Ducey Privacy Policy

Effective Date: 1 July 2026

Ducey ("Ducey", "we", "our" or "us") is operated by Katrina Camrass trading as Ducey ("Operator"). This Privacy Policy explains how we collect, use, disclose and protect personal information when you use the Ducey platform, website and related services.

1. About Ducey

Ducey is a production workspace designed to help users organise and manage multimedia productions, projects, shoots and related production activities.

By using Ducey, you acknowledge that you have read and understood this Privacy Policy.

Ducey is intended for use by individuals aged 18 years and over. By using Ducey, you represent that you are at least 18 years of age. We do not knowingly collect personal information from persons under 18.

2. Information We Collect

We may collect the following information:

Account Information

  • Name
  • Email address
  • Phone number
  • Company or organisation name
  • Login credentials

Subscription Information

  • Subscription plan
  • Billing contact details
  • Billing addresses
  • Subscription status

Ducey does not store payment card details. Payments are processed by third-party payment providers including Stripe.

Project Information

Users may upload and store:

  • Project information
  • Production briefs
  • Call sheets
  • Budgets and budget tracking
  • Schedules
  • Crew lists
  • Talent information
  • Client information
  • Contracts
  • Production documents
  • Uploaded files and attachments
  • Project notes and communications

Technical Information

We may collect:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Log data
  • Usage analytics
  • Session information
  • Cookie and tracking data (see Section 15)

Team and Workspace Information

Where users invite team members, contractors, freelancers or clients into a workspace, we may collect personal information relating to those individuals.

3. Third-Party Information

Users may upload personal information about third parties including:

  • Crew members
  • Talent
  • Clients
  • Suppliers
  • Contractors
  • Project stakeholders

Users are responsible for ensuring they have the authority to upload and manage such information within Ducey. Users are also responsible for ensuring they have obtained any necessary permissions, consents or legal authority to upload personal information about third parties to Ducey. Ducey will handle all third-party personal information uploaded to the platform in accordance with this Privacy Policy.

4. How We Use Information

We may use information to:

  • Provide and operate Ducey
  • Create and manage user accounts
  • Process subscriptions
  • Deliver project management functionality
  • Enable collaboration between users
  • Share project information with authorised participants
  • Provide customer support
  • Improve platform performance and user experience
  • Send transactional and service-related communications
  • Send marketing and promotional communications (where you have consented — see Section 14)
  • Monitor security and prevent misuse
  • Comply with legal obligations

AI and Machine Learning: Ducey will not use your project data or personal information to train artificial intelligence or machine learning models. Any AI features introduced in future releases (see Section 13) will operate on your data solely to deliver functionality to you.

5. Ownership of Project Data

Users retain ownership of all project information, files, documents, media, production materials and other content uploaded to Ducey.

Ducey does not claim ownership of user content.

Users grant Ducey a limited licence to host, store, process and display such content solely for the purpose of providing the Services.

6. Shared Links and External Access

Ducey may allow users to share project information, documents and pages through external links. Users are responsible for ensuring shared links are distributed appropriately. Information accessed through shared links may be visible to anyone who has the link, so users should share links carefully. Shared links currently expire after 30 days and/or when the relevant production is archived.

7. Service Providers

We may engage third-party service providers including:

  • Stripe (payment processing)
  • Supabase (data storage and infrastructure)
  • Vercel (application hosting and delivery)

These providers may process information on our behalf in accordance with their own privacy policies.

We may disclose personal information where required by law, court order, regulatory authority or where reasonably necessary to protect our legal rights, users or the security of the Services.

8. Overseas Disclosure

Some personal information may be stored, processed or transferred outside Australia, including to jurisdictions where our service providers operate (such as the United States). By using Ducey, you acknowledge that information may be processed in jurisdictions with privacy laws that differ from Australian privacy laws.

9. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include encryption of data in transit and at rest, access controls, and regular monitoring of our systems. Access to personal information is restricted to authorised personnel and service providers who require access to perform their duties.

However, no internet-based service can guarantee absolute security.

10. Data Breach Notification

In the event of an eligible data breach as defined under the Privacy Act 1988 (Cth) and the Notifiable Data Breaches (NDB) scheme, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law. Notification will be provided as soon as practicable after we become aware of the breach.

11. Data Retention

We retain information for as long as reasonably necessary to provide services, comply with legal obligations and resolve disputes.

Where an account is cancelled:

  • Account access may cease immediately or at the end of the subscription period.
  • Data may be retained for up to 30 days following cancellation or expiry of the subscription.
  • Data may be permanently deleted after that period.

Personal information about third parties uploaded by users (such as crew, talent and client data) is subject to the same retention schedule unless earlier deletion is requested.

12. Your Rights

Subject to applicable law, users may request access to, correction of, or deletion of their personal information. Requests should be submitted using the contact details below. We will respond within a reasonable timeframe.

If you believe we have breached the Australian Privacy Principles, please contact us first using the details in Section 17. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Future Technologies

Ducey may introduce new technologies, including artificial intelligence and automation features, in future releases. Any such features will be introduced with appropriate notice, and this Privacy Policy will be updated to reflect how those features interact with your data before they are made available. As noted in Section 4, your project data will not be used to train AI or ML models.

14. Marketing Communications

Where you have provided consent, we may send you marketing and promotional communications about Ducey, including product updates, new features and offers.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us using the details below. Opting out of marketing communications will not affect transactional or service-related communications.

We comply with the requirements of the Spam Act 2003 (Cth) in relation to all commercial electronic messages.

15. Cookies and Tracking Technologies

Ducey uses cookies and similar tracking technologies to operate and improve the platform. These may include:

  • Essential cookies required for the platform to function
  • Analytics cookies that help us understand how users interact with Ducey
  • Session cookies that keep you logged in during a session

You may configure your browser to refuse cookies, however this may affect the functionality of the platform.

16. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be published on the Ducey website. Where changes are material, we will notify users by email or via the platform.

17. Contact

Privacy enquiries may be directed to:

Katrina Camrass trading as Ducey
Email: help@ducey.com.au
Website: www.ducey.com.au