Last updated: 12 September 2026
Envy Central is the internal platform used by Envy Agency to manage clients, creators, projects, and bounty-based creative work. This policy covers the Envy Central web application (app.envyagency.com.au) and applies to admins, clients, and creators who use it.
Account information: name, email address, phone number, and a password (stored securely, never in plain text) or a Google account connection if you choose to sign in with Google.
Client information: company name, contact details, contract/retainer details, and any files or notes added to your record by our team.
Creator information: name, bio, location, disciplines, rate, portfolio links, and payout-relevant details you provide.
Project and bounty content: job requests, project details, messages sent through the platform, bounty briefs, offers, and any files exchanged as part of a project.
Usage information: login times and basic activity needed to operate notifications and keep your session signed in (via a secure session cookie — see Cookies below).
We do not collect payment card details directly — where payment processing is involved, it happens through the relevant third-party provider, not stored on our own servers.
To operate the platform: creating your account, showing you the right information for your role, routing bounties to relevant creators, processing job requests, and keeping projects up to date.
To communicate with you: account-related emails (e.g. onboarding, bounty offers, notifications) sent via our email provider (Resend), and messages within the platform itself.
To improve the service: understanding what's working and fixing bugs. We do not use your data to build advertising profiles, and we do not sell your data to anyone.
We use a small number of service providers to run Envy Central: Railway (application hosting and database), Resend (transactional email delivery), and Google (if you choose to sign in with Google — see below).
These providers only receive the data needed to perform their specific function (e.g. Resend sees the email address and content of an email we send you; it doesn't have access to your whole account). We don't share your data with anyone else unless required by law.
If you choose to sign in with Google, we receive your name, email address, and profile picture from Google to verify your identity and match it to an existing Envy Central account. We do not post anything to your Google account, read your Gmail, or access your Google Drive. Google's own privacy policy governs how Google itself handles your data during that sign-in.
We use one essential session cookie to keep you signed in. It's not used for advertising or tracking across other sites, and it's not sold or shared with any ad network. If you sign out, the cookie is cleared.
We keep your account and related data for as long as your account is active, plus a reasonable period afterward for record-keeping (e.g. completed project/bounty history). If you'd like your account and data deleted, contact us (see below) and we'll action it, noting that some information may need to be retained for legitimate business or legal reasons (e.g. completed invoices).
You can ask us at any time to see what data we hold about you, correct anything that's wrong, or request deletion of your account. Contact hello@envyagency.com.au to make a request.
We take reasonable technical measures to protect your data, including encrypted connections (HTTPS) and secure password storage (passwords are hashed, never stored as plain text). No system is 100% secure, but we take this seriously.
We may update this policy from time to time. We'll update the "Last updated" date above when we do.
Questions about this policy or your data — hello@envyagency.com.au.
← Back to Envy Central