Privacy Notice

We are Tradie Assistant Digital ("we", "us", "our"), the business behind BanterBox. We make personalised printable party game packs. You tell us about the person you are celebrating, and we build a game pack around them.

We are based in Victoria, Australia. We handle personal information under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the EU or UK GDPR applies to you, we handle your information under those rules as well, and where you live in California or another US state with privacy legislation, we honour the rights those laws give you.

This notice should be read together with our Terms of Service.

• We collect the organiser's email and name, details about the guest of honour, optional stories from contributors, payment status, and the finished game pack.
• Most of what we hold is information about other people. The organiser enters details about a guest of honour who is not our customer, and contributors add stories about that person.
• Details you enter are sent to Anthropic's Claude API to build the games. Anthropic does not use API inputs or outputs to train its models by default.
• We store packs so you can come back and reprint. You can ask us to delete a pack and everything attached to it at any time, and we will.
• We do not sell personal information, and we do not show contributor answers to the guest of honour as raw submissions.
• Payment is handled by Stripe. We never see or store your full card details.
• We sign you in with a magic link sent to your email. There is no password.
• Our data is stored in the United States. Our servers and providers are primarily in the United States, so your information is transferred internationally.

The person a pack is about is almost never the person who bought it. We think you should know exactly how we treat their information, whoever you are and whether or not you have ever used BanterBox.

If you are the organiser, you are the one entering details about someone else. Before you enter anything, you need permission from the people involved, and you confirm this at checkout. You should only share details that the person would be comfortable having read out at their own party. Do not enter health information, sexual history, financial details, immigration status, religious or political beliefs, criminal history, or anything else sensitive or damaging.

If you are a contributor, you were sent an invite link by the organiser. What you write is used as raw material to build games. The organiser can see your name so they know who helped, but your individual answers are not presented to the guest of honour as your submission.

If you are a guest of honour, you have the same rights over your information as our own customers do, even though you never signed up. You can ask us what we hold about you, ask us to correct it, and ask us to delete it. We will not ask the organiser for permission before acting on your request, and we will not tell them you contacted us unless deleting the pack makes that unavoidable, in which case we will tell you first.

To make a guest of honour request, email us at support@banterboxparty.com. Tell us the name and roughly when the event was, and we will use that to find the right pack.

Our role in legal terms: for the organiser's account details we act as a controller. For the details entered about the guest of honour and contributors we also act as a controller, because we decide how that content is processed to build the pack. The organiser is responsible for having a proper basis to share other people's details with us in the first place.

• Organiser account details: your email address, your name, when your account was created, and when you last signed in.
• Guest of honour details: the name of the person being celebrated, the type of event, an optional event date, and the free-text details you enter about them, such as interests, habits, stories and inside jokes.
• Contributor submissions: the contributor's name, their written answers, and when they submitted them.
• Consent records: when the organiser confirmed they have permission to share the details, and when a contributor agreed before submitting.
• Tone and game preferences: the tone level you pick and which games you select.
• Generated content: the finished game content and the PDF pack we build for you.
• Payment information: your payment status and the Stripe session reference. Stripe processes your card. We never receive or store your full card number.
• Technical and security data: standard server logs held by our hosting provider, such as IP address, browser type and timestamps, plus rate-limiting records we keep to prevent abuse.
• Support correspondence: anything you send us by email, so we can reply and keep a record.

We do not ask for, and you should not provide, special category or sensitive information about anyone.

Where the GDPR applies, these are our lawful bases.

Where we rely on legitimate interests, you can object. See "Your rights" below.

We use Anthropic's Claude API to build the games in your pack.

• The details you and your contributors enter are sent to Anthropic's API to generate game content.
• Anthropic states that inputs and outputs submitted through its commercial API are not used to train its models by default.
• We also run automated checks over the material, including a classifier that screens for topics the organiser marked as off limits.
• Generation happens after payment. The finished content is stored against your pack so you can download and reprint it.
• These automated processes produce party game content. They do not produce legal or similarly significant effects about any individual.

See Anthropic's Privacy Policy.

We share only what is needed with trusted service providers that help us run BanterBox. We do not sell personal information or share it for advertising.

We do not use your pack in our marketing. We will not show your pack, your guest of honour's details, or contributor stories on our website, our social media, or anywhere else, unless you ask us to or give us permission in writing. If we ever want to feature a pack, we will ask first, and no is a perfectly good answer.

We use these categories of service provider:

• Cloud infrastructure and operations: Hosting BanterBox, storing account and pack data, delivering finished files, securing the service, and running reliable background tasks.
• AI processing: Turning the details you provide into personalised game content and checking that content against your settings.
• Payment processing: Taking payment, preventing payment fraud, and keeping transaction records.
• Customer communications: Sending sign-in links, pack delivery emails, service notices, and replies to support requests.

We may also disclose information if we are legally required to, or to establish or defend legal claims.

We are in Australia, and our providers are primarily in the United States. If you are in the EU, the UK, or elsewhere, your information will be transferred outside your country.

Where the GDPR applies, we rely on the Standard Contractual Clauses or equivalent safeguards offered by each provider under their data processing terms. You can ask us for more detail about the safeguards that apply.

• Pack records, including guest of honour details, contributor submissions and generated content: kept while your account is active so you can reprint, and deleted on request at any time. If you do not ask us to delete it, we will remove packs that have had no activity for 24 months.
• Account details: kept while you have an account, and for a reasonable period afterwards.
• Payment and transaction records: kept for seven years to meet Australian tax and record-keeping obligations.
• Rate limiting records: short lived, and cleared automatically.
• Support emails: kept while needed to handle your request and keep a support history.

We take reasonable steps to protect personal information against unauthorised access, loss, and disclosure. This includes encryption in transit, access controls on our database, signed and expiring links for sign-in, and hosting on providers with their own platform security programmes.

No system is perfectly secure. If a breach is likely to result in serious harm, we will assess it and notify affected people and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, and any other regulator we are required to notify.

Wherever you are, you can ask us to give you a copy of the personal information we hold about you, correct anything that is wrong, delete your pack or account, and stop using your information for a particular purpose.

If the GDPR applies to you, you also have the right to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent where we relied on it. You can lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office at ico.org.uk.

If you are in California, we do not sell or share personal information as those terms are defined under the CCPA and CPRA, and we will not discriminate against you for exercising your rights.

If you are in Australia and you are unhappy with how we handled your request, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

To exercise any of this, email support@banterboxparty.com. We will respond within 30 days.

We use a small number of cookies, and none of them are for advertising.

• Sign-in cookies: we set a secure, HTTP-only cookie to keep you signed in after you click your magic link, and short-lived cookies to hold your progress while you fill in a pack.
• Analytics: we may use privacy-focused analytics provided by our host to understand overall traffic and page performance in aggregate. This does not identify you personally.

We do not use third-party advertising or cross-site tracking cookies. You can control cookies in your browser, but blocking our sign-in cookies will stop you reaching your pack.

BanterBox is for adults. You must be at least 18 to buy a pack or submit a contribution. We do not knowingly collect personal information from children.

Party packs sometimes involve younger family members as guests. Do not enter details about a child as the guest of honour, and do not invite anyone under 18 to contribute. If we learn we have collected information about a child, we will delete it.

We may update this notice as the product changes. We will post the latest version here and update the date at the top. For material changes we will email organisers with an active pack.

Questions, requests, or complaints: email support@banterboxparty.com and we will respond as promptly as we can.