Privacy Policy

Last updated: June 1, 2026

Automated Life Pty Ltd (ABN 11 647 697 809) trading as Automated Life Connect ("ALC", "we", "us", "our").

1. About this policy

This policy explains how we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to all personal information we collect through the ALC platform, our mobile app, our websites at automatedlife.com.au and alc.automatedlife.com.au, and any other interactions you have with us.

ALC is used by two distinct groups: building operators (strata managers, property managers, developers, and building owners who subscribe to the platform) and residents (the end users of the buildings those operators manage). Where the distinction matters in this policy, we call it out.

2. What is personal information?

Personal information is any information or opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether recorded in a material form or not.

3. Types of personal information we collect

The personal information we collect depends on your relationship with us:

  • Residents: name, email address, phone number, building and unit number, profile photo (optional), push notification tokens, and any content you submit through the platform — defect reports (including photos), booking requests, messages, parcel collection records, intercom call history, and EV charging session records.
  • Building operators (managers, committee members, staff): name, email, phone number, the buildings and roles assigned to your account, and a log of administrative actions you take on the platform.
  • Prospective customers: name, email, phone number, company name, and any details you share when contacting us via email or the website.
  • Website visitors: IP address, browser type, pages visited, and approximate location derived from your IP — collected automatically for security and analytics.

We do not collect sensitive information (health information, racial or ethnic origin, religious beliefs, etc.) unless you voluntarily provide it — for example, by including such information in a defect report or message.

4. Dealing with us anonymously or using a pseudonym

Where lawful and practicable, you may deal with us anonymously or under a pseudonym — for example, browsing our public websites or making a general enquiry. However, ALC's core platform is identity-based: residents and building operators must be identified for the platform to function (we need to know who reported a defect or who is collecting a parcel). Anonymous use of the operator dashboard or mobile app is not possible.

5. How we collect personal information

We collect personal information:

  • Directly from you — when you sign up, submit a defect, send a message, fill in a contact form, or email us.
  • From your building operator — when they create your resident account, they provide us with your name, unit, and contact details so the platform can function.
  • From your device — the mobile app collects device type, OS version, and push notification tokens.
  • Automatically from our websites — via essential cookies, server logs, and basic analytics.

6. Information we collect via our websites

Our websites use essential cookies to maintain your session and protect against cross-site request forgery. We do not deploy third-party advertising cookies.

We use two analytics tools to understand how visitors use our public marketing site:

  • Umami — self-hosted, cookieless aggregate pageview tracking. No personal information is collected.
  • Microsoft Clarity — heatmaps and anonymised session replay, which sets first-party cookies to recognise returning visitors within a session. Clarity is operated by Microsoft Corporation. Data may be processed outside Australia in accordance with Microsoft's privacy practices. See Microsoft's privacy statement at privacy.microsoft.com.

Neither tool is deployed on the authenticated application (alc.automatedlife.com.au) where residents and managers conduct operational work; both are limited to the public marketing pages.

7. Why we collect, use and disclose personal information

We use your personal information to:

  • Operate the ALC platform — process defect reports, deliver messages, manage bookings, log parcels, route intercom calls, and record EV charging sessions on behalf of your building operator.
  • Send transactional notifications (push, email, in-app) about events that affect you — new messages, parcel arrivals, booking confirmations.
  • Authenticate your account and protect against unauthorised access.
  • Respond to enquiries, support requests, and complaints.
  • Investigate misuse of the platform and enforce our terms of service.
  • Improve and develop our products — using aggregated, non-identifying data wherever possible.
  • Send sales and marketing communications, but only to prospective customers and only where the law allows (see Section 9).
  • Comply with our legal obligations.

Resident data is held on behalf of your building operator. The operator decides what data is collected within their building's instance of ALC and who in their organisation can view it. If you have a question about their handling of your data, raise it with them directly — we will assist where appropriate.

8. Disclosing your personal information

We do not sell your personal information. We may disclose it to:

  • Your building operator and their authorised staff — for residents, your defect reports, messages, parcel records, etc. are visible to the managers and committee members of your building who have permission to see them.
  • Sub-processors who help us run the platform — including our cloud hosting provider (Linode, Sydney, Australia), email delivery provider (Resend), push notification provider (Firebase Cloud Messaging, operated by Google LLC), and our managed database provider. Each is contractually required to handle data only on our instructions and with at least equivalent safeguards.
  • Professional advisers — lawyers, accountants, and auditors, where reasonably necessary.
  • Law enforcement, regulators, or courts — where we are required or authorised by law to disclose.
  • A purchaser of our business — in the event of a sale, merger, or restructure, on terms that protect your information.

9. Overseas disclosure

ALC's primary infrastructure (application servers and databases) is hosted in Australia (Linode Sydney region). However, some sub-processors operate from overseas:

  • Firebase Cloud Messaging (push notifications) — operated by Google LLC, with infrastructure that may be located in the United States and other regions.
  • Resend (transactional email delivery) — infrastructure located in the United States and the European Union.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure they handle it in accordance with the APPs. By using the platform you consent to this overseas disclosure for these limited purposes.

10. Direct marketing

We send sales and marketing communications only to prospective customers (building operators) who have requested information or have a pre-existing relationship with us. We do not send marketing communications to residents. Every marketing email includes a clearly visible unsubscribe link, and you can also opt out at any time by emailing us at hello@automatedlife.com.au. Transactional notifications related to your use of the platform are not marketing and cannot be unsubscribed from in the same way — they are managed through your account preferences.

11. Security and storage

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

  • Encryption in transit (HTTPS/TLS) for all platform connections.
  • Encryption at rest for backups and database storage.
  • Per-building data isolation enforced at the application layer.
  • Hashed passwords and signed authentication tokens.
  • Role-based access controls and an audit log of administrative actions.
  • Biometric authentication option on the mobile app.
  • Restricted access to production systems for ALC staff, with multi-factor authentication required.

We retain your personal information only as long as we need it for the purposes set out in this policy or as required by law. When an account is deactivated, we delete or de-identify personal information as soon as reasonably practicable, except where retention is required by law or where the data must be preserved for the operator's records.

12. Access to and correction of your information

You have the right to ask for access to the personal information we hold about you and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. To make a request, email us at privacy@automatedlife.com.au. We will respond within a reasonable period in accordance with the Privacy Act, and may need to verify your identity before fulfilling the request. We will not charge a fee for making a request, though a reasonable fee may apply for the cost of providing access in specific circumstances.

If you are a resident, we may need to refer parts of your request to your building operator, since some of your data is held on their instructions.

13. Complaints

If you believe we have breached the Privacy Act or the APPs, please contact us first at privacy@automatedlife.com.au. We will acknowledge your complaint and work with you to resolve it.

If you are not satisfied with our response, you can escalate the complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

14. Other organisations' websites

Our websites and platform may contain links to third-party websites (for example, our cloud provider's documentation, or a contractor's website linked from a defect report). This policy does not apply to those websites — you should review the privacy policies of any third-party site you visit.

15. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects when it was most recently revised. Where changes are material, we will notify building operators and, where appropriate, residents through the platform or by email. Continued use of ALC after a change takes effect constitutes acceptance of the updated policy.

16. Contact us

For any question about this policy or how we handle your personal information: