Privacy Policy

1. Who We Are

QuickSecure Pty Ltd (ACN 702 435 336) ("QuickSecure", "we", "our", or "us") is an Australian company based in Queensland. We are bound by the Privacy Act 1988 (Cth) and handle personal information in accordance with the Australian Privacy Principles (APPs). This summary explains how we handle personal information when you visit quicksecure.io, contact us, or sign up for the QuickSecure platform.

2. Information We Collect

• Account information: your name, email address, company name and sign-in details when you create an account. Sign-in is handled by our authentication provider, Auth0.
• Billing information: billing contact details and payment records. Payments are processed by Stripe; card details are entered with and held by Stripe, and we do not store full card numbers.
• Usage information: how you use the platform (features accessed and actions taken), and technical information such as IP address, browser type, operating system and device identifiers.
• Platform data: the domains you add for scanning, and the scan results, findings and other security data generated for them.
• Communications: emails, support requests and other messages you send us, including requests for work by our team.
• Contact form: the name, email address, company, subject and message you enter in our website contact form. The form is processed by HubSpot.
• Cookies and analytics: if you accept analytics cookies, Google Analytics collects information about how you use our website. Analytics cookies are not set unless you consent - see our Cookie Policy.

We do not ask for or intentionally collect sensitive information (such as health, racial, religious, or biometric information). You can browse our website without identifying yourself, and where it is lawful and practicable you may deal with us anonymously or using a pseudonym - though we need your identity to provide the platform itself.

3. How We Use Your Information

We collect, hold and use personal information to:

• Provide, operate and support the QuickSecure platform and your account
• Process payments and manage billing
• Respond to enquiries, including those sent through our contact form
• Send service notices, security alerts and other messages about your account
• Deliver work you request from our team
• Understand how our website is used and improve it (only with your consent to analytics cookies)
• Protect the platform, our customers and us from security threats, fraud and misuse
• Comply with our legal obligations

AI analysis in the platform runs on AWS Bedrock in Australia (Sydney or Melbourne), never overseas. Your data is never used to train AI models.

4. Who We Disclose Information To

We do not sell your personal information. We disclose it to the service providers below so they can perform services for us, and otherwise only where required or authorised by law, in connection with a sale or restructure of our business, or with your consent.

The platform's current sub-processor list is published at app.quicksecure.io/legal/sub-processor-list.

5. Overseas Disclosure (APP 8)

Platform data is stored in Australia, in AWS Sydney (ap-southeast-2). Some of our service providers are located overseas: Auth0 (sign-in, United States), Stripe (payments, Australia and United States), HubSpot (website contact form and CRM, United States) and Google (website analytics, United States, only with your consent). Before disclosing personal information overseas, we take reasonable steps as required by Australian Privacy Principle 8 to ensure the recipient handles it consistently with the Australian Privacy Principles, including through contractual safeguards.

6. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including:

• Encryption in transit using TLS 1.2 or higher (TLS 1.3 where supported), and AES-256 encryption at rest
• Access controls and least-privilege permissions, with multi-factor authentication available on every account
• Automated encrypted backups
• Regular testing of our own platform with the same tooling we offer customers

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

7. Data Retention

We keep personal information for as long as we need it to provide the platform and for the purposes described above. Billing and financial records are kept for 7 years to meet Australian tax and record-keeping obligations. When personal information is no longer needed for any purpose permitted under the Australian Privacy Principles, we take reasonable steps to destroy or de-identify it.

8. Access and Correction

Under the Australian Privacy Principles you may:

• Access: request access to the personal information we hold about you (APP 12)
• Correction: request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13)

To make a request, email hello@quicksecure.io. We will respond within 30 days. We do not charge for making a request or for correcting your information; if giving access involves significant work we may charge a reasonable fee, which we will tell you about first. If we refuse a request, we will give you written reasons and explain how to complain.

9. Direct Marketing

We only send direct marketing (such as product updates or offers) where permitted by the Spam Act 2003 (Cth) and the Australian Privacy Principles. Every marketing message includes a working unsubscribe link, and you can opt out at any time by using it or by emailing hello@quicksecure.io. Opting out of marketing does not stop service messages about your account.

10. Children

Our website and platform are not directed to people under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

11. Changes to This Summary

We may update this summary from time to time. We will post the updated version on this page with a new "Last Updated" date.

12. Contact Us and Complaints

If you have a question or a complaint about how we handle personal information, please contact us first:

• QuickSecure Pty Ltd (ACN 702 435 336), Queensland, Australia
• Email: hello@quicksecure.io
• Or use our contact form

We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.