Effective 24 August 2026

Privacy Notice

This notice explains the information AgencyApp handles when someone requests a pilot, creates a workplace, uses workplace tools or pays for a subscription.

Information handled

AgencyApp may handle account identifiers, work email, display name, agency or branch name, role, privacy settings, generic activity metadata, invitation status, subscription status, seat counts, pilot requests and service/security logs. Stripe handles card and payment details on its hosted pages; AgencyApp stores Stripe customer/subscription identifiers and resulting status, not full card numbers or CVCs.

Participant drafts

The browser workplace is designed so participant drafting content stays in that browser unless a user deliberately copies it elsewhere. Hosted activity records use generic labels and warnings rather than participant names or draft bodies. Agencies should still use de-identified or minimum-necessary information and follow their own consent and record rules.

Purposes and disclosure

Information is used to authenticate users, isolate agency workspaces, operate tools, deliver invitations and recovery messages, administer pilots and subscriptions, prevent abuse, support customers and meet legal obligations. Service providers may process the minimum required information for hosting, authentication/database services, email delivery, payment processing and operational security.

Retention and access

Workspace activity metadata is automatically removed according to the workplace retention setting, subject to minimum operational and legal requirements. Account, security, billing and audit records may be retained as needed to provide the service, resolve disputes and meet legal duties. Managers control workplace membership. Individuals can request access, correction or deletion, subject to identity verification and applicable exceptions.

Security and overseas processing

AgencyApp uses encrypted HTTPS transport, authenticated access, tenant-scoped database rules, restricted server credentials and signed payment webhooks. Providers may process data in locations described in their service terms. No system can guarantee absolute security; suspected incidents should be reported promptly.

Contact and complaints

Submit a privacy request or complaint through the contact form on the AgencyApp website. The contracting operator and business details are those identified in the agency’s accepted order, Stripe receipt or written service agreement. If a complaint is not resolved, an individual may have the right to contact the Office of the Australian Information Commissioner.