Privacy Policy

1. Overview

Klaus Auto Pty Ltd ABN [TBC] ("we", "us", "our") is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose, and store your information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

We collect the following types of personal information:

Account information: name, email address, phone number, postcode, and password (hashed).
Vehicle information: registration numbers, VINs, odometer readings, and vehicle specifications. This data may be cross-referenced with third-party vehicle databases.
Usage data: pages visited, features used, device type, browser, IP address, and cookies for analytics and service improvement.
Communication preferences: marketing opt-in status, reminder notification preferences (SMS, email, push, broker).

3. How We Use Your Information

We use your personal information to:

Provide and operate the Klaus Auto platform and its features.
Retrieve vehicle specifications, valuations, and registration data from third-party providers on your behalf.
Send service reminders (registration, insurance, service due dates) via your chosen notification channels.
Send marketing communications if you have opted in. You can unsubscribe at any time.
Improve the Service through analytics and usage patterns (aggregated and anonymised where possible).
Comply with legal obligations and resolve disputes.

4. Third-Party Data Sharing

We may share your information with:

Vehicle data providers (e.g. AutoGrab) to retrieve vehicle specifications, valuations, and registration status. Only your vehicle registration number and/or VIN is shared.
Hosting and infrastructure providers (e.g. Vercel, Supabase) who process data on our behalf under data processing agreements.
Communication providers for delivering SMS, email, and push notifications related to your reminders.
Law enforcement or regulators when required by law or to protect our legal rights.

We do not sell your personal information to third parties.

5. Data Storage & Security

Your data is stored in secure, encrypted databases hosted by Supabase with servers located in Australia (Sydney region). We implement industry-standard security measures including:

Encryption in transit (TLS/HTTPS) and at rest.
Row-level security ensuring users can only access their own data.
Rate limiting on authentication and API endpoints.
Hashed passwords (never stored in plain text).

6. Cookies

We use essential cookies for authentication and session management, and a theme preference cookie. We do not use third-party tracking cookies. By using the Service, you consent to our use of essential cookies.

7. Your Rights

Under Australian privacy law, you have the right to:

Access your personal information held by us.
Correct any inaccurate or out-of-date information via your profile settings.
Delete your account and associated data via your account settings. Deletion is immediate and permanent.
Opt out of marketing communications at any time via your profile settings.
Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

8. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, your data is removed immediately, except where retention is required by law or for legitimate business purposes (e.g. fraud prevention).

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

For privacy-related enquiries or to exercise your rights, contact our Privacy Officer at privacy@klausauto.com.au.