Privacy Policy

Last updated: 21 April 2026

1. Who We Are

Mainline is operated by Kipple PTY LTD (ACN 696 825 662, ABN 50 696 825 662), trading as Mainline Systems, an Australian company. This policy explains how we collect, use, and protect your personal information when you use our service at mainline.dev.

2. What We Collect

Account information: Your name and email address, received from your OAuth provider (Google or GitHub) when you sign in. We do not collect or store passwords.

Usage data: Actions you take in the Service (creating stories, assigning people, releasing features) are recorded in an append-only changelog as part of the product's core functionality. Server access logs record IP addresses and request timestamps.

Billing data: Payment information is collected and processed by Paddle, our merchant of record. We do not store credit card numbers or payment details.

3. What We Don't Collect

4. How We Use Your Data

We use your data to:

We may use anonymised, aggregate data across all teams to publish research and improve the Service. No individual team, person, or story is identifiable in aggregate data.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We never will.

5. Third-Party Services

We use the following third-party services to operate Mainline:

Each service processes only the minimum data necessary for its function.

6. Cookies

We use a single encrypted session cookie to keep you signed in. We use self-hosted Umami for traffic analytics, which counts page views without cookies, fingerprinting, or cross-site tracking. Analytics data never leaves our infrastructure. We do not use any third-party cookies, tracking pixels, or behavioural analytics.

7. Data Retention

Your data is retained while your account is active. If you cancel your subscription, data is retained for 30 days to allow export, then permanently deleted. You may request immediate deletion at any time by contacting us.

8. Your Rights

You have the right to:

To exercise these rights, contact [email protected].

9. Data Security

We encrypt your data in transit and at rest, and collect only what is needed to operate the Service.

10. International Transfers

Your data is hosted on servers in the United States, operated by Hetzner Online GmbH and Google Cloud Platform. If you are located outside the United States, your data is transferred to and processed in the United States. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable data protection laws, including the Australian Privacy Act 1988 and the EU General Data Protection Regulation (GDPR) where applicable. Analytics data (page views only, no personal data) is processed on our own servers in Germany.

11. Legal Basis

We process your data on the basis of:

We comply with the Australian Privacy Act 1988 and the EU General Data Protection Regulation (GDPR) where applicable.

12. Changes to This Policy

We may update this policy with 30 days' notice. Material changes will be communicated via email or in-app notification.

13. Contact

For privacy questions or data requests, contact us at [email protected].

Kipple PTY LTD trading as Mainline Systems
Suite 32, 11-13 Church Street
Stanley TAS 7331, Australia