Your privacy is extremely important to us, and we are committed to fair practices that protect your information. This Privacy Policy is provided to explain our information practices and the choices you can make about the way your information is collected and used.

This Privacy Policy describes the privacy practices of Onedash and its affiliates and subsidiaries (collectively, "Onedash", "we", "us", or "our") and how we handle personal information in connection with our website (onedash.au), our platform, and any other digital property that links to this Privacy Policy (collectively, the "Platform"), and our related services, events, social media pages, interactions with you, and email and other electronic communications (collectively, and together with the Platform, referred to in this Privacy Policy as the "Onedash Service"). This Privacy Policy also explains the choices you have with respect to your personal information.

We provide our Services to individuals, businesses, and organisations. This Privacy Policy applies to personal information for which Onedash acts as a controller or otherwise determines the purposes and means of processing. Where we handle Customer Data on behalf of a customer as a processor or service provider, that processing is governed by our Data Processing Addendum and the customer's instructions. For more information about the privacy practices of one of our customers, please refer to that customer's privacy policy or notice.

1. Data Privacy

1.1 Australian Privacy Compliance

Onedash handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We take reasonable steps to ensure that personal information is collected, used, disclosed, stored, and protected in accordance with applicable Australian privacy laws.

Where required, individuals may request access to or correction of personal information we hold about them and may raise concerns or complaints regarding how their personal information has been handled.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure.

1.2 Third-Party and Overseas Disclosures

We may disclose personal information to third-party service providers where reasonably necessary to provide, operate, secure, or support our services. We take reasonable steps to ensure that personal information disclosed to these providers is handled securely and in accordance with applicable privacy laws.

Where personal information is disclosed to an overseas recipient, we take reasonable steps, where required by law, to ensure that the recipient does not breach the applicable Australian Privacy Principles in relation to that information.

In certain circumstances, Onedash may remain accountable under the Privacy Act 1988 (Cth) for acts or practices of an overseas recipient in relation to personal information disclosed by us.

1.3 Privacy Complaints

If you have a question, concern, or complaint regarding how Onedash collects, uses, discloses, or otherwise handles your personal information, you should first contact us using the details provided in the “How to Contact Us” section of this Privacy Policy.

We will review your complaint and take reasonable steps to investigate and respond to the matters raised. We aim to respond within a reasonable period, generally within 30 days of receiving your complaint.

1.4 External Resolution of Privacy Complaints

If you are not satisfied with our response, or we have not responded within a reasonable period, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Where an applicable recognised external dispute resolution scheme is available, you may be required or entitled to raise your complaint through that scheme before lodging a complaint with the OAIC.

1.5 Investigation and Determination

Where a privacy complaint is referred to the OAIC, the OAIC may investigate the complaint, attempt to resolve the matter through conciliation, or make a determination in accordance with the Privacy Act 1988 (Cth).

Nothing in this Privacy Policy limits any rights or remedies available to you under applicable privacy, consumer protection, or other laws.

2. Personal Information

Personal information you provide. The information you provide us may include:

• (a) contact details, such as your first and last name, business email address, mailing address, phone number, and professional title.
• (b) professional information, such as your company name, business location, company email address, and other information you provide about your organisation.
• (c) account information, such as your name, email address, authentication information, and other details associated with your Onedash account.
• (d) payment information required to complete transactions with us, including your name, billing information, and payment details. Payment information is processed by Stripe in accordance with its privacy policy.
• (e) communications that you exchange with us when you contact us with questions, support requests, feedback, or for any other reason, including communications through email, support channels, or other communication features we provide.
• (f) usage information, such as information about how you access, use, and interact with our Services, including features you use, actions you perform, and content or information you submit through the Services.
• (g) marketing data, such as your preferences for receiving marketing communications from us and information about your interactions with those communications.
• (h) survey responses, such as information you provide when responding to surveys, questionnaires, feedback requests, promotions, or similar activities.
• (i) other information that you choose to provide to us or that we collect as otherwise described in this Privacy Policy or disclosed to you at the time of collection.

Automatic collection of personal information. We, our service providers, and our advertising partners may automatically collect or log and combine information about you, your computer or mobile device, and your interaction over time with our Services, such as:

• (a) device data, including your device operating system and version, manufacturer and model, browser type, device type, IP address, language settings, and general location information such as city, state, or geographic area derived from your IP address.
• (b) online activity data, such as pages or screens you view, time spent on pages or screens, navigation paths, access times, duration of access, referring pages, and interactions with our communications, including marketing emails.
• (c) security and fraud signals, such as device identifiers, network and device characteristics, and interaction signals used to help detect automated activity, prevent fraud, protect accounts, and maintain the security of our Services.

