
Effective 16 June 2026. This policy explains how Balsa handles personal information across the website, mobile apps and related marketplace services.
Balsa is operated by Charles Tompson. For privacy, support or data handling questions, email support@balsasurf.com.au.
We may collect account information such as your name, email address, login details and profile details.
We may collect listing information such as board details, descriptions, prices, condition notes, suburb, photos and seller information.
We may collect marketplace activity such as saved listings, enquiries, offers, messages, reports, moderation actions and interactions with listings.
We may collect device and usage information such as app version, device type, crash logs, diagnostics, IP address, approximate location derived from your use of the service, and analytics about how Balsa is used.
We may collect notification information such as push notification tokens and notification preferences, and support information such as messages you send to us.
We use personal information to create and manage accounts, display listings, let buyers contact sellers, support saved listings and notifications, detect spam or scams, moderate listings and accounts, improve reliability and performance, respond to support requests, and comply with legal obligations.
When you create a listing, information such as board details, price, photos, suburb and seller or profile information may be visible to other users. Do not include private information in listing descriptions or photos unless you want it to be visible.
We may share information with service providers that help us run Balsa, including hosting, database, authentication, email, image storage, security, app infrastructure, analytics, crash reporting and push notifications.
Current or expected providers may include Supabase, Vercel, Resend, Cloudflare, Sentry, Expo, Apple Push Notification service and Firebase Cloud Messaging. These providers may process information in Australia, the United States or other countries.
We may also share information if required by law, to protect users, to investigate abuse or security issues, or as part of a business transfer. We do not sell personal information.
Balsa does not process payments between buyers and sellers. Buyers and sellers arrange payment directly between themselves, usually in person on pickup.
We use reasonable technical and organisational measures to protect personal information, including encrypted connections and access controls. No online service can guarantee complete security.
We keep personal information for as long as needed to provide Balsa, comply with legal obligations, resolve disputes, prevent abuse and maintain marketplace integrity.
You can request deletion of your account from within the app or by contacting support@balsasurf.com.au. Deleting your account will remove or anonymise personal information unless we need to retain limited information for legal, security, fraud-prevention or dispute reasons.
You can request access to, correction of, or deletion of your personal information by emailing support@balsasurf.com.au.
If you have a privacy concern, contact us first and we will review it within a reasonable time. You can also use the support page.
We may update this Privacy Policy as Balsa changes. If changes are material, we will take reasonable steps to notify users.