Privacy Policy

This policy applies to everything Nullstrom operates:

• nullstrom.com — this website.
• Nullfield Calculator (web) — the traverse misclose calculator at calc.nullstrom.com.
• Nullfield Calculator (desktop) — the Windows and Linux builds.
• NullCad — the CAD application and its optional account system, including the early-access site at nullcad.io.

Nullstrom is operated by Nicholas Cluff, a sole trader based in Hobart, Tasmania, Australia — ABN 34 481 760 012. Questions about anything below go tohello@nullstrom.com.

The Privacy Act 1988 (Cth) exempts most small businesses, and a business this size is not automatically covered by it. We handle personal information in accordance with the Australian Privacy Principles the Act sets out regardless. What follows is a description of what we actually do, and we hold ourselves to it.

The three sites use Vercel's built-in analytics, which counts page views in aggregate. It sets no cookies, assigns no persistent identifier, and cannot follow you to any other site. We see how many people opened a page and which page they came from. We cannot see who you are.

Serving a page necessarily involves your IP address and browser user-agent reaching the hosting provider, which keeps them briefly in request logs for security and abuse handling. We do not use those logs to build a profile of you, and we do not combine them with anything else.

No cookies are set by any Nullstrom site. The light and dark theme preference is kept in your browser's local storage under the key ns-theme. Local storage is not a cookie: it is never transmitted to us, and clearing your browser data removes it.

Web version. Every bearing, distance, unit expression and closure result is computed in your browser. Nothing you type is transmitted to Nullstrom or to anyone else, nothing is stored on a server, and there is no account. If you close the tab, we have no record that the traverse existed.

Desktop version. The desktop builds are entirely offline. There is no account, no telemetry, no crash reporting, no licence check and no usage analytics. The application does not contact Nullstrom, and it will run indefinitely on a machine with no network connection.

An account is optional. NullCad runs without one, and used that way it collects nothing at all — no account, no telemetry, no crash reporting, no usage analytics, and no contact with Nullstrom.

An account exists so that a licence can be tied to a person. If you create one, it is the only personal information the application handles. It is held in Supabase, and it consists of:

• your email address;
• your authentication credentials, stored as a hash — we never see or hold your password in a readable form;
• your licence and subscription state: which licence you hold, whether it is active, and when it expires.

Your documents stay on your machine. NullCad files — the boundary model, the reinstatement, search plans and imagery you drop into the project, the drafting, and the operation log that saves alongside them — are stored locally, in the projection you measured in. They are not uploaded, not synchronised, not backed up by us and not readable by us. This is true whether or not you have an account: signing in does not change where your work is kept. Nullstrom cannot produce your client's survey data because Nullstrom does not have it.

If you do sign in, signing in and validating a licence are network requests, so your IP address reaches Supabase as an unavoidable part of making the connection. We do not log your location or track when you use the application.

Early access. If you join the early-access list at nullcad.io we hold your email address and use it only to send you notices about NullCad's development and release. Every message carries an unsubscribe link, and unsubscribing deletes the address.

Licences and subscriptions are processed by Stripe. Your card number is entered into Stripe's own payment form and goes directly to Stripe; it never passes through, and is never stored on, any Nullstrom system.

What we receive back and keep is the record of the transaction: your name, your email address, your billing country and state, the amount, the date, and the last four digits and card brand for reconciliation. Stripe's own handling of your information is governed byStripe's privacy policy.

Australian tax law requires us to keep records of a sale for five years from the date of the transaction, so invoice records are retained for that period even if you close your account.

When you write to hello@nullstrom.com— about a product, a licence, a bug, or a workflow neither product covers yet — we keep the message and your address so that we can reply and so that we have the history if you write again about the same thing.

If you send us a file to reproduce a bug, we use it only to diagnose that bug and delete it when the issue is resolved. If that file contains client survey data, say so and we will treat it accordingly; if you would rather not send it at all, we can usually work from the operation log or a redacted extract instead.

Each of these providers stores information outside Australia, which means your personal information is held overseas — a disclosure required by Australian Privacy Principle 8. We choose providers who commit contractually to protecting it to a comparable standard.

The only other circumstance in which we would disclose personal information is where we are legally compelled to — a court order, subpoena, or binding request from a regulator. If that happens and we are permitted to tell you, we will.

Account records are kept for as long as your account is open, and deleted within 30 days of you closing it — except for the invoice records tax law obliges us to retain. Early-access addresses are deleted on unsubscribe. Correspondence is kept while it is useful for support and reviewed periodically. Aggregate analytics contain no personal information and are kept indefinitely.

Everything travels over TLS. Passwords are stored only as hashes. Access to account and payment records is limited to the people who need it to run the business, which today is a very short list. No system is perfectly secure, but the surface area here is small by design: the less we collect, the less there is to lose.

You can ask us to show you the personal information we hold about you, to correct it if it is wrong, or to delete it. Emailhello@nullstrom.com and we will respond within 30 days. There is no charge. We may need to confirm your identity first, which for an account holder normally means writing from the address the account is registered to.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to or restrict processing, to receive your information in a portable format, and to lodge a complaint with your local supervisory authority. The same email address reaches us.

If you are unhappy with how we have handled your information or your request, tell us first so we can put it right — it is one person reading that inbox, and it is the fastest route to a fix. If you are still not satisfied, you can raise it with the Office of the Australian Information Commissioner atoaic.gov.au. The OAIC's jurisdiction over small businesses is limited, so it may refer you elsewhere, but it can advise you on your options.

Nullstrom's products are professional surveying tools and are not directed at children. We do not knowingly collect information from anyone under 16.

If we change what we collect or who we share it with, we will update this page and move the date at the top. Where a change materially affects account holders, we will email you before it takes effect rather than relying on you to re-read the page.

The current version is always atnullstrom.com/privacy/.