Privacy Policy

1. Who we are

StrataHub is operated by Empite. Empite is the data controller responsible for your personal information.

2. Who this policy applies to

This policy applies to all users of StrataHub, including:

• Property managers and organisation administrators
• Tenants and residents
• Owners corporation members and committee members
• Visitors to our website
• Users of our iOS and Android mobile applications

If you access StrataHub through a property manager or body corporate, your organisation may also have its own privacy practices. Where we process information on behalf of a property manager, we act as a service provider and they remain responsible for how tenant and owner data is used within their portfolio.

3. Information we collect

We collect information that you provide directly, information generated through your use of the Services, and limited technical information from your device.

3.1 Account and profile information

• Name, email address, phone number, and password
• Organisation name, role, and job title
• Profile photo (if you choose to upload one)
• Authentication and verification data, including one-time passcodes

3.2 Property and tenancy information

• Property addresses, unit/lot numbers, and building details
• Tenant and owner records, lease details, and portal membership
• Water meter readings, billing configuration, invoices, and payment status
• Maintenance requests, repair history, and related communications
• Strata levy notices, financial summaries, and committee documents (where applicable)

3.3 Photos and camera data

With your permission, our mobile app may access your device camera to capture water meter photos. Meter images may include timestamps and property metadata. We do not access your camera or photo library without your explicit consent when you initiate a meter scan or upload.

3.4 Payment and billing information

Payment card details and bank account information are processed by our secure payment providers. StrataHub does not store full payment card numbers on our servers. We may retain billing records, transaction references, and invoice history.

3.5 Communications

• Messages sent through in-app chat and community features
• Support tickets and correspondence with our team
• Email notifications and delivery status

3.6 Device and usage information

• Device type, operating system, app version, and unique device identifiers
• IP address, browser type, and general location derived from IP (city/region level)
• Log data such as access times, pages viewed, features used, and error reports
• Push notification tokens (if you enable notifications)

3.7 Information from third parties

We may receive information from property managers who invite you to the platform, from accounting integrations such as Xero (when connected by your organisation), and from service providers that help us operate the Services.

4. How we use your information

We use personal information to:

• Provide, operate, and maintain the StrataHub platform and mobile apps
• Create and manage your account and authenticate your identity
• Process water meter readings, generate invoices, and facilitate billing
• Enable communication between property managers, tenants, and owners
• Send transactional emails and push notifications (e.g. bills, maintenance updates, account alerts)
• Sync accounting data with connected integrations such as Xero
• Provide customer support and respond to enquiries
• Monitor, analyse, and improve the performance and security of our Services
• Comply with legal obligations and enforce our terms of service
• Send product updates and marketing communications where you have consented or where permitted by law (you may opt out at any time)

5. Legal bases for processing

Under Australian privacy law, we collect and handle personal information where:

• It is reasonably necessary to provide the Services you or your organisation have requested
• You have given consent (for example, camera access or marketing emails)
• We have a legitimate interest in operating, securing, and improving our Services
• We are required to do so by law

6. How we share your information

We do not sell your personal information. We may share information in the following circumstances:

• Within your organisation: Property managers, authorised staff, and other portal users within the same building or portfolio may see information relevant to their role.
• Service providers: We use trusted third parties for cloud hosting, email delivery, payment processing, analytics, and customer support. These providers are contractually required to protect your data and use it only for the services they provide to us.
• Integrations: If your organisation connects Xero or other third-party services, relevant billing and accounting data is shared according to your organisation's configuration and the third party's terms.
• Legal requirements: We may disclose information if required by law, court order, or government authority, or to protect the rights, safety, and security of StrataHub, our users, or others.
• Business transfers: If StrataHub is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services. We may also retain information to comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer required, we take reasonable steps to delete or de-identify it.

Meter photos and billing records may be retained for the period required by your property manager's legal and accounting obligations, which may extend beyond account closure.

8. Data security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/HTTPS), access controls, and secure cloud infrastructure.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your rights and choices

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated personal information, subject to legal retention requirements
• Withdraw consent for optional processing such as marketing or camera access
• Opt out of marketing communications via the unsubscribe link in emails or by contacting us
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

Account deletion

You may request deletion of your StrataHub account at any time by:

• Using the account deletion option in the app (Settings → Account → Delete Account), or
• Emailing hello@empite.com with the subject line "Account Deletion Request"

We will process verified deletion requests within 30 days. Some information may be retained where required by law or for legitimate business purposes such as fraud prevention and billing dispute resolution.

Device permissions

You can control camera, notification, and other device permissions through your device settings. Disabling certain permissions may limit app functionality such as meter photo capture.

10. Children's privacy

StrataHub is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at hello@empite.com and we will take steps to delete it.

11. International data transfers

StrataHub is based in Australia. Your information may be processed and stored in Australia and, where we use overseas service providers, in other countries. When we transfer data internationally, we take reasonable steps to ensure it receives a comparable level of protection to that required under Australian privacy law.

12. Third-party links and services

Our Services may contain links to third-party websites or integrate with third-party services (such as Xero). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.

13. App Store disclosure summary

For transparency required by Apple App Store and Google Play, the following categories of data may be collected through our mobile app:

• Contact information — name, email, phone number
• User content — meter photos, maintenance requests, chat messages
• Financial information — billing and payment records (processed via third-party payment providers)
• Identifiers — user ID, device ID, push notification token
• Usage data — app interactions and diagnostic logs

This data is used to provide app functionality, analytics, and customer support. It is linked to your identity and is not used for cross-app tracking or sold to data brokers.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the "Last updated" date. Where required by law, we will provide additional notice (such as by email or in-app notification). Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

15. Contact us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

We aim to respond to all privacy enquiries within 30 days.