Privacy policy

RectifyHQ exists so your Scheme can keep its own record. This policy explains, in plain terms, what we collect, why, and what we will never do with it.

Who we are

RectifyHQ is an Australian service operated by Dave DC Pty Ltd, ABN 64 631 517 363. RectifyHQ is a registered business name of Dave DC Pty Ltd.

For the purposes of this Privacy Policy, Dave DC Pty Ltd is responsible for personal information collected through RectifyHQ. You can reach a person about anything on this page at [email protected].

What we collect

Your name, email address, the Scheme and Lot you belong to, and the content you and your committee create: messages, Threads, Issues and files. If you upload a photo of yourself, we store that too.

Signing in also records what any service needs to keep an account secure: the IP address and browser user agent the sign-in came from, and when it happened. Files you upload keep their own details — who uploaded them, the file name, the type and the size. If your Scheme subscribes, we keep the billing contact details for the subscription. We never see or store your card number.

We also record usage analytics: which pages and screens are used and which actions are taken (a message sent, an Issue raised), tied to your account id, role and Scheme — never the contents of what you write.

Why we collect it

To run the service: delivering messages, keeping the record searchable, and sending the small number of emails you've chosen to receive. We do not build advertising profiles, and we do not sell or share your data with advertisers — ever.

Who can see what

Your Scheme's record is visible only to the members of your Scheme, according to their role. Committee Chats are visible to the committee; a tenant sees the Chats and Issues relevant to their Lot. RectifyHQ staff do not read your messages except where required to investigate abuse or by law.

Who else handles your data

Running the service means a small number of other companies necessarily touch some of it. This is all of them, what each one does, and what it sees.

• Stripe — payments. Takes your card or bank details and the billing contact for the subscription; we never receive your card number. Handled overseas, in the United States. Stripe's privacy policy
• Resend — email. Delivers the notifications you've chosen to receive and carries your replies back in, so it handles your email address and the contents of those messages. Handled overseas, in the United States. Resend's privacy policy
• Cloudflare — the public edge. Routes traffic to rectifyhq.au and terminates TLS, so it carries your requests — messages and files included — while they are in transit. Cloudflare's privacy policy
• PostHog — product analytics. Records which pages and screens are visited and which actions are taken (a message sent, an Issue raised — never their contents), tied to your account id, role and Scheme; visitors to this site are counted without cookies. Handled overseas, in the United States. PostHog's privacy policy

Everything else — the database and the files you upload — runs on infrastructure we operate ourselves, not a third-party cloud.

Where your data lives

Your data is stored in Australia, encrypted in transit and at rest. We keep backups for disaster recovery, and we hold ourselves to the Australian Privacy Principles.

How long we keep it

The record is meant to outlast the people who wrote it — that is the point of it. So when a member closes their account, we deactivate it, end their sessions and remove them from the Scheme, but we keep what they contributed to it. Their past messages stay attributed to them by name, exactly as written. A record where half the history says "former member" is not a record.

Everything else follows the Scheme. While your Scheme is with us we keep its record; when it leaves, the section below applies.

Closing your account

Closing your account deletes your email address (kept only as a one-way fingerprint, so you can reconnect your past messages if you come back, through a manager's re-invite or by signing in again with that email), password and sessions, photo and colour, drafts, pending invitations and join requests, reply-by-email addresses and connected apps.

Your name stays on the messages, issues and correspondence you already posted, because owners corporations must keep their correspondence: Strata Schemes Management Act 2015 (NSW) s 180, Owners Corporations Act 2006 (Vic) s 144, and Standard Module reg 231 (Qld).

Product-analytics events tied to your account id are deleted on request.

If something goes wrong

If we discover a breach affecting your data, we will investigate it, contain it, and tell the Schemes affected what happened, what it means for them, and what to do about it. We would rather tell you early and imprecisely than late and neatly.

Your data is yours

The record belongs to your Scheme. While your subscription is current you can export it from the app; if your subscription has lapsed, email us and we will send it to you. If your Scheme leaves RectifyHQ, we delete your data after a grace period, on your instruction or after 90 days.

Access, correction and complaints

You can ask us what personal information we hold about you, and ask us to correct it if it's wrong. Write to [email protected] and we'll answer. If you are unhappy with how we handled it, you can take the matter to the Office of the Australian Information Commissioner.

Changes to this policy

If we change this policy we'll update the date at the top of this page, and we'll tell your Scheme directly if the change is one that would matter to you.

Questions

Write to [email protected] and a person will answer.