Privacy Policy

1. Commitment to Privacy

BuyIQ Pty Ltd ("we", "us", "our") is committed to protecting the privacy of personal and commercial information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how FastAccept collects, holds, uses, and discloses personal information when you use our web applications, browser extensions, and inspection automation services.

2. Information We Collect

We collect only the minimum necessary information required to provide, secure, and bill for the FastAccept service:

• Account & Contact Data: Name, business email address, agency name, phone number, and Australian Business Number (ABN) if provided.
• Third-Party Session Credentials (Vaulted): Authentication tokens or session cookies necessary to execute automated strata inspection claims on your behalf.
• Claim Execution Metadata: Strata plan numbers, suburbs, postcodes, agreed inspection fees, LOA request timestamps, and claim success status.
• Payment & Invoicing Information: Stripe customer IDs, payment method tokens (stored securely by Stripe, not by FastAccept), and Xero invoice identifiers.

3. Cryptographic Storage & Credential Protection

FastAccept employs zero-trust principles for subscriber credentials:

• Authenticated Encryption: All third-party session tokens and passwords are encrypted using AES-256-GCM prior to database persistence.
• Master Vault Keys: Encryption keys are maintained in cryptographically isolated environment storage and never exposed to client-side bundles or browser extensions.
• Ephemeral In-Memory Usage: Decrypted tokens exist only in memory during the execution of authorized claim mutations and are evicted immediately thereafter.

4. Purpose of Use & Non-Disclosure of Strata Records

We use collected data solely to:

• Route and claim strata inspection opportunities matching your designated territory filters.
• Generate instant Letters of Authority (LOA) and populate strata manager booking emails.
• Deliver real-time Web Audio, Desktop Push, and tab notifications.
• Process subscription billing via Stripe and generate GST-compliant Xero tax invoices.

5. Disclosures to Service Providers

We disclose personal information only to trusted enterprise sub-processors strictly required for technical operations:

• Supabase Inc. (Secure cloud database & Row Level Security, Sydney / AWS AP-Southeast-2 region).
• Stripe Australia Pty Ltd (PCI-DSS Level 1 payment gateway).
• Xero Australia Pty Ltd (Direct accounting & automated Australian Tax Invoicing).

We do not sell personal information to data brokers or advertising networks.

6. Access, Correction & Account Deletion

Under APPs 12 and 13, you have the right to access and correct personal information we hold about you. You may also request immediate deletion of your account and permanent cryptographic purging of vaulted credentials at any time.

For privacy inquiries or deletion requests, contact our Privacy Officer at privacy@buyiq.net or write to BuyIQ Pty Ltd, Sydney, NSW, Australia.