Last updated: 17 August 2026
Oasyard is a registered business name of a sole trader established in Victoria, Australia, holding ABN 23 448 593 086. We are the data controller (and, under US state laws, the "business" / "controller") for your personal information. Our identity is verifiable at abr.business.gov.au using that ABN. Privacy contact: oasyard@gmail.com — email us for our full legal name and postal address.
This policy explains what we collect, why, and what we never do with it — in plain language on purpose. It applies wherever you live.
Oasyard is for outdoor spaces, and we ask you not to upload photos in which a person is identifiable. We want to be specific about what that means in practice:
Nobody else. We do not sell personal data, and we have never received money for it. We do not rent, trade or disclose it for anyone else's marketing.
We are based in Australia and our service providers above process data in the United States. Where required (for example for EU/UK users), these transfers rely on the providers' standard contractual clauses or an applicable adequacy framework. By using Oasyard you understand your photos and account data are processed in these countries.
Delete everything, yourself, instantly: Account → "Delete my account & all my designs" removes your account, your photos and your designs from our servers.
You can also email us to access, correct, receive a copy of, or delete your data, or to object to or restrict processing. We'll respond within a month. You won't be charged, and we'll never discriminate against you for exercising a right.
If you're not happy with how we handle your data, you can complain to your local authority: the OAIC (Australia), the ICO (UK), your EU data protection authority, the Privacy Commissioner (New Zealand or Canada), or your State Attorney General (United States). We'd appreciate the chance to fix it first.
Everyone gets the same core rights above, wherever you live. This section spells out what particular laws call them.
Australia (Privacy Act / APPs). You may access and correct your personal information and complain to us and then the OAIC. We comply with the Australian Privacy Principles in full. We use AI to generate a design from the photo you upload — that is a creative output you asked for, not an automated decision about you: nothing we automate decides anything affecting your rights, your access to a service, or your finances. We do not use your data for direct marketing without consent, and we do not disclose it to overseas recipients other than the service providers listed above.
EU / UK (GDPR & UK GDPR). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent where we rely on it. Our legal bases are listed against each category above. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects. Transfers to the US rely on the providers' standard contractual clauses or an adequacy framework.
California (CCPA/CPRA) and other US states (including Virginia, Colorado, Connecticut, Utah and Texas). You have the right to know what we collect and why, to access and delete it, to correct it, and to be free from discrimination for exercising these rights.
Canada (PIPEDA). You may access your personal information and challenge its accuracy, and complain to the Office of the Privacy Commissioner of Canada.
Two of them you can do yourself, right now, from the Account screen — no email, no form, no waiting:
For anything else — correction, restriction, objection, or withdrawing consent — email oasyard@gmail.com from the address on your account. We reply within 5 business days and act within 30 days, free of charge. We will never treat you differently for exercising a right.
There are two kinds, and they follow different rules.
If you are in Australia, we rely on your consent under the Spam Act 2003 — either because you ticked the box, or because you are a current customer and marketing about the service you are paying for is something you would reasonably expect. If you are in the EU, UK or Canada, we send marketing only with your express opt-in. You can turn marketing off at any time without affecting your subscription, and we will still send service email.
We do not sell, rent or share your email address with anyone for their own marketing.
We advertise on social platforms — Meta (Facebook and Instagram), TikTok and Pinterest — and we use their measurement and retargeting tools so we can tell which ads work and show follow-up ads to people who visited the site.
These tools are off until you agree to them. No advertising or analytics tag loads on your first visit. Where the law requires consent, we ask, and nothing loads unless you say yes. If your browser sends a Global Privacy Control signal, we treat it as a "no" and do not ask again.
When they are on, those platforms receive the fact that you visited a page or completed an action, along with technical data such as your IP address, browser and a platform cookie or identifier. They never receive your photos, your designs, or the contents of your account. Under California law, using these tools counts as "sharing" personal information for cross-context behavioural advertising, even though no money changes hands — so if you are a California resident you have the right to opt out, and turning the tools off in Account → Privacy choices is how you exercise it.
You can change your mind at any time in Account → Privacy choices. You can also opt out at the source: Meta ad preferences, TikTok, Pinterest, or industry-wide at optout.aboutads.info.
All traffic is encrypted in transit (HTTPS). Passwords are stored as salted hashes. Access to production data is restricted to the operator of the service. Our internal dashboard does not show your photos or your designs — it shows only which type of space and style was chosen and whether the render succeeded. A human looks at an actual image only where there is a specific reason to: investigating a fault you have reported to us, or acting on a report of unlawful content. We do not browse customer photos, and we never use them to train any model, for advertising, or for any purpose other than producing the design you asked for. Backups are encrypted before they leave our server, so a copy sitting in a mailbox or a storage bucket is unreadable without a key we hold separately.
If something does go wrong, we have a written response plan and we follow it. In short: we contain the problem and rotate any exposed credentials first; we record what happened, to whom, and in which countries; and we notify people and regulators on the legal clocks — 72 hours to the supervisory authority for anyone in the EU or UK, and, under Australia's Notifiable Data Breach scheme, an assessment within 30 days with notification to you and the OAIC as soon as we believe the breach is likely to cause serious harm. We will tell you what happened, what was involved, what we have done, and what you should do — in plain words, from a person, not a form. We will not wait for certainty before we start telling you.
Your card details are never on our servers. Payment is handled entirely by Stripe's own hosted checkout, so a breach of Oasyard cannot expose your card.
Oasyard is run by one person, so this matters. If we shut down, you get at least 30 days' notice by email and in the app; subscriptions are cancelled so nobody keeps paying; you can download everything you have made; and afterwards accounts, photos and designs are securely deleted, with backups destroyed on their normal rotation.
Your photos are never an asset for sale. They are excluded from any sale or transfer of the business, and any successor would be bound by a privacy policy no less protective than this one. You would be told before any transfer, and could delete your account first.
Oasyard is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.
One first-party session cookie keeps you signed in. It is strictly necessary — without it the service cannot tell that your designs are yours — so it does not require consent and cannot be turned off while you are using the site.
Advertising and measurement tags are a separate matter and are off by default. See Advertising and retargeting for what they do, when they load, and how to say no. We honour Global Privacy Control: if your browser sends it, we treat advertising and sharing as declined without asking.
If we make material changes to this policy we'll show a notice in the app before they take effect.
oasyard@gmail.com — or the Contact support link in the app's Account screen.