We use this information to better understand your interactions with our Services, improve and troubleshoot our Services, and help maintain the security and integrity of our Services.

Like many online services, we use cookies and similar technologies to facilitate automatic data collection. Depending on how you interact with the Services, these technologies may include:

• (a) cookies, which are small text files stored by your browser that help remember preferences, understand how you use our Services, and support functionality, analytics, and security.
• (b) local storage, which allows information to be stored on your device to support application functionality, preferences, and other features of our Services.
• (c) web beacons, also known as pixel tags, which are small electronic files that may be used to determine whether an email has been opened or a webpage has been accessed and to measure engagement with our Services and communications.
• (d) third-party scripts, which are software libraries or code provided by service providers that may operate within our Services to provide functionality, analytics, security, fraud prevention, or other supporting services.
• (e) session replay technologies, which may record interactions with our Services, such as clicks, mouse movements, scrolling, typing, and other activity, to help us troubleshoot issues, understand how our Services are used, and identify opportunities for improvement.
• (f) chat technologies, which may allow you to communicate with us through live chat, automated chat features, or similar tools. Information provided through these features may be processed by us and our service providers in accordance with this Privacy Policy.

3. How We Use Personal Information

Our primary purpose in collecting personal information is to provide the services that you request. We also use personal information for the following purposes or as otherwise described in this Privacy Policy or at the time of collection:

3.1 Providing Our Services

We use personal information to operate, maintain, and provide you with our Services. In particular, we use personal information to perform our contractual obligations under our terms of use or other terms governing our offerings, or to take steps that you request prior to entering into a contract with us. Where we cannot process your personal information for these purposes on the grounds of contractual necessity, we process your personal information for this purpose based on our legitimate interest in providing you with the information or offerings you access or request. For example, we use personal information to:

• (a) process transactions, including providing access to our Services, managing subscriptions, and completing payments.
• (b) establish, manage, monitor, and maintain your account.
• (c) provide, operate, maintain, improve, and personalise our Services and your experience using them.
• (d) verify your identity, authenticate account access, and protect the security of your account.
• (e) communicate with you about your account, transactions, subscriptions, invoices, technical notices, service updates, security alerts, and other administrative matters.
• (f) respond to your questions, support requests, feedback, and other communications.
• (g) provide maintenance, technical support, and troubleshooting for our Services.
• (h) detect, investigate, and prevent fraud, misuse, security incidents, and other unauthorised activity.
• (i) comply with applicable legal, regulatory, tax, accounting, and reporting obligations.
• (j) fulfil any other purpose disclosed to you at the time you provide personal information or otherwise permitted by applicable law.

3.2 Research And Development

We may use personal information for research and development purposes in our legitimate business interests, including to analyze and improve the Services and our business and to develop new features, functionality, products, and services. As part of these activities, we may create or use aggregated, de-identified, or otherwise anonymized data from the personal information we collect.

Where we create aggregated, de-identified, or anonymized data, we take reasonable steps designed to prevent that information from identifying you. We may use and disclose such information for lawful business purposes, including analysing and improving the Services, developing products and features, and promoting our business, where permitted by law.

3.3 Direct Marketing

We may send you Onedash-related or other direct marketing communications, as permitted by law, including email. Our processing is based on your consent where that consent is required by applicable law. Where we rely on your consent you have the right to withdraw it any time in the manner indicated when you consent or via the Services.

Where such consent is not required by applicable law, we process your personal information for this purpose based on our legitimate interests in promoting our business and providing you with tailored, relevant content. You may opt out of our marketing communications as described in the "Opt-out of marketing communications" section below.

3.4 Interest-based Advertising

We may engage our advertising partners, including third-party and social media companies, to help us advertise our business and to display ads for our Services around the web and elsewhere. These companies may use cookies and similar technologies to collect information (including the automatically-collected data described above) about your interactions over time across our Services, our email communications, and other online services and use that information to serve ads that they think will interest you. In these cases, the privacy policy of our advertising partners may apply to their processing of your information.

Except where consent is required by applicable law, we undertake such advertising based on our legitimate business interests. Where we seek your consent, you may withdraw your consent at any time. You can learn more about your choices for limiting interest-based advertising in the "interest-based advertising choices" section below.

