Privacy Policy

Effective date: 8 March 2025 · Complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles

Contents

1. Who We Are

Locatalyze ("we", "us", "our") operates the location feasibility analysis platform at locatalyze.com. We are an Australian-based software company.

We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs) contained therein.

2. What Information We Collect

Information you provide

Information collected automatically

• IP address and approximate location (city/region level)
• Browser type, device type, and operating system
• Pages visited and features used (via anonymised analytics)
• Error logs for debugging purposes

What we do NOT collect

• Government identifiers (TFN, ABN, driver's licence)
• Health or sensitive information
• Information about children under 18
• Biometric data

3. Why We Collect It

We collect personal information only for the following purposes:

We will never sell your personal information to third parties. Ever.

4. Third-Party Services

We use the following third-party services. Each has its own privacy policy:

5. Data Storage and Security

Your data is stored in Supabase's managed database infrastructure. Supabase uses industry-standard encryption at rest and in transit (TLS 1.2+). Our application is hosted on Vercel's cloud infrastructure.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. However, no internet transmission is completely secure and we cannot guarantee the absolute security of your data.

If we become aware of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988.

6. Data Retention

• Account data — retained while your account is active and for 90 days after deletion
• Report data — retained while your account is active; deleted when you delete a report or close your account
• Payment records — retained for 7 years as required by Australian taxation law
• Server logs — retained for 30 days for security and debugging purposes

7. Disclosure of Personal Information

We will only disclose your personal information to third parties:

• To the third-party service providers listed in Section 4, as required to operate the Platform
• Where required or authorised by Australian law (e.g. in response to a court order or request from the Australian Taxation Office)
• To protect the rights, property, or safety of Locatalyze, our users, or the public
• In connection with a sale or merger of the business, where the acquirer agrees to be bound by this Privacy Policy

We will never sell, rent, or trade your personal information to any third party for marketing purposes.

8. Your Rights Under Australian Privacy Law

Under the Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate, incomplete, or outdated personal information
• Deletion — request deletion of your account and associated personal information (subject to our legal retention obligations)
• Opt-out — unsubscribe from marketing communications at any time
• Complaint — lodge a complaint with us or directly with the OAIC if you believe we have breached your privacy rights

To exercise any of these rights, contact us at privacy@locatalyze.com.au. We will respond within 30 days.

9. Cookies and Analytics

We use strictly necessary cookies to maintain your login session. We do not use advertising cookies or third-party tracking cookies.

We may use privacy-respecting analytics tools to understand how the Platform is used in aggregate (e.g. page views, feature usage). These tools are configured to anonymise IP addresses and not to collect personally identifiable information.

10. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a person under 18, we will take steps to delete it promptly.

11. Overseas Disclosure

Some of our third-party service providers (including Vercel, OpenAI, and Stripe) are based in the United States. By using the Platform, you consent to the transfer of your personal information to these providers for the purposes described in this policy.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information, as required by APP 8.

12. Complaints and Contact

If you have a complaint about how we handle your personal information, please contact our Privacy Officer first. We aim to resolve all privacy complaints within 30 days.