Privacy Policy

Votely Pty Ltd (ACN 702 812 566) provides an online decision-making and approval service for strata and community title committees. Our head office is in New South Wales, Australia.

This policy explains how we collect, use, disclose and protect personal information when you visit votely.com.au or join our mailing list. It is prepared in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We keep collection to the minimum needed to run the website and our mailing list. Currently, that is:

• Email address — if you submit the contact form, so we can get in touch with you about the launch.
• IP address — used briefly and in-memory to rate-limit the signup form against spam and abuse. It is not retained in a database.
• Bot-protection data — we use Cloudflare Turnstile on the signup form. Cloudflare processes technical information (such as device and browser signals) to distinguish people from bots. See Cloudflare's privacy policy for details.
• Server logs — our hosting provider records standard technical logs (request time, pages requested, browser type) for security and troubleshooting.

We use your email address for one purpose: to email you about Votely's launch and related product updates you have opted in to receive. This is direct marketing sent with your express consent, as required by the Australian Privacy Principles (APP 7) and the Spam Act 2003 (Cth).

We use IP addresses and bot-protection data only to prevent spam and abuse of the signup form. We use server logs only to keep the site secure and reliable. We do not use personal information for any other purpose, and we do not sell or rent it to anyone.

We do not sell, trade or rent personal information. We share it only with service providers who process it on our behalf, strictly to operate the website:

• Resend Inc. — stores mailing-list email addresses and sends our emails (United States).
• Vercel Inc. — hosts the website and keeps server logs (United States).
• Cloudflare Inc. — provides the Turnstile bot-protection service (United States).

The providers listed above process personal information outside Australia, principally in the United States. Before disclosing personal information to an overseas recipient, we take reasonable steps (as required by APP 8) to satisfy ourselves that the recipient is bound by privacy and security commitments in their terms of service that are substantially similar to our obligations under the Australian Privacy Principles, and we remain accountable for that information under the Privacy Act.

We protect personal information with measures appropriate to its sensitivity, including encryption in transit (HTTPS), least-privilege access to our accounts and systems, and API keys stored as encrypted environment variables. No method of transmission or storage is completely secure, but we review our practices as the service grows.

We keep your email address while the mailing list is active and you have not unsubscribed, or until you ask us to delete it. Rate-limit data lives only in transient memory. Server logs are retained by our hosting provider for a limited operational period.

Under APPs 12 and 13 you can ask to see the personal information we hold about you, or ask us to correct it. Email us using the contact details below and we will respond within a reasonable period (ordinarily within 30 days).

You joined the mailing list by opting in — the form will not submit without your consent. You can withdraw it at any time using the unsubscribe link in any email we send, or by emailing us. Once you withdraw consent we will not send you further marketing emails, and we will remove your address from our mailing list.

We use Vercel Web Analytics to understand, in aggregate, how the website is used — visits, page views, referrers and signups. It is cookieless: it sets no advertising or tracking cookies, does not follow you across other websites, and cannot identify you individually. It is operated by Vercel Inc., our hosting provider, as part of the same platform that serves the website. The signup event is a counter only and is not linked to your email address.

The Turnstile widget may use essential technical data to function. If we add cookies or further analytics in future, we will update this policy before (or at the time) they take effect.

If we become aware of an eligible data breach under the Notifiable Data Breaches scheme, we will assess it and, where required, notify the Office of the Australian Information Commissioner and affected individuals as soon as practicable.

The website is intended for adults involved in strata governance. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

If you believe we have mishandled your personal information, please contact us first so we can try to resolve the matter. You may also complain to the Office of the Australian Information Commissioner (OAIC): GPO Box 5218, Sydney NSW 2001, phone 1300 363 992, or at oaic.gov.au.

We may update this policy as the service develops. The effective date below always reflects the current version.

Questions, access requests, corrections or complaints: privacy@votely.com.au. Votely Pty Ltd, ACN 702 812 566.