Privacy

This page describes what Cornerpeg and this site do with information. It is written to be checked against the product, not to reassure.

All calculation happens in your browser. Using the public calculators does not send the figures you enter to us. You can also use the campaign workspace on this device without an account.

If you choose an account, we store the email address or verified mobile number you use, your account identifier and sign-in sessions. Resend receives your email address and sign-in message to deliver email codes. If you choose SMS sign-in, Twilio Verify receives your mobile number and verification requests to send and check your code; mobile carriers deliver the text. We use these details to operate your account, not for marketing. A phone number is optional for email accounts.

Signing in does not upload campaigns already on your device. Choose Save to my account for each campaign you want to copy online. While working in your account, new campaigns and edits save to that account automatically. The stored campaign includes its name, property details, assumptions, any preparer details you enter, and rates provenance. Results continue to be calculated in your browser.

Cloudflare hosts the website and account service and stores account campaigns. Sign-in sessions include an IP address and browser information for account security. Short-lived request counters help limit abuse. Essential cookies keep you signed in. We do not use advertising, analytics or tracking scripts.

Cloudflare, Resend and Twilio process information outside Australia. A nearby sending or database region does not mean that all processing, logs or backups stay in Australia. Resend stores sign-in messages and delivery records in the United States for 30 days under our current plan, with backups kept for seven days. Twilio and mobile carriers retain delivery and security records under their own retention policies. Deleting your Cornerpeg account does not immediately erase provider delivery records; contact support if you need help requesting earlier removal.

We keep account campaigns until you delete them or delete the account. Deleting a campaign removes its content from the active account database; a campaign identifier and revision remain to prevent an older device from uploading a deleted version again. Deleting the account removes its campaigns and sessions from the active database. Cloudflare recovery copies may retain earlier data for up to 30 days under our current plan. If we restore a backup, deletion requests must be reapplied before account access resumes.

Email sign-in codes expire after five minutes and SMS codes after ten minutes. Twilio manages SMS codes; Cornerpeg does not store them. Resending an SMS code does not extend its original expiry. Account sessions expire after seven days unless renewed by use; you can sign out this device or revoke all account sessions. Expired sign-in records and request counters in our account database are removed by a daily cleanup.

The workspace keeps device copies and pending edits so an interrupted connection need not lose your work. Signing out does not erase those copies. Account copies are reopened through this workspace after signing into that account. On a shared device, export work you need and clear Cornerpeg's site data when finished. Browser storage can be cleared by the browser, so export campaigns you want to keep as files.

Login and recovery changes require a recent sign-in and verification of the new method. Verifying a new email or mobile number may create an empty account before you confirm combining it with your current account. Compatible accounts are combined only after confirmation: online campaigns are copied as additional campaigns, the previous account is removed, and an internal account-ID link allows you to recover pending edits still on your devices. Change requests expire after ten minutes; completed receipts are retained for up to 24 hours, then removed by daily cleanup. Account-ID links remain until the combined account is deleted. Replacing a mobile number removes its access to that account and signs out other sessions.

You can export an open campaign, delete a campaign from the account, or delete the account from the workspace. Account deletion requires a recent sign-in. Export any campaigns and pending device edits you need first. Contact the support address on the Support page for access, correction or deletion help.

If you buy a Pro licence, the purchase is handled by a merchant of record, whose own privacy terms apply to the payment. We receive the email address you give at checkout and use it only to deliver and, if needed, re-issue your licence. We do not use it for marketing.

If you email us for support, we keep the correspondence for as long as it takes to resolve the matter and for our own records.

This site is offered to Australian residents only, and the Privacy Act 1988 (Cth) applies to how we handle personal information. Questions and requests about your information go to the support address on the Support page.