Privacy Policy

1. Who we are

StrataSphera Pty Ltd ("we", "us", "our") operates the StrataSphera platform at stratasphera.com. We are committed to protecting the personal information of our users in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

We collect personal information that you provide directly, including:

• Name and email address (on account creation)
• Mobile phone number (optional, for notifications)
• Lot ownership and strata scheme details
• Payment information (processed by Stripe — we do not store card details)
• Content you upload, such as documents and meeting minutes

We also collect usage data automatically, including IP addresses, browser type, and pages visited, to help us improve the Service.

To keep schemes secure and accountable, we maintain audit and access logs that record significant actions taken in the platform — such as changes to financial settings, member roles and permissions, member approvals, and the viewing or downloading of documents — together with the date and time, the account responsible, and the IP address and browser/device used.

3. How we use your information

We use your personal information to:

• Provide and maintain the StrataSphera platform
• Process payments and manage your subscription
• Send transactional emails (meeting notices, levy reminders, account alerts)
• Respond to support requests
• Maintain security and keep audit logs of significant actions (such as financial changes and document access) for accountability and dispute resolution
• Improve the Service through anonymised usage analytics

4. Data storage and security

Your data is stored in Australia using Supabase infrastructure hosted in the AWS Asia-Pacific (Singapore) region. We apply industry-standard security measures including encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel only.

5. Sharing your information

We do not sell your personal information. We share data only with trusted service providers necessary to operate the platform:

• Supabase — authentication and database hosting
• Stripe — payment processing
• Postmark — transactional email delivery
• Google Analytics — website analytics on public pages
• PostHog — product analytics and session replay within the dashboard

Each provider is bound by their own privacy commitments and we only share the minimum information required.

6. Cookies and analytics

We use cookies and similar technologies for the following purposes:

• Session cookies — to keep you logged in to the platform. Disabling these will prevent you from signing in.
• Google Analytics (via Google Tag Manager) — on our public marketing pages, to understand how visitors find and use our website. This sets cookies and sends anonymised usage data to Google. You can opt out via Google's opt-out tool.
• PostHog — within the authenticated dashboard, to analyse product usage and help us improve the platform. PostHog may record session activity (pages visited, clicks) linked to your account. Data is processed in accordance with PostHog's privacy policy.

We do not use advertising cookies or sell data to ad networks.

7. Your rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at privacy@stratasphera.com.

8. Data retention

We retain your data for as long as your account is active. If you cancel your subscription or request deletion, your data will be removed within 30 days, except where we are required to retain it by law (for example, financial records).

Audit and access logs may be retained for longer than other data — including after account deletion — where this is necessary for security, to investigate or resolve disputes, or to meet legal and record-keeping obligations.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify active users by email before material changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.