Privacy Policy

Last updated: [DATE]

Fishbole (“Fishbole”, “we”, “us”, or “our”) is operated by [Fishbole Pty Ltd], ACN [ACN], a company incorporated in Australia. This Privacy Policy explains how we collect, use, disclose and protect personal information when you use our website and platform (the “Service”).

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also aim to meet the standards of other privacy frameworks, including the EU/UK GDPR and the US Children’s Online Privacy Protection Act (COPPA).

Because Fishbole is used in schools by students who may be children, we have designed the Service so that students only ever join through their school or teacher, with the school’s consent. Protecting student privacy is central to how the Service works.

1. A summary for the people in a hurry

• We collect only what we need to run the Service: account details, the presentations you create, and basic usage data.
• Students join only through a school or teacher, under the school’s authority and consent. We do not knowingly allow children to sign up on their own.
• We do not sell your personal information, and we do not serve advertising inside the Service.
• You can delete your entire account and all associated content at any time from your settings.
• If you have a privacy question, email privacy@fishbole.io.

A plain-language summary written specifically for schools is available on our Privacy for Schools page.

2. The information we collect

Information you give us

• Account information: name and email address when an account is created.
• Content: the presentations, slides, recordings (audio and video), chapters, and any notes or action-form responses you create or upload.
• Payment information: if you upgrade to a paid plan, payment is processed by our payment provider (Stripe). We do not store your full card number on our systems.
• Communications: messages you send us, such as support requests.

Information we collect automatically

• Usage data: how the Service is used — pages viewed, features used, presentations created and shared, and viewership data (for example, who watched a presentation and for how long).
• Device and technical data: IP address, browser type, and similar technical information.
• Cookies and analytics: we use cookies and analytics tools to understand and improve the Service. See section 8.

Information from third parties

• Google Slides: if you connect Google Slides, we access the slide content you choose to import, through Google’s API, to display it in your presentation.

3. Children and student privacy

Fishbole is designed for use in educational settings. Our approach to children’s data is:

• Students access Fishbole only through their school or teacher. A teacher or school invites or provisions student access, acting under the school’s authority. The school is responsible for obtaining any parental or guardian consent required under the laws that apply to it.
• We do not knowingly collect personal information directly from a child outside of this school-authorised context.
• We limit the information collected from students to what is needed for the educational purpose — creating and sharing a presentation and letting a teacher review it.
• We do not use student personal information to build advertising profiles, and we do not sell it.
• If we become aware that we have collected personal information from a child without the appropriate school or parental consent, we will delete it.

If you are a parent or guardian and believe your child has provided us information without proper consent, contact privacy@fishbole.io and we will address it promptly.

4. How we use information

We use personal information to:

• Provide, operate and maintain the Service;
• Let users create, record, share and review presentations;
• Process payments and manage subscriptions;
• Provide support and respond to enquiries;
• Understand and improve how the Service is used;
• Protect the security and integrity of the Service and prevent misuse;
• Comply with our legal obligations.

We do not use personal information to serve third-party advertising, and we do not sell personal information.

5. How we share information

We share personal information only as described here:

• With people you choose: when you share a presentation (for example, a student sharing with a teacher via a link or email invite), the presentation and associated information are available to the people you share it with, according to the privacy setting you select (draft, private, or public).
• With service providers (“sub-processors”) who help us run the Service, under contracts that require them to protect the information. These currently include:
  • Google (Google Slides API; Google Analytics; Google Tag Manager)
  • Stripe (payment processing)
  • Meta/Facebook (a marketing pixel on our public website only — not inside the student-facing Service)
  • Cloudflare (website hosting and delivery)
• For legal reasons: where required by law, or to protect the rights, safety and property of Fishbole, our users, or others.
• In a business transfer: if Fishbole is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

6. Where your information is stored

We and our service providers may store and process information in Australia and overseas. Some of our providers (such as Google, Stripe, Meta and Cloudflare) may process data on servers located outside Australia. Where information is transferred overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

7. How long we keep information, and deleting your account

We keep personal information for as long as your account is active or as needed to provide the Service, and as required to meet legal, accounting or reporting obligations.

You can delete your entire account at any time. The Service includes a “delete account” option in your settings. When you use it, your account and all associated content — including your presentations, recordings and slides — are deleted from the Service. Some information may remain in backups for a limited period before being overwritten, and we may retain limited records where the law requires.

Schools and teachers can also request deletion of student accounts and content by contacting privacy@fishbole.io.

8. Cookies and analytics

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Service is used. We use Google Analytics 4 and Google Tag Manager to measure and improve the Service. On our public marketing website we also use a Meta/Facebook pixel to measure the effectiveness of our marketing.

You can control cookies through your browser settings. If you are in a region that requires consent for non-essential cookies, we will seek your consent as required.

9. Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, disclosure or alteration. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately to any security incident.

10. Your rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Ask us to correct information that is inaccurate;
• Ask us to delete your information (you can do this yourself via account deletion);
• Object to or restrict certain processing;
• Request a copy of your information in a portable format;
• Complain to a privacy regulator.

To exercise any of these, email privacy@fishbole.io. In Australia, you may also contact the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Continued use of the Service after changes take effect means you accept the updated Policy.

12. Contact us

For any privacy question or request, contact:

Privacy — Fishbole Email: privacy@fishbole.io [Fishbole Pty Ltd], ACN [ACN], Australia