This Privacy Policy explains how WWW.DIRECTORY.COM.AU PTY LTD (ABN 68 090 816 461) (we, us) handles personal information in connection with the Fivedock ERP service (the Service). We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information we collect
- Account information — your name, work email, company name, and password (stored hashed) when you register.
- Billing information — subscription status and payment-method tokens. Card details are collected and stored by Stripe; we do not see or store full card numbers.
- Your Data — the business records you enter into the Service (customers, suppliers, items, orders, jobs, etc.), which may include personal information about your own customers and staff. You are the controller of that data; we process it on your behalf.
- Support & enquiries — information you provide via our contact, support or in-app chat channels.
- Technical data — IP address, browser type, and usage logs collected automatically for security and to operate the Service.
2. How we use information
- To provide, maintain, secure and improve the Service;
- To create and administer your account and process subscription payments;
- To respond to your enquiries and provide support;
- To send service-related communications (e.g. billing, security, and important changes);
- To detect, prevent and address fraud, abuse and security incidents; and
- To comply with our legal obligations.
3. AI processing disclosure
4. Disclosure to third parties
We disclose personal information only as needed to run the Service, including to:
- Stripe — payment processing (privacy policy);
- Caimunicate / Anthropic — AI chat assistant processing;
- our hosting and infrastructure providers (located in Australia);
- professional advisers or authorities where required by law.
We do not sell your personal information.
5. Overseas disclosure
Some service providers (e.g. payment and AI processing) may process data outside Australia. Where this occurs we take reasonable steps to ensure the information is handled consistently with the APPs.
6. Data security
We protect information with measures including encrypted transport (HTTPS/TLS), hashed passwords, tenant isolation so each workspace's data is segregated, access controls, and an audit log. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
7. Data retention
We retain Your Data while your subscription is active and for a reasonable period afterwards to allow reactivation or export, after which it may be deleted. We retain certain records (e.g. billing) for as long as required by law.
8. Access & correction
You may access and correct most of your information directly in the Service. You may also request access to or correction of personal information we hold about you by contacting us. We will respond within a reasonable time.
9. Cookies
We use strictly necessary cookies (e.g. a session cookie to keep you logged in). We do not use third-party advertising cookies.
10. Complaints
If you have a privacy concern, contact us using the details below and we will investigate. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Changes
We may update this Policy from time to time. The "last updated" date shows the current version; material changes will be notified.
12. Contact us
Privacy Officer, WWW.DIRECTORY.COM.AU PTY LTD (ABN 68 090 816 461) — please use our contact form.