Free Refund Policy Generator for React Application — Australian Privacy Act Compliant

🇦🇺 Key Australian Privacy Act Requirements

Australia's Privacy Act 1988 and its 13 Australian Privacy Principles (APPs) regulate how organizations with annual turnover over AUD $3 million collect, use, and disclose personal information. The OAIC (Office of the Australian Information Commissioner) enforces the law and can issue fines up to AUD $50 million for serious and repeated breaches.

• Notify individuals about data collection at or before the time of collection
• Only collect personal information that is reasonably necessary
• Provide individuals with access to their personal information
• Take reasonable steps to protect personal information from misuse or unauthorized access
• Notify the OAIC and affected individuals of eligible data breaches (Notifiable Data Breaches scheme)
• Cross-border disclosure requires that overseas recipients comply with the APPs

React Application — Specific Considerations

React applications are client-side rendered apps that often integrate with backend APIs, authentication providers, and third-party services. The data collected depends entirely on the app's functionality, but React apps frequently use authentication (Auth0, Firebase, Supabase), analytics (Segment, Amplitude), and feature flags — each collecting user data that must be disclosed. If your React app uses local storage or IndexedDB, this must also be disclosed.

Data typically collected by React Application businesses: user account data via authentication provider, usage analytics and events, feature flag exposure data, local storage and session storage data, API request logs, error tracking data

• Authentication provider data processing (Auth0, Firebase, Clerk)
• Client-side analytics and event tracking disclosure
• Local storage and browser storage disclosure
• Error monitoring service data (Sentry, LogRocket)
• Third-party API data sharing disclosure