Privacy policy

Last updated: 11 November 2026 (doctor reports added)

This policy explains how Leffler International Investments Pty Ltd (“we”, “us”), which operates Master of All Skills, handles personal information. We follow the Australian Privacy Principles under the Privacy Act 1988 (Cth) where they apply to us.

What we collect

• When you buy: PayPal processes your payment and shares with us your name, email address and the transaction details. We never see or store your card or bank details.
• To deliver the plugin: your GitHub username, which you send us so we can invite you to the private plugin repository.
• Doctor reports you choose to send: the check results, a short note and an optional reply email, used only to support you and improve the plugin.
• When you contact us: the content of your message and your contact details.
• Website logs: our hosting provider (Vercel) records standard technical logs such as IP address, browser type and pages requested, for security and operation.

What we don't collect

• We use no analytics, advertising trackers or marketing cookies on this website.
• The plugin runs in your own Claude Code with your own accounts. It never sends us your code, files, keys or usage. Online licence checks in releases 1.4.0 and later send only an opaque licence token and standard connection metadata. Another exception is opt-in: if its doctor finds a problem, it asks whether to send us that health report (check results and a short note of what failed and was fixed, plus a reply email only if you give one). Nothing is sent without your yes, and the exact report is shown to you first.
• If you save a draft on the developer setup page, it is stored only in your own browser and never sent to us. You can clear it from that page at any time.
• When you scan a public GitHub repository on the setup page, your browser contacts GitHub directly; we don't receive the results.

Optional reviews

After a confirmed completed refund, you may choose to leave a rating and review. This is optional and cannot affect the refund. We store the review, its rating, a private purchase/account association and your publication preference. All ratings are accepted. Reviews are saved privately and are not automatically published. Anonymous publication on the MOS website requires your separate optional consent; we do not publish payment references, account IDs or your email with a review. Do not include personal or payment information in your review.

AI support, purchases and licences

Public support can answer from reviewed MOS documentation without an AI provider. When generative AI is connected, redacted chat messages are sent to Anthropic to produce an answer. Optional research is limited to approved official documentation sites. If shared question memory is enabled, we record redacted question themes, frequency, document references and unresolved topics in the dedicated MOS database to improve support. We do not turn visitor statements into trusted facts or use them to retrain the AI model. Redaction reduces exposure but cannot identify every personal detail, so do not submit personal information. Question records have a 90-day expiry field; automatic deletion requires the database retention policy to be enabled. The optional “Remember this chat” control stores redacted conversation history only on your device for up to 30 days. It is off by default and can be cleared in the widget. Do not include secrets, card details or project files. Account passwords are sent directly to Google Firebase, not the support API. We store purchase references, account IDs, a protected hash of the payment email, amounts, currency, refund state and licence-token hashes in the dedicated MOS database. Consumer-rights requests may retain your issue description for assessment. Technical-failure refund requests store a hash of the description. Licence tokens remain private; they are never stored in project files. Refunds use the original PayPal transaction; we never collect a replacement bank or card destination. Support messages may be handled outside Australia under provider policies.

How we use it

Only to process your purchase, give and manage access to the plugin and its updates, answer your questions, keep records required by law (for example tax records), and protect the website from abuse. We don't sell or rent personal information.

Who we share it with

Service providers that run parts of our service: PayPal (payments), GitHub (plugin delivery), Google Firebase (verified sign-in and purchase/licence records), Anthropic (AI support messages) and Vercel (website hosting). They may store data outside Australia, including in the United States, under their own privacy policies. We may also disclose information when the law requires it.

How long we keep it

Purchase records are kept as long as tax law requires (in Australia, generally five years). Repository access is kept while your licence or updates are active, and you can ask us to remove it at any time.

Your choices and rights

You can ask to see or correct the personal information we hold about you, or ask us to delete what we don't need to keep by law. If you are unhappy with how we handled your information, use the AI support chat first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

Reply to the email on your PayPal receipt, or to any email we have sent you.