Privacy Policy
1. Overview
Altitude Group Pty Ltd (ACN 678 543 210, ABN 12 345 678 901) operates the ExitProof platform at exitproof.com.au. We are committed to protecting your personal information and being transparent about how we collect, use, and store data.
This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what control you have over it. It applies to all visitors and users of exitproof.com.au.
2. Data We Collect
We collect the following categories of data:
2.1 Information you provide directly
- Email address. Collected when you sign up for an account, complete the calculator, or subscribe to our newsletter. Used to deliver the service and email sequences.
- Password (hashed). Stored in hashed form using scrypt. We do not store or see your plaintext password.
- Calculator inputs. Financial data you enter into the calculator — income, assets, destination, family situation. Stored to personalise your results and support future sessions.
- Evidence uploads. Documents you upload to the evidence vault — bank statements, lease agreements, travel records, employment contracts. Stored securely to support your compliance record.
- Stripe payment information. Payment card details are handled exclusively by Stripe. We receive only a masked customer reference and subscription status — we never see or store card numbers.
2.2 Automatically collected data
- IP address. Collected on calculator submissions and account creation. Used for spam prevention and service analytics.
- User agent. Browser and device information collected alongside calculator submissions.
- Usage data. Pages visited, features accessed, and time on site — collected in aggregate via Polsia analytics for service improvement. Not linked to personally identifiable information.
3. How We Use Your Data
We use your data for the following purposes only:
- Service delivery. Running the calculator, generating personalised results, maintaining your evidence vault, and delivering your compliance dashboard.
- Email nurture sequences. If you complete the calculator or sign up, we may send a sequence of educational emails (Day 0, Day 2, Day 5). Every email includes a working unsubscribe link. You can opt out at any time.
- Subscription management. Activating and managing your Stage 2 or Stage 3 subscription via Stripe.
- Account support. Responding to login issues, subscription enquiries, and data requests.
- Service improvement. Aggregate analytics to understand which features are used and how to improve the platform. Individual user data is not used for profiling.
We do not sell your personal data to any third party, data broker, or advertising platform.
4. Third-Party Services
We use the following third-party services. Each processes your data under their own privacy policy — links provided.
| Service | Data shared | Purpose | Privacy Policy |
|---|---|---|---|
| Stripe | Email, masked card reference, subscription status | Payment processing and subscription management | stripe.com/privacy |
| Postmark | Recipient email address, personalised content, unsubscribe tokens | Transactional and nurture email delivery | postmarkapp.com/privacy |
| Render | Application logs, server metrics | Web hosting and application delivery | render.com/privacy |
| Neon (PostgreSQL) | All user account data, calculator inputs, evidence files, subscription records | Database storage | neon.tech/privacy |
| Polsia | Aggregate analytics (page views, conversions); no personal financial data | Platform infrastructure, visitor analytics | polsia.com/privacy |
6. Data Retention
We retain your data for the following periods:
- Calculator submissions without an account. Retained for 12 months from submission date, then permanently deleted unless you create an account within that period.
- User accounts. Retained until you delete your account or request deletion.
- Subscription records. Retained for 7 years after cancellation as required for financial record-keeping obligations.
- Email nurture opt-outs. Stored indefinitely to honour unsubscribe requests.
- Evidence uploads. Retained for the duration of your active subscription. Deleted within 30 days of account deletion.
7. Data Security
We take the following measures to keep your data secure:
- Passwords are hashed with scrypt before storage — we never see or store plaintext passwords
- All data in transit is encrypted via HTTPS (TLS 1.2+)
- Database access is restricted to the application server via environment-scoped credentials
- Access logs are maintained for major account events (login, password change, subscription change)
- Evidence file uploads are stored in isolated storage with access controls
No system is completely immune from breach. In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery, in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).
8. Your Rights
Under the Australian Privacy Act 1988 (Cth) and the Privacy Amendment (Enhancing Online Privacy and Other Measures) Act 2012, you have the following rights:
- Access. Request a copy of all personal information we hold about you by emailing privacy@exitproof.com.au. We will respond within 30 days.
- Correction. Request correction of any inaccurate or outdated personal information. You can update most information directly from your account page.
- Deletion. Request deletion of your account and all associated data. We will comply within 30 days, subject to our financial record-keeping obligations.
- Unsubscribe. Opt out of marketing emails at any time by clicking the unsubscribe link at the bottom of any email, or by emailing hello@exitproof.com.au.
- Complaint. If you believe we have mishandled your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
9. Australian Privacy Act Compliance
ExitProof is subject to the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs) in Schedule 1. We are not required to be registered with the OAIC as an APP entity under the small business exemption (annual turnover under $3 million), but we voluntarily comply with APP standards as a matter of best practice.
If you are located outside Australia, your data may be transferred to and processed in Australia. By using ExitProof you consent to such transfers in accordance with this policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. If we make material changes we will notify you by:
- Posting a notice on exitproof.com.au
- Sending an email to the address associated with your account (for registered users)
The "Effective" date at the top of this page shows when the policy was last updated. We encourage you to review this policy periodically.
11. Contact
For privacy enquiries, data access requests, or to report a concern:
Altitude Group Pty Ltd
Privacy Officer
Email: privacy@exitproof.com.au
Website: exitproof.com.au
We aim to respond to all enquiries within 5 business days.