Privacy Policy

Exposure Collective Pty Ltd (ABN 50 614 268 361), Melbourne, Victoria, Australia ("we", "us") operates WarpLab: the website at warplab.studio and the WarpLab Desktop application. This policy explains what personal information we collect, why, who we share it with, and the choices you have. It applies to website visitors, beta applicants, account holders and people using the app.

We handle personal information in a way that is consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy should be read with our Terms of Use.

Depending on how you use WarpLab, we collect:

• Account details — your email address and password (your password is handled by our authentication provider and stored in protected form; we cannot read it), your name, business name, phone number, country, industry, and how you heard about us.
• Beta application and onboarding answers — your responses to the questions we ask when you apply for the beta and when you first use the app (for example your role, business type and size, and how you plan to use WarpLab).
• Your content — artwork, files, templates, cup and product specifications, job details, proofs and exports. We receive content when you choose features that send it to us (such as sharing a proof online, backing up jobs or saving cups to your account, or using the online trial), and when you choose to attach your artwork to an error or bug report (below).
• Job backups — while you are signed in to the desktop app, each job you save is copied to your account so you can open it on another computer: the job's artwork and layers, its name and cup, and the customer name, order number and online-proof details (including the name and email address of the person a proof is addressed to) you have entered for it. This is on unless you turn it off in the app (Settings → General → Back up jobs to my account); with it off, your jobs stay only on your computer.
• Export and job information — when you export from the desktop app we may record the job name, customer name, order number, artwork name, the type, file name or location and size of the files exported, and the job folder. If you enter other people's details (such as your customers' names), you are responsible for having the right to give them to us.
• Diagnostic and error reports — if the desktop app hits an error or runs unusually slowly, it may automatically send us a report. By default a report includes only the error message and technical details, the app version, device and operating system details, what the app was doing, and counts and sizes for the design you had open (such as how many layers and items it has). It does not include your artwork, screenshots or file names unless you choose to: you can turn on "Include my artwork in error reports" in the app's Settings, in which case reports also include the design you had open (its layers and artwork, as data and as an image of the artboard) and the name and folder of the file you most recently imported. When you send a bug report yourself, you choose whether to attach a screenshot and your artwork.
• Device and technical information — a random device identifier created by the app, the device name and type, operating system or browser, app version, IP address, and the times you use the Service. We use this to keep accounts secure, enforce our one-active-device rule, and keep a log of app downloads (which records your account, IP address and browser or device details).
• Communications — emails and messages you send us and the emails we send you about your application, account and support.
• Payment information — the beta is free until 1 January 2027, when paid plans start. Once they do, payments will be handled by our payment provider (Stripe); we will not store your full card details.

Our website uses only the cookies and browser storage needed to keep you signed in and to remember basic settings. At the time of writing we do not use advertising cookies, third-party analytics or tracking pixels. The desktop app keeps some settings, and a record that you have accepted our terms, on your computer.

• to review beta applications, approve access and create and secure your account;
• to provide the Service, including saving, syncing and sharing the things you ask us to;
• to give you support and to investigate, diagnose and fix errors;
• to improve the accuracy and output quality of WarpLab, and to understand how features are used during the beta;
• to enforce our terms, including the one-active-device rule and update requirements, and to prevent misuse;
• to contact you about your account, the beta and, with options to opt out at any time, WarpLab news and offers; and
• to meet legal obligations and protect our rights.

We use any artwork and files you include in diagnostic reports only to investigate and fix problems and to improve the Service. We do not sell your content or personal information, and we do not publish your content (other than proofs and links that you choose to share, with the people you choose to share them with).

We share information with service providers who help us run WarpLab, only as needed for that purpose:

• Supabase — authentication, database and file storage;
• Vercel — website hosting;
• Resend — sending emails such as application confirmations;
• HubSpot — our customer records: applicants' names, email addresses, company and role details;
• Stripe — payments, once paid plans start; and
• GitHub — hosting the app installers and updates (it sees the usual technical information, such as an IP address, when a download is made).

We may also share information with professional advisers, with authorities where the law requires or allows it, and with a buyer or successor if our business or the WarpLab product is sold or restructured (we would require them to respect this policy).

Our service providers may store and process information in countries outside Australia, including the United States. We choose established providers that publish security and privacy commitments, but those countries may have different privacy laws from Australia's. By using the Service you understand that your information may be handled in this way.

We use reputable hosting providers, encrypted connections (HTTPS), and access controls that limit who can see your information. No system is completely secure. If a data breach is likely to cause you serious harm, we will notify you and the regulator as the law requires.

We keep account information while your account is active and for a reasonable time afterwards. Automatic diagnostic reports are normally deleted after 90 days unless we need to keep one to resolve an ongoing issue. Job backups stay in your account until you delete them (in the desktop app, under “Jobs in your account”) or close your account; for each job we keep the latest saved version and the one before it. We may keep some information for longer where the law requires or to resolve disputes. When information is no longer needed we delete or de-identify it.

You can ask us at hello@warplab.studio to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or out of date;
• delete your account and your information, including your job backups (subject to anything we must keep by law); or
• stop sending you marketing — or use the unsubscribe link in any marketing email.

We aim to respond within 30 days. If you are not happy with how we have handled your information, tell us and we will try to put it right. You can also complain to the Office of the Australian Information Commissioner (OAIC).

WarpLab is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

We may update this policy. The version and date at the top of this page show when it last changed. If we make a significant change we will tell you, for example by email or in the app.

Privacy questions or requests: Exposure Collective Pty Ltd (ABN 50 614 268 361), Melbourne, Victoria, Australia — hello@warplab.studio.