Privacy Policy

Effective Date: 14 May 2026

At OwnerNotify, accessible via ownernotify.com, one of our main priorities is the privacy of our visitors. This document outlines the types of information collected and recorded by OwnerNotify and how we utilise it in accordance with Australian law.

1. Consent

By using our website and services, you hereby consent to our Privacy Policy and agree to its terms.

2. Scope of Policy

This Privacy Policy applies solely to our online activities and is valid for visitors to our website regarding the information they share or collect through the OwnerNotify platform. This policy is aligned with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to all users, including individual vehicle owners and business or organisation accounts (strata managers, property managers, and their staff).

3. Who We Are

ownerNotify is an Australian software-as-a-service platform that provides QR-code stickers and a phone-masking service. When someone scans the QR code on your vehicle, they can reach you by call or SMS through a masked number — your real phone number is never revealed.

For privacy enquiries, contact us at privacy@ownernotify.com.

4. Information We Collect

4.1 Individual Users

• Account information: name, email address, and phone number provided during registration.
• Vehicle information: make, model, colour, and registration plate (optional, used to help scanners identify your car).
• Billing information: Stripe customer ID and subscription status. We never store or see your full card number — all card data is handled by Stripe.
• Sticker and tag data: the unique QR code assigned to your account and its claim/activation status.
• Communication metadata: inbound caller numbers, timestamps, and SMS message bodies routed through our masking service. This data is stored to provide your inbox, for safety monitoring, and abuse prevention.

4.2 Business / Organisation Accounts

If you register or are invited as a strata manager, property manager, or team member of an organisation account, we additionally collect:

• Organisation details: organisation name, billing contact name, and email address.
• Property and resident data: property addresses, unit numbers, resident names, and contact details that you or your organisation enter into the platform to manage QR tags and visitor passes.
• Team member information: names and email addresses of staff members added to your organisation account.
• Activity logs: records of QR scans, calls, and SMS activity across your managed properties, used to generate your activity dashboard and CSV exports.
• Order history: sticker order requests, quantities, and delivery addresses submitted through the manager dashboard.

4.3 Scanners and Visitors

When a person scans a QR code or places a call through our masking number, we collect their phone number as part of the call or SMS routing. We do not require scanners to create an account.

4.4 Technical Information

• IP address, browser type, device type, and pages visited, collected automatically via our hosting provider (Vercel) for security and performance purposes.
• Cookies and session tokens used to keep you logged in (see Section 11).

5. How We Use Your Information

• To provide, operate, and improve the ownerNotify service.
• To route masked calls and SMS messages between scanners and registered owners without disclosing real phone numbers.
• To process subscription payments and manage billing through Stripe.
• To send transactional emails and SMS messages (e.g. subscription confirmations, sticker dispatch notifications, security alerts).
• To allow managers to monitor activity across their properties through the manager dashboard.
• To investigate abuse, enforce our Terms of Service, and comply with legal obligations.
• To contact you about material changes to the service or these policies.

We do not use your information for advertising, and we do not sell or rent your personal information to third parties.

6. What Scanners See

Anyone who scans your QR sticker is shown only a Twilio masking number and, optionally, the vehicle details you have chosen to display (make, model, colour, plate). Your real name, email address, phone number, and home address are never shown to a scanner under any circumstances.

7. Third-Party Privacy

OwnerNotify’s Privacy Policy does not apply to other advertisers or websites. We do not sell your personal information to third-party data brokers. We do not allow third-party advertising on our platform.

We share personal information only with the service providers listed below, strictly to operate the platform. Each provider is bound by its own data processing agreement:

• Supabase — cloud database and authentication hosting. Data is stored in Supabase’s managed PostgreSQL infrastructure.
• Stripe — payment processing and subscription management. Stripe is PCI-DSS Level 1 certified.
• Twilio — voice call and SMS routing through masked numbers.
• Vercel — web application hosting and edge delivery.

We may also disclose information where required by Australian law, court order, or to protect the safety of any person.

8. Data Storage and Security

We employ industry-standard encryption for all data collected. All data is stored in encrypted databases hosted on secure servers in Sydney, Australia. Access to your personal information within ownerNotify is restricted to authenticated users (your own account data) and authorised administrators only. We use HTTPS for all data in transit.

Despite these measures, no online service is 100% secure. If you suspect unauthorised access to your account, please contact us immediately at privacy@ownernotify.com.

9. Data Retention

• Account data is retained for as long as your account is active.
• Call and SMS logs are retained for 12 months from the date of the communication, then automatically deleted.
• Billing records may be retained for up to 7 years as required by Australian taxation law.
• Activity logs for organisation accounts are retained for 12 months and are available for CSV export during that period.

You may request deletion of your personal data at any time by emailing privacy@ownernotify.com. We will action deletion requests within 30 days, except where retention is required by law.

10. Your Australian Privacy Rights

In accordance with the Australian Privacy Act 1988 and the 2026 Australian Privacy Reforms, you have the following rights:

• Right to Access: You may request copies of your personal data.
• Right to Rectification: You may request that we correct any information you believe is inaccurate or incomplete.
• Right to Erasure: You have the right to request that we erase your personal data under certain conditions (subject to legal retention requirements).
• Right to Data Portability: You may request the transfer of your data to another organisation or directly to you.
• Right to Complain: You may lodge a complaint about a breach of the Australian Privacy Principles.

To exercise any of these rights, contact us at privacy@ownernotify.com. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

11. Cookies

We use strictly necessary session cookies to keep you logged in to your account. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but doing so may prevent you from staying signed in.

12. Children’s Privacy

OwnerNotify does not knowingly collect any Personally Identifiable Information from children under the age of 13. If you believe your child has provided such information on our website, please contact us immediately for prompt removal.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before any material changes take effect. The updated policy will always be available at ownernotify.com/privacy. Continued use of the service after the effective date constitutes acceptance of the updated policy.

14. Contact and Complaints

If you have questions or wish to lodge a complaint, please contact our Privacy Officer. You also have the right to contact the Office of the Australian Information Commissioner (OAIC) if you feel your privacy has been breached.

• Email: privacy@ownernotify.com
• General support: support@ownernotify.com