This Privacy Policy explains how BioGeo ("BioGeo", "we", "us") collects, uses, discloses and protects personal information in connection with EcoAssess and the BioGeo App Suite (the "Service"), and our website at biogeo.com.au. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. Information we collect
Account and billing information
- Name, work email, organisation and role — collected when you request beta access or create an account;
- Billing details — collected and processed directly by our payment processor, Stripe. BioGeo does not receive or store your full card number;
- Sign-in information — we use email-based one-time passcodes (no passwords are stored by BioGeo).
Content you provide
- Study areas, project details, project-intake answers and other information you enter to run an assessment or generate a report ("Your Content", see Section 5 of our Terms of Service);
- Correspondence you send us, e.g. by email or through a contact form.
Usage and technical information
- Website analytics via Google Analytics (page views, referral source, approximate location, device/browser type) on our production website;
- Basic application logs (e.g. sign-in timestamps, error logs) used to operate and secure the Service.
2. How we use your information
- To provide, maintain and improve the Service, including running your queries and generating your reports;
- To create and administer your account, and to process subscription payments and billing;
- To communicate with you about your account, trial, subscription, or support requests;
- With your consent or where you haven't opted out, to send product updates or marketing communications — you can opt out of marketing email at any time via the unsubscribe link;
- To understand how the Service and website are used, and to improve them;
- To detect, prevent and address fraud, breach of our Terms, or security issues;
- To comply with our legal obligations.
3. Who we share information with
We do not sell your personal information. We share it only as follows:
- Stripe (payment processing) — receives your billing details and limited account metadata (name, organisation, role, plan) to process subscription payments;
- Supabase (authentication and account data hosting) — stores your account record and authentication data so you can sign in;
- Google Analytics (website analytics) — receives aggregated, pseudonymised usage data from our production website only;
- Service providers who help us operate the Service (e.g. hosting), bound by confidentiality obligations;
- Where required by law, or to protect the rights, safety or property of BioGeo, our users, or others.
These providers may store or process data on servers located outside Australia (including the United States). Where personal information is disclosed overseas, we take reasonable steps to ensure it continues to be handled consistently with the Australian Privacy Principles, including relying on these providers' own privacy and security commitments.
4. Data security and retention
We take reasonable technical and organisational steps to protect personal information from misuse, loss, and unauthorised access, including relying on the security controls of our infrastructure providers (Stripe, Supabase). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain account and billing information for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution requirements. You can request deletion of your account as described in Section 6.
5. Cookies and analytics
Our production website uses Google Analytics, which sets cookies to distinguish visitors and measure site usage. You can control or disable cookies through your browser settings; disabling cookies may affect some website functionality. Analytics is not enabled on local or development previews of our sites.
6. Your rights
Subject to some exceptions under the Privacy Act 1988, you have the right to:
- Ask what personal information we hold about you and request a copy of it;
- Ask us to correct inaccurate or out-of-date information;
- Ask us to delete your account and associated personal information, subject to information we're required to retain by law (e.g. billing records);
- Opt out of marketing communications at any time.
To exercise any of these rights, email info@biogeo.com.au. We will respond within a reasonable time.
If you believe we have not handled your personal information appropriately and are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
7. Children's privacy
The Service is intended for use by professionals and organisations, and is not directed at, or knowingly used to collect personal information from, children.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above, and where a change is material we will make reasonable efforts to notify active subscribers before it takes effect.
9. Contact us
Questions about this Privacy Policy, or requests relating to your personal information, can be sent to info@biogeo.com.au.