Your work stays yours.

How information is collected

We collect information directly when you create an account, choose a plan, contact support, build a workspace, upload a file, or participate in a Session.

We also receive limited information automatically from the browser and from providers involved in authentication, payments, hosting, security, and aggregate site measurement.

How information is used

We use information to provide the tools you choose, save and synchronise your work, authenticate access, manage memberships, process payments, support users, protect the service, and meet legal obligations.

We do not sell workspace content, use it for advertising, or use it to train AI models. We do not routinely inspect private workspace content. Access is limited to what is reasonably necessary for user-requested support, security investigation, service recovery, or legal compliance.

Storage, security, and retention

Cornerstone uses access controls, encrypted connections, provider security controls, and operational safeguards designed to protect personal information from loss, misuse, or unauthorised access.

Information is retained only while it is needed to provide the service, maintain security and records, resolve disputes, or meet legal and accounting obligations. When it is no longer required, it should be deleted or de-identified. You may ask us to delete your account information, subject to records we must keep.

Sharing and overseas processing

We share information only with providers that help operate the service, when you direct us to share it, or when disclosure is required for security, legal, or regulatory reasons. We do not sell personal information.

Some providers operate infrastructure outside Australia, including in the United States and other regions. We assess the providers used by Cornerstone and take reasonable steps appropriate to the information and applicable law.

Access, correction, and complaints

You may ask for access to personal information we hold about you, request a correction, ask for deletion where available, or make a privacy complaint by emailing philip.ronald.hultgren@gmail.com. We may need to verify your identity before acting on a request.

We will consider the request and explain the outcome. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

Data incidents

We investigate suspected unauthorised access, disclosure, or loss of personal information and take steps to reduce potential harm. Where the Notifiable Data Breaches scheme applies and serious harm is likely, affected people and the OAIC will be notified as required.