form

We do not sell personal information. We do not send marketing emails unless you have separately asked us to.

How we store it

Brief submissions are not stored in a database on this website. When a brief is sent successfully, the content is delivered by email to our inbox and held there as ordinary email. We delete brief emails on request (see Access and deletion below), and otherwise keep them only as long as needed to respond and, if relevant, open an engagement discussion.

Who processes information for us

We use these processors to run the site and deliver briefs. Some may process information outside Australia:

• Vercel — website hosting and server logs
• Resend — email delivery of brief notifications (and optional confirmation emails if enabled)
• Cloudflare Turnstile — bot / spam protection on the brief form
• Google — the inbox that receives briefs (Gmail / Google Workspace)

Cookies and similar

We checked this site in a browser after a production build. On first-party pages under bysubplot.com / localhost we observed:

• No first-party cookies set by Subplot
• Empty localStorage
• Empty sessionStorage

When Cloudflare Turnstile is enabled, the Turnstile widget loads from challenges.cloudflare.com and may set cookies or similar storage on Cloudflare's domain for bot protection. Those are not first-party Subplot cookies. We do not use advertising or analytics scripts on this site, and we do not show a cookie banner because we do not set non-essential first-party cookies.

AI use

[AI USE — confirm before publishing: state whether any generative AI tools are used in desk research or report drafting, what they are used for, and that client brief contents are not used to train public models unless you confirm otherwise.]

Access, correction and deletion

You can ask us for access to the personal information we hold about you from a brief, ask us to correct it, or ask us to delete the brief email. Email hello@bysubplot.com.

Complaints

If you are unhappy with how we handle personal information, contact us first. You may also complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au.

Desk research sources

Separately from this website, our client reports use desk research drawn from public sources only — public documentation, pricing pages, release notes, reviews and similar material. We do not access non-public data about the companies we study through this site.