Legal Centre

1. Who we are

Knowledge Catalog is operated by Troy Overend (sole trader), ABN 65 425 450 090, Queensland, Australia. Our Privacy Officer can be reached at support@knowledgecatalog.com.au.

2. Personal information we collect

• Account information: name, email, password hash, business name.
• Business and catalog content: the information you enter into your catalog, including services, pricing, FAQs, service areas, credentials and other business details.
• Billing metadata: subscription plan, invoices and payment status received from Stripe. We do not store full card numbers.
• Technical information: IP address, device and browser type, log data, and usage events used to secure and improve the Service.
• Communications: messages you send to support and your responses to service emails.

3. Purposes of collection (APP 3)

• To create and administer your account and deliver the Service.
• To process payments, invoicing and renewals.
• To provide support and respond to your enquiries.
• To improve, secure, monitor and troubleshoot the Service.
• To meet legal and regulatory obligations.

4. How we collect it

We collect information directly from you when you sign up, complete your catalog, or contact support; automatically as you use the Service; and from third parties such as Stripe when you make a payment or update your billing details.

5. Use and disclosure (APP 6)

We do not sell your personal information. We disclose it to the service providers listed below strictly to operate and support the Service, to comply with law, and to protect our legal rights.

6. Overseas disclosure (APP 8)

Some of our service providers store or process personal information outside Australia. Current key providers include:

• Stripe (payments) — United States and Australia.
• Lovable Cloud / Supabase (application hosting, database, authentication) — regions as configured for the project.
• Transactional email provider — used to deliver account, billing and support emails.

We take reasonable steps to ensure these providers handle your information in a way consistent with the APPs.

7. Direct marketing and email (APP 7)

We may send you service and product updates. Commercial messages comply with the Spam Act 2003 (Cth) and include a functional unsubscribe. Transactional messages required to operate your subscription (receipts, security alerts, service notices) may still be sent after you opt out of marketing.

8. Data quality, security and retention (APPs 10 & 11)

• All traffic between your browser and the Service is encrypted in transit (TLS).
• Access to production systems is limited to authorised personnel using strong authentication.
• We retain personal information for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution obligations.
• On account deletion we remove or de-identify personal information within a reasonable period; residual copies may persist in backups until they are cycled out in the ordinary course.

9. Access and correction (APPs 12 & 13)

You can view and update most of your information from the dashboard. You may also request access to, or correction of, the personal information we hold about you by emailing support@knowledgecatalog.com.au. We respond within a reasonable time and do not charge a fee for reasonable requests.

10. Cookies and analytics

We use strictly necessary cookies to keep you signed in and to remember essential preferences. We may use limited analytics to understand aggregate usage and improve the Service. You can control cookies through your browser settings; disabling essential cookies may affect the operation of the Service.

11. Children

The Service is intended for business users aged 18 and over. It is not directed to children and we do not knowingly collect personal information from children.

12. Complaints

If you believe we have breached the APPs, contact us at support@knowledgecatalog.com.au. We will acknowledge your complaint promptly and aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Notifiable data breaches

If a data breach is likely to result in serious harm and involves personal information we hold, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

14. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email or prominently on the Service. The "Last updated" date at the top of this page reflects the latest revision.