Privacy Policy

1. Our Commitment to Privacy

Forge Systems Pty Ltd (ACN: 702 303 320 / ABN: 97 702 303 320) trading as Stratapass ("we", "us", "our") is committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy applies to all users of our platform, including strata managers, committee members, residents, and prospective buyers.

2. Data Collection and Purpose Limitation (APP 5 & 6)

We collect personal information (such as names, contact details, and financial hardship applications) solely for the purpose of executing statutory strata management duties under the Strata Schemes Management Act 2015 (SSMA). We enforce strict purpose limitation—your data is never monetized, sold, or used for third-party marketing.

3. Zero AI Model Training Guarantee

Stratapass utilizes Artificial Intelligence strictly for administrative data ingestion (e.g., CSV schema mapping). We operate under paid, commercial-grade enterprise API agreements. Your agency and resident data is never used to train global LLM models. We utilize commercial enterprise API tiers where inputs, prompts, strata roll files, and generated outputs are excluded from foundation model training and are never retained by third-party AI providers for training purposes.

4. Security & Data Residency (APP 11)

We take security seriously:

• On-Soil Residency: 100% of your data is hosted on Australian soil within the AWS Sydney (ap-southeast-2) region.
• Encryption: All sensitive Personally Identifiable Information (PII) is protected via AES-256 envelope encryption at rest, and TLS 1.3 in transit.
• WORM Storage: Statutory compliance records are sealed using tamper-proof Write-Once-Read-Many (WORM) storage architecture to meet the 7-year record retention mandates of the SSMA.

Data Breach Response: Stratapass maintains an active Data Breach Response Plan compliant with the Australian Notifiable Data Breaches (NDB) scheme. In the event of a security incident involving personal information likely to result in serious harm, we will promptly notify affected managing agencies and regulatory authorities as required by law.

5. Sub-Processors & Infrastructure Providers (APP 8)

To ensure operational reliability and security, we partner with industry-leading infrastructure providers:

• Hosting & Database: Amazon Web Services (AWS) — Sydney, Australia (ap-southeast-2).
• Payment Processing: Stripe Payments Australia Pty Ltd (PCI-DSS Level 1).
• Postal Dispatch: Programmatic printing and Australia Post Registered Post integration partners.
• Transactional Email/SMS: AWS SES (Sydney) / Direct Australian ACMA-compliant SMS gateways.

6. Access and Correction

Under APP 12 and 13, you have the right to access and correct the personal information we hold about you. To request an update or removal, please contact your managing strata agency, as Stratapass acts as the data processor on their behalf.

7. Contact Us

For privacy-related inquiries, please email our compliance team at privacy@stratapass.com.au.