1.1 This Privacy Policy explains how [VERDIQT PTY LTD] (ABN [ABN]) ("Verdiqt", "we", "us") collects, uses, discloses, and protects personal information, in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs").
1.2 "Personal information" has the meaning given in the Privacy Act: information or an opinion about an identified individual, or an individual who is reasonably identifiable.
1.3 By using the Verdiqt platform, website, and services (the "Service"), you acknowledge this policy. Where we require consent, we will seek it separately.
Note on the Privacy Act threshold: Small businesses with turnover of $3M or less are not always bound by the Privacy Act, but there are exceptions (including where you trade in personal information or provide certain services). Committing voluntarily is the recommended, trust-building path for a data-centric product.
2.1 We may collect the following categories:
(a) Account and identity information — name, email address, business name, role (e.g. buyer's agent), and login credentials.
(b) Billing information — billing name, and payment details processed by our payment provider (Stripe). We do not store full card numbers ourselves; these are handled by Stripe.
(c) Content you upload — strata reports, property documents, and other files you submit for analysis ("Uploaded Documents"). These documents may themselves contain personal information about third parties (for example, owners, occupants, committee members, or contractors named in a strata report).
(d) AI Output and usage data — the analyses generated for you, and records of how you use the Service (features used, saved reports, activity logs).
(e) Technical information — IP address, device and browser type, and analytics data collected via cookies and similar technologies (see clause 9).
(f) Communications — records of your correspondence with us (e.g. support emails).
3.1 We collect personal information: (a) directly from you (when you register, upload documents, pay, or contact us); (b) automatically through your use of the Service (technical and usage data); and (c) from third parties such as our payment provider, where relevant.
3.2 Third-party personal information in Uploaded Documents. Where Uploaded Documents contain personal information about individuals other than you, you are responsible for ensuring you are entitled to provide it to us for processing. We handle such information only to provide the Service to you.
4.1 We use personal information to: (a) provide, operate, and maintain the Service, including generating AI Output; (b) create and manage your account; (c) process payments and manage subscriptions, trials, and billing; (d) send transactional and service communications (e.g. verification, password reset, trial and billing notices); (e) provide customer support; (f) improve, develop, and secure the Service, including through aggregated and de-identified analysis (see clause 8); (g) comply with legal obligations; and (h) with your consent, send marketing communications (which you can opt out of at any time).
4.2 We will only use personal information for a purpose disclosed to you, a directly related purpose you would reasonably expect, or as otherwise permitted by law.
5.1 We disclose personal information to trusted service providers who help us run the Service, including:
| Provider | Purpose | Location |
|---|---|---|
| Anthropic (AI processing) | Generating AI Output from your content | United States / overseas |
| Stripe | Payment processing | United States / overseas |
| Resend | Transactional email delivery | [United States / overseas] |
| [Hosting provider — e.g. Netlify / AWS] | Hosting and storage | [Confirm region] |
| [Domain Group API] | Property data services | Australia |
(Confirm and complete this table to match your actual live stack and each provider's data location.)
5.2 We require our service providers to protect personal information consistently with this policy and applicable law. We do not sell your personal information.
6.1 Some of our service providers, including our AI processing provider (Anthropic) and payment provider (Stripe), are located outside Australia (including in the United States). This means that when you use AI features, content you submit — which may include personal information contained in Uploaded Documents — may be transmitted to and processed overseas.
6.2 Under APP 8, before disclosing personal information overseas we must take reasonable steps to ensure the recipient handles it consistently with the APPs, or rely on a permitted exception (such as your informed consent).
6.3 Because Uploaded Documents (strata reports) may contain third-party personal information and are sent to a US-based AI provider, the lawyer must confirm the correct APP 8 mechanism (reasonable steps, contractual safeguards, and/or express informed consent obtained at upload) and the exact disclosure wording. Consider surfacing a clear consent/notice at the point of upload.
7.1 Security. We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. No system is completely secure, and we cannot guarantee absolute security.
7.2 Retention. (a) Free Plan: saved reports and associated data are automatically deleted 7 days after saving. (b) Paid Plans: we retain your saved reports and account data while your subscription is active and for a reasonable period afterwards, unless you delete them sooner or the law requires longer retention. (c) We may retain certain information (e.g. billing records) as required by law.
7.3 Deletion. You may request deletion of your account and associated personal information by contacting us at hello@verdiqt.com.au. We will action requests in accordance with the Privacy Act and our legal obligations. Some information may be retained where required by law or for legitimate business records.
8.1 We may create aggregated, anonymised, or de-identified data derived from use of the Service (including from processing Uploaded Documents) to develop and improve our products and services. Such data does not identify you or any individual and is not treated as personal information.
8.2 — de-identification must be robust so that individuals are not reasonably re-identifiable; this clause underpins the long-term dataset strategy and must align with the Terms of Service and the Privacy Act.
9.1 We use cookies and similar technologies to operate the Service, remember your preferences, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.
9.2 We may use analytics tools [e.g. specify] to help us improve the Service.
10.1 We may send you marketing communications about Verdiqt where permitted by law and, where required, with your consent.
10.2 You can opt out at any time using the unsubscribe link in our emails or by contacting us. We will comply with the Spam Act 2003 (Cth) and the Privacy Act.
11.1 You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, or misleading.
11.2 Contact us at hello@verdiqt.com.au. We will respond within a reasonable period and may need to verify your identity. We will not charge for a request unless permitted by law, and will explain any refusal.
12.1 If you have a privacy concern or complaint, contact us first at hello@verdiqt.com.au and we will investigate and respond within a reasonable time.
12.2 If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.
13.1 If we become aware of a data breach likely to result in serious harm, we will assess and, where required, notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under the Privacy Act.
14.1 We may update this policy from time to time. The current version will be posted with an updated "Last updated" date. Material changes will be notified to you where required.
[Verdiqt Pty Ltd] Email: hello@verdiqt.com.au [Postal address — required for a complete policy]