Privacy Policy

Greenside Group Pty Ltd (ABN 90 687 061 632) ("Arqelo", "we", "us", or "our") operates the Arqelo property intelligence platform accessible at arqelo.com and associated applications (the "Platform").

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We are committed to protecting your privacy and handling your personal information in an open and transparent manner.

By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.

We use the information we collect for the following purposes:

Under the Australian Privacy Principles and applicable law, we process your personal information on the following bases:

• Consent: Where you have given clear consent for us to process your personal information for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you (e.g., providing our subscription services)
• Legal obligation: Where processing is necessary to comply with Australian law
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests

We do not sell your personal information. We may share your information in the following circumstances:

We implement robust security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3
• Secure storage: Data at rest is encrypted using AES-256 encryption
• Access controls: Strict role-based access controls limit who can access your data
• Authentication: Secure password hashing and optional multi-factor authentication
• Monitoring: We actively monitor for security threats and vulnerabilities
• Infrastructure: Our hosting providers (Vercel, Supabase) maintain SOC 2 Type II compliance
• Payment security: We never store your full credit card details; payments are processed by PCI-DSS compliant Stripe

While we implement safeguards designed to protect your information, no security system is impenetrable. We cannot guarantee the security of our systems or your information. In the event of a data breach, we will notify affected users and relevant authorities as required by the Notifiable Data Breaches scheme under the Privacy Act.

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes and enforce our agreements

Specific retention periods:

• Active account data: Retained while your account is active
• Closed account data: Deleted within 90 days of account closure, except where legally required
• Transaction records: Retained for 7 years for tax and legal compliance
• Analytics data: Aggregated and anonymised after 24 months
• Support communications: Retained for 3 years

You may request deletion of your data at any time, subject to legal retention requirements.

Under Australian Privacy Principles and applicable law, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Objection: Object to processing of your information for direct marketing
• Data portability: Request your data in a structured, machine-readable format
• Withdraw consent: Withdraw consent at any time where we rely on consent for processing
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us at privacy@arqelo.com. We will respond to your request within 30 days.

We use cookies and similar tracking technologies to enhance your experience:

While Arqelo is an Australian company serving Australian users, some of our service providers are located overseas (primarily the United States). When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Contractual obligations requiring the recipient to protect personal information
• Ensuring recipients are subject to laws or binding schemes that provide comparable privacy protections
• Obtaining your consent where appropriate

Our primary service providers (Vercel, Supabase, Stripe) maintain robust security certifications including SOC 2 Type II compliance and are contractually bound to protect your data.

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@arqelo.com and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last updated" date at the top of this policy
• We will notify you via email or prominent notice on our Platform
• For significant changes, we may require you to re-acknowledge the policy

We encourage you to review this policy periodically. Your continued use of our Platform after any changes indicates your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all enquiries within 5 business days. For formal privacy complaints or access requests, we will respond within 30 days as required by the Australian Privacy Principles.