Privacy Policy
Last updated 6 September 2026.
SPEC Business Solutions ("we", "us") handles personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles. This policy covers the SPEC app (specbizhq.com and app.specbizhq.com).
What we collect
When you sign up or are assigned a role: your name, work email, and the business you're part of. When you use SPEC: the org chart, KPIs, targets, scorecard answers, notes, gate figures, and diagnostic answers your business enters. We don't ask for or want anything beyond what running the platform needs — no financial account numbers, no government ID, no data about your own customers or staff beyond what a role needs (name, email, access level).
How we use it
To run the SPEC platform for your business: showing your scorecards, computing your pillar scores, and generating your monthly board output. We don't use your data to train any AI model, ours or a third party's, and we don't use it for advertising.
Per-tenant isolation
Every business on SPEC ("tenant") is walled off from every other one at the database level. Your data is never visible to, or mixed with, another business's data. Nothing about your business is shared publicly or used as a case study without your explicit permission.
Who we share it with
We use a small number of specialist services to run SPEC, each processing only what it needs to do its job:
- Supabase — hosts our database and handles sign-in, in Sydney, Australia.
- Vercel — hosts the application itself.
- Stripe — processes subscription payments; we never see or store your card details.
- Resend — sends transactional emails (invites, sign-in links, board-output notifications) on our behalf.
- Anthropic (Claude) — generates the plain-language board output from your period's scorecard and gate data. Anthropic processes this data to return the output to us; per Anthropic's own API terms, data sent through their API is not used to train their models.
None of these providers can see across tenants, and none of them are permitted to use your data for their own purposes. We don't sell personal information to anyone, ever.
Cookies
We use a single session cookie (set by Supabase Auth) to keep you signed in. No advertising or tracking cookies.
How long we keep it
For as long as your business has an account. If a subscription lapses, we keep your data (read-only) rather than deleting it, so you can pick back up later. If you want your business's data deleted entirely, contact us (below) and we'll do it, subject to anything we're required to keep for legal or accounting reasons.
Your rights
You can ask us what personal information we hold about you, correct it, or ask us to delete it, by emailing us below. We'll respond within a reasonable time and won't charge you for a reasonable request.
Children
SPEC is a business tool, not directed at or intended for children.
Changes
We may update this policy as the product or our providers change. We'll update the date above when we do.
Contact
Questions, requests, or a complaint about how we handle your information: manager@specbizhq.com. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).