Privacy Policy

Last updated: 17 September 2026.

Who we are

WoodFireERD is operated by WoodFireTech. Contact us at admin@woodfiretech.com.

What we collect

• Your email address, for sign-in. Sign-in is handled by Microsoft Entra External ID; we never see or store a password.
• Your subscription — which plan you are on, when it started and when it ends, and the identifiers Stripe gives us for your subscription and its invoices. Card details are entered on Stripe's own payment page and never reach us.
• Your database's structure, while you are working on it — never the data in it. WoodFireERD reads the shape of a schema: tables, columns, keys, indexes, and the text of views, procedures, functions and triggers. It does not read the rows in your tables.
  The server address and credentials you type are used for that one read and then discarded — never written to a saved project, never stored here. An uploaded DACPAC is written to a temporary file, read, and deleted. The schema is held only while your session lasts, so closing the page is the end of it, and projects are saved to your own machine rather than to us. The Windows application does all of this on your machine and sends us none of it.
• Technical logs, through Microsoft Application Insights: the pages requested, how long they took, your IP address, your browser's user-agent, and the details of any error. These tell us the site is working and let us fix it when it is not. One thing worth naming plainly: when the website reads a database for you, the address of that server can appear in these logs as part of the recorded request. Its contents never do, and nor do your credentials.
• Your desktop licence record, if you download the Windows application: your account, the plan, the dates it runs between, and an identifier for the machine it is bound to. This is what stops one subscription being installed everywhere.
• Anything you send through the contact form — your name, email address, topic and message. It is emailed to us and not stored on this website; it then lives in our mailbox like any other email. Your address is used to reply and nothing else.

Cookies and browser storage

Only what the site needs to work: a cookie that keeps you signed in, one that protects forms against cross-site submission, a short-lived one carrying a status message between pages, and your light or dark theme, which is remembered in your browser and never sent to us. There are no advertising cookies and no third-party trackers.

How we use it

To sign you in, provide the Service, take payment for and manage your subscription, answer you when you write to us, and keep the Service secure and working. We do not sell your personal information, and we do not use it to advertise to you.

Who we share it with

Only the providers that make the Service work: Microsoft — Azure for hosting and Application Insights for the technical logs, Entra External ID for sign-in, and Microsoft 365 for the mailbox the contact form writes to — and Stripe for payments. Each handles data under its own terms. We otherwise disclose personal information only where the law requires it.

Where it is held

The website, its database and its logs are hosted in Microsoft's Australia East region. Stripe and Microsoft's sign-in service may process data overseas under their own terms.

How long we keep it

Your account and subscription records last as long as your account does, and for as long afterwards as tax and business records law requires — in Australia, generally five years for anything relating to a payment. Technical logs are kept for a limited period and then deleted automatically. Schemas and credentials are not kept at all.

Your rights

You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and what goes with it. Write to admin@woodfiretech.com and we will answer within a reasonable time. If you are in the EU or the UK, the GDPR gives you these rights and others, including the right to object and to lodge a complaint with your supervisory authority. In Australia, you may complain to the Office of the Australian Information Commissioner if you are not satisfied with our response.

Changes

We may update this policy; the "last updated" date above shows when.