Last updated: 16 August 2026
Business API ("we", "us", "our") operates Monitor HQ (the "Service"). We're an Australian business based in Queensland, and we handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
This policy explains what personal information we collect, why, and what your rights are.
1. Information We Collect
Account information. Name, email address, password (stored hashed, never in plain text), and the business/team details you provide - which may include an ABN, entity name, and address associated with your account.
Billing information. When you subscribe to a paid plan, payment is handled by our payment processor, Stripe. We don't store your full card number - Stripe does, under its own PCI-compliant systems. We keep a record of your subscription status, plan, and billing history.
Monitoring data you configure. The ACNs, ABNs, and entities you choose to add to your portfolio, notification preferences, and any notes or webhook URLs you set up.
Usage and technical information. IP address, browser and device information, pages visited, and API request logs - collected automatically to operate, secure, and improve the Service.
Information from third parties. When you look up a company or ABN, we may query public registers (ASIC, the Australian Business Register) to retrieve and display that entity's details. This is publicly available register data, not information supplied by you as personal information about yourself, unless the entity you're looking up happens to be your own.
2. How We Use Your Information
We use personal information to:
- Provide, operate, and maintain the Service, including sending you the alerts you've signed up for
- Process payments and manage your subscription
- Communicate with you about your account, service updates, or support requests
- Improve the Service and understand how it's used
- Detect, prevent, and respond to fraud, abuse, or security issues
- Meet our legal and regulatory obligations, including those arising from our role as an ASIC Registered Agent and ASIC/ATO Digital Software Provider
- Marketing communications you can opt out of at any time (see Section 7)
3. Who We Share Information With
We don't sell your personal information. We share it only where necessary to run the Service:
- Stripe (payment processing) - your billing details and payment history
- Google (Google Analytics and Google Ads, via Google Tag Manager) - usage and advertising-conversion data, as described in our Cookie Policy
- Xero - limited billing-contact details (name, email, ABN where provided) so we can issue tax invoices for your subscription; this is our own internal accounting, not a customer-facing integration
- Email and infrastructure providers we use to send transactional email and host the Service
- ASIC, the ATO, and other government agencies, where required for the register lookups the Service performs, or where we're legally required to disclose information to them
- Professional advisers, law enforcement, or regulators, where required by law or to protect our rights
Some of these providers (including Stripe and Google) are based overseas, primarily the United States. Where personal information is disclosed overseas, we take reasonable steps to ensure it's handled consistently with the Australian Privacy Principles, including relying on those providers' own compliance certifications and contractual commitments.
4. Cookies and Analytics
We use Google Analytics and Google Tag Manager to understand how visitors use our site, and Google Ads to measure the performance of our advertising. See our Cookie Policy for full detail on what's set and how to opt out.
5. Data Security
We take reasonable technical and organisational steps to protect personal information from misuse, loss, and unauthorised access, including encryption in transit, hashed passwords, and access controls on our systems. No system is completely secure, and we can't guarantee absolute security.
6. Data Retention
We keep personal information for as long as your account is active, and afterwards for as long as reasonably necessary to meet legal, accounting, or dispute-resolution obligations (for example, billing records for tax purposes). You can request deletion of your account and associated personal information at any time, subject to what we're legally required to retain.
7. Your Rights
Under the Australian Privacy Principles, you can:
- Ask us what personal information we hold about you
- Ask us to correct inaccurate or out-of-date information
- Ask us to delete your account and associated personal information
- Opt out of marketing communications at any time, using the unsubscribe link in any marketing email or by contacting us directly
- Lodge a complaint about how we've handled your personal information
To exercise any of these rights, contact us using the details in Section 9.
8. Complaints
If you're unhappy with how we've handled your personal information, contact us first so we can try to resolve it. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. Contact Us
For any privacy question, request, or complaint, contact us at hello@monitorhq.com.au or via our contact page.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal obligations. If we make a material change, we'll notify you (for example, by email or an in-app notice) before it takes effect.
This document is provided as a plain-language summary of our privacy practices and has not yet been reviewed by a solicitor. We recommend independent legal review before relying on it as your final privacy policy.