3.5 Artificial Intelligence

We may use artificial intelligence (AI) and machine learning technologies to process, analyse, or enhance personal information. For example, AI may be used to provide requested AI-powered features, support customer service functions, develop or improve functionality, personalise your experience, assist with marketing activities, and improve operational efficiency.

When you interact with features or services powered by AI, information you provide may be processed by those systems to provide relevant outputs and support the requested functionality. Our third-party service providers may also use AI technologies in connection with services they provide to us. Unless otherwise stated in a supplemental notice, this processing is handled in accordance with this Privacy Policy, our Terms of Service, our Data Processing Addendum where applicable, and our AI Transparency Policy.

As described in our Terms of Service, Onedash may create aggregated and de-identified versions of Customer Data for use in training datasets ("Training Datasets"). Training Datasets are designed not to identify the customer or contain personal information in identifiable form. Onedash may use Training Datasets for lawful business purposes, including data analysis and the training, fine-tuning, evaluation, development, and improvement of Onedash's AI and machine learning offerings.

Customers may opt out of having their Customer Data used to create future Training Datasets by contacting us at [email protected]. An opt-out applies prospectively and does not require Onedash to remove information that has already been irreversibly de-identified or aggregated, or to reverse completed model training where the relevant information can no longer reasonably be associated with the customer or an individual. Customers that have entered into an applicable Business Associate Agreement with Onedash are automatically excluded from Training Datasets unless otherwise expressly agreed in writing.

Where AI processing is necessary to provide a feature you request, we may process personal information as necessary to perform our contract with you. For other AI-related activities, we may rely on our legitimate interests where permitted by applicable law, including our interests in improving, securing, and developing our Services. Where applicable law requires consent, we will seek that consent and you may withdraw it in accordance with the method provided when consent was obtained.

3.6 Compliance And Protection

We may use personal information to comply with legal obligations or based on our legitimate interests in protecting our or others' rights, privacy, safety, or property (including by making and defending legal claims), including to:

• (a) audit our internal processes for compliance with legal and contractual requirements and internal policies.
• (b) enforce the terms and conditions that govern the Services.
• (c) prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft. For example, we may use third-party fraud prevention and security services that collect and analyze security and fraud signals to generate risk assessments and help us block or challenge suspicious activity.
• (d) comply with applicable laws, lawful requests, and legal processes, such as responding to subpoenas or government authorities' requests.

3.7 With Your Consent

We will use and disclose your personal information in accordance with your prior direction or, in some cases, we may specifically ask you for your consent to collect, use, or share your personal information, such as when required by law.

4. Personal Information Disclosure

In addition to the specific situations discussed elsewhere in this Privacy Policy or at the point of collection, Onedash may disclose your personal information to the following entities or persons:

• (a) service providers, including companies and individuals that provide services on our behalf or help us operate the Services or our business, such as hosting, information technology, email delivery, payment processing, and website analytics services.
• (b) professional advisors, such as lawyers, auditors, bankers, and insurers, when necessary in the course of the professional services they provide to us.
• (c) authorities and others, including law enforcement, government authorities, and private parties, where we believe in good faith that disclosure is necessary or appropriate for compliance, security, or protection purposes.
• (d) business transferees, including acquirers and other relevant participants in business transactions or negotiations involving a divestiture, merger, consolidation, acquisition, reorganisation, sale, or other disposition of all or any portion of the business, assets, or equity interests of Onedash, including in connection with bankruptcy or similar proceedings.
• (e) advertising partners, including third-party advertising companies that we partner with for advertising campaigns or that collect information about your activity on the Services for advertising purposes.
• (f) related companies, including companies that now or in the future control, are controlled by, or are under common control with Onedash, such as affiliates and subsidiaries.
• (g) our customers, where you joined or were added to the Services as an authorised user of your employer or organisation, and we disclose personal information as reasonably necessary to provide and administer the Services for that customer.

5. Privacy Rights And Choices

You can make the following choices regarding your personal information:

5.1 Marketing Communications

You may opt out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive, or by contacting us as instructed in the "How to Contact Us" section below. You may continue to receive Services-related and other non-marketing emails.

5.2 Cookies

Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser's settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Platform and they may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

We also use Google Analytics and other analytics providers to help us analyze how our Platform is being accessed and used. You can review the Google Analytics cookie policