Privacy

Last updated 07/10/2026

VaryPro is run by THE FROLIC APP PTY LTD (ABN 61 697 066 265). This page says what we collect, why, who sees it and how long we keep it. We follow the Australian Privacy Principles.

While you fill in the form

What you type stays in your browser, saved on that device so you don't lose it. Nothing you type is sent to us until you download the preview PDF (which we make and don't keep) or sign and send the document.

Photos and PDFs you attach are different: each one is uploaded when you add it and kept privately, so it can go into the preview and the document. A photo is redrawn in your browser before it is uploaded, which removes the location and camera details a phone stores in it. If you don't send the variation, the files are deleted after a day.

When you send a variation

We store the document and what it contains, so we can deliver it and so both parties can get it again:

• the names, addresses, email addresses, phone numbers, ABNs and licence numbers you enter for both parties;
• the project name and site address, the contract details, the variation and its prices;
• the photos and files you attach, with a fingerprint (SHA-256) of each;
• your typed name, your drawn signature, the time you signed, your internet (IP) address and your device (browser) details.

When the other party signs or declines

We record when they first open the link, and when they sign: their typed name, drawn signature, the time, their internet address and device details. If they decline, we record the time and the reason they give. These make up the signing record printed on the PDF.

Payments and signing in

Card payments are handled by Stripe. We receive the payment's status, amount and your email address; we never see your card number. Paying creates an account against your email address. The first variation paid for from an address waits until you press Send in an email we send to that address, and we record when you did (or when you first signed in), so nobody can send in your name from an address they don't read. When you sign in, a cookie keeps you signed in on that device.

How the site is used

To see where the form helps and where people give up, we record which steps a visit reaches — landed, started, previewed, paid, waiting for the sender's Send, sent, opened, signed, declined — with the page, the site the visit came from, a random identifier kept in your browser, and whether the visit was a person, an automated browser or one of our own tests. That last one is worked out from the details your browser sends about itself, which we don't keep. These records hold no names, email addresses or internet addresses. There is no advertising tracking.

Who sees it

• The other party to your document sees the document, its attachments and its signing record.
• Each attachment's link is printed in the PDF, so anyone either of you gives the PDF to can open the attached files.
• The services that run VaryPro: Supabase (database and file storage, in Sydney), Vercel (hosting), Resend (sending email) and Stripe (payments). Some of them are based in the United States and may store or process information there.
• We don't sell personal information or share it for marketing.

How long we keep it

Sent and signed documents are kept so both parties can get them again, until you ask us to delete them, unless a law requires us to keep a record. A paid variation waiting for its sender to press Send is kept, with its files, until it goes or you ask us to delete it. A document that was never paid for is deleted, with its signature and its files, after 7 days. Files attached to a variation that is never sent are deleted after a day.

Access, correction and complaints

To see or correct what we hold about you, to ask us to delete a document, or to complain about how we have handled your information, email team@varypro.com. We will reply within 30 days. If you aren't satisfied with our reply, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.