Privacy policy
Last updated: 6 July 2026
1. Introduction
This privacy policy explains how Search Ventures Pty Ltd (ACN 639906353) ("we", "us", "our", or "Company") collects, uses, shares, and protects personal information when you use AUO, the Australian business data API, and our website at auo.com.au (the "Service").
By using the Service, you consent to the collection and use of information as described in this policy. If you do not agree with our practices, please do not use the Service.
We are the data controller for the purposes of this policy. You can reach us through the contact page or by post at PO Box 255, Bli Bli, QLD 4560, Australia.
2. Information we collect
2.1 Information you provide
Account information: your email address (required), and optionally your name and company name. Payment information is processed by Stripe (card details, billing address, and tax identifiers where required); we do not store full card numbers. We also keep the content of any message you send us through the contact form.
2.2 Information collected automatically
Usage data needed to run, meter, and secure the Service: API request logs (endpoint, timestamp, response code), request frequency, error logs, and IP addresses. We keep detailed API logs for a limited period for security and debugging, then retain only aggregated usage for metering and billing.
2.3 Cookies
The dashboard uses an essential session cookie for sign-in and security. The marketing site does not set tracking or advertising cookies. You can control cookies through your browser settings; disabling essential cookies may limit dashboard functionality.
3. How we use your information
We use your information to create and manage your account, authenticate API requests, process payments, meter and enforce plan allowances, provide support, and send service-related communications (account, billing, security, and maintenance notices). We also use aggregated usage data to fix bugs, improve performance, and develop features.
Our legal bases for processing are contract performance (to provide the Service), legitimate interests (to operate and improve it), legal obligations (to comply with law), and consent (for any optional communications, which you can withdraw at any time).
4. The data you resolve through the API
The entity data returned by the Service is drawn from free public Australian government registers (including the Australian Business Register, ASIC, ACNC, ORIC, GLEIF, DFAT, AUSTRAC, and Super Fund Lookup). That register data is public information about businesses and organisations, not your personal account data. Some sources carry re-disclosure conditions and some records may be subject to suppression; see our terms of service for how that constrains resale and bulk use.
5. Information sharing
We do not sell, rent, or trade your personal information.
We share information only with trusted providers who help us operate the Service:
- Cloudflare (hosting, storage, email routing, and security), operating a global network.
- Stripe (payment processing), located in the United States. See the Stripe privacy policy.
We may disclose information where required by law (court orders, lawful government or law-enforcement requests, or to protect legal rights and prevent fraud). In the event of a merger, acquisition, or sale of assets, your information may transfer; we will notify you beforehand.
6. Data security
We use TLS encryption in transit, encryption at rest for sensitive data, and store API keys and webhook secrets as hashes, never in plaintext. We apply least-privilege access, monitoring, and incident-response procedures. No method of transmission or storage is perfectly secure, but we work to protect your information using measures appropriate to its sensitivity.
If a data breach affects your personal information, we will notify you and the relevant authorities as required under the Notifiable Data Breaches scheme, describe the likely impact, and explain the steps we are taking.
7. Data retention
We keep account and billing records for as long as your account is active and for up to seven years afterward to meet Australian tax and legal requirements. Detailed API logs are kept for a limited period for security and debugging, then reduced to aggregated metering data. When you delete your account, we remove personal data within a reasonable period, retaining only what the law requires and non-identifying aggregated analytics.
8. Your privacy rights
You have the right to access a copy of your personal data, correct inaccurate information, request deletion (subject to our legal obligations), receive your data in a portable format, restrict or object to certain processing, and withdraw consent where processing is consent-based. To exercise any of these, contact us through the contact page with enough detail to identify your account. We aim to respond within 30 days.
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are in another jurisdiction, additional local rights may apply.
9. International data transfers
Your account data is processed primarily in Australia. Some providers listed above process data in the United States or across a global network. Where we transfer data internationally, we rely on the provider's safeguards and encryption in transit.
10. Children's privacy
The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.
11. Changes to this policy
We may update this policy to reflect legal, product, or business changes. We will notify you of material changes by email, a dashboard notice, or a website banner. Continued use of the Service after a change takes effect means you accept the updated policy.
12. Complaints
If you have a privacy concern, contact us first through the contact page and we will investigate. If you are not satisfied, Australian residents can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
13. Contact
For any privacy question or request, use the contact page, or write to us at:
Search Ventures Pty Ltd
ACN 639906353
PO Box 255, Bli Bli, QLD 4560, Australia
Nothing in this policy excludes, restricts, or modifies any rights under the Privacy Act 1988 (Cth) or the Australian Consumer Law that cannot be excluded by agreement.