Effective Date: 24 August 2026
Last Updated: 24 August 2026

1. Introduction

1.1 For the purposes of this Privacy Policy:

“We”, “us” and “our” means Indovix Pty Ltd;
“You” and “your” means a person who is registered, authorised or otherwise permitted to access and use the Service;
“Privacy Policy” means our Privacy Policy as updated from time to time;
“Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, that we collect, hold, use or disclose in connection with the Service;
“Service” means one or more of the following services that we provide: Indovix Business (Hosted); and Indovix Business (On-Premises);
“Terms” means our Terms of Service as updated from time to time.

1.2 This Privacy Policy applies in relation to the Service, and sets out how we collect, use, and protect Personal Information.

2. Information We Collect

2.1 We may collect account information including: names; physical and email addresses; business descriptions; user account details; billing details; and user preferences.

2.2 The Service may collect and/or index connected data. Depending on integrations that you enable, this may include emails and communications, documents and files, financial data (e.g. accounting records), and metadata. The connected data may be stored or processed on infrastructure operated by us.

3. How We Collect and Use Personal Information

3.1 We collect Personal Information directly from you when you create an account, use the Service or communicate with us; automatically through your use of our Service; and from third parties where permitted by applicable laws.

3.2 We use the Personal Information to provide and operate the Service; identify authorised users of the Service; enable AI-powered functionality; and maintain system performance and security.

4. Access to Data

4.1 We do not access, review or monitor your data, which may include Personal Information, except where reasonably necessary to provide, support or maintain the Service; maintain system functionality, reliability and performance; protect the security and integrity of the Service; or perform feature updates, maintenance activities or operating system updates.

4.2 From time to time, we may need to perform technical access activities, without notice, where reasonably necessary for the purposes set out in paragraph 4.1, including remotely accessing servers, systems or connected devices; accessing components of your account or environment; or remotely interacting with your environment at a technical level.

4.3 Where we access your data, which may include Personal Information, for those purposes, we will only access and use that data to the extent reasonably necessary for those purposes and will not use it for unrelated purposes.

5. Disclosure of Data and Personal Information

5.1 We may disclose data, including Personal Information, to third parties where reasonably necessary to provide, operate, maintain or improve the Service, including: AI service providers; cloud hosting and infrastructure providers; authentication and identity management providers; external payment processing providers; integration partners and service providers that support the operation of the Service; and government authorities, regulators, courts or other parties where disclosure is required or permitted by law.

5.2 Some third-party providers may process data, which may include Personal Information, outside Australia. Further information about overseas processing is set out in the Cross-Border Transfers section of this Privacy Policy.

5.3 We do not sell Personal Information.

6. Cross-Border Transfers

6.1 Data, which may include Personal Information, may be stored, transmitted to and from, processed or accessed in Australia, the United States, or other jurisdictions where we or our service providers operate.

6.2 By using any of our Service, you acknowledge that data, which may include Personal Information, may be transferred, stored or processed outside Australia where necessary to provide and operate the Service.

6.3 Overseas recipients may include service providers that assist us in operating our Service, including AI service providers, cloud hosting and infrastructure providers, payment processing, communications, analytics, and security services.

6.4 Where Personal Information is transferred overseas we will take reasonable steps to ensure appropriate safeguards.

7. Data Retention

7.1 We retain Personal Information only as long as necessary to provide the Service; maintain and manage user accounts; comply with legal, regulatory, accounting or reporting obligations; and protect our legitimate business interests, including security, fraud prevention and dispute resolution.

7.2 When Personal Information is no longer required for these purposes, we will take reasonable steps to securely delete, destroy or de-identify the information in accordance with applicable privacy laws.

8. Security and Personal Information Protection Measures

8.1 We implement reasonable technical and organisational safeguards to protect Personal Information from misuse, interference, loss, unauthorised access, modification or disclosure.

8.2 If we become aware of a data breach involving Personal Information, we will assess the breach and take appropriate steps in accordance with applicable privacy laws.

8.3 While we take reasonable steps to protect Personal Information, no method of electronic transmission, storage or processing can be guaranteed to be completely secure.

9. Your Rights

9.1 Users of the Service may request access to the Personal Information we hold about you, and correction of Personal Information we hold about you that is inaccurate, incomplete or out of date.

9.2 Users of the Service may request deletion or de-identifying of Personal Information we hold about them, however deleting Personal Information may affect, suspend or prevent your ability to access or use some or all of the Service, and we may be unable to comply with a request where we are required or permitted to retain the information for legal, regulatory, security, fraud prevention, dispute resolution or other legitimate purposes.

9.3 Users must ensure they have the appropriate authority or lawful basis to provide Personal Information about another individual and must not submit Personal Information unless permitted under applicable privacy laws.

9.4 If you believe Personal Information about you has been provided to us through the Service without appropriate authority, please contact us and we will assess the request in accordance with applicable privacy laws.

10. Application of This Privacy Policy

10.1 This Privacy Policy is governed by the laws of Australia. To the extent permitted by law, matters relating to our handling of Personal Information will be subject to the jurisdiction of the Australian courts.

11. Amendments to This Privacy Policy

11.1 We may amend this Privacy Policy from time to time. Where we make material changes, we will provide notice to customers of the Service before those changes take effect. The notice period and any rights available to customers under our Terms of Service will apply to customers of the Service.

11.2 The version of this Privacy Policy published on our website is the current version.

12. Contact

12.1 For privacy enquiries, please contact us via email to support@indovix.com.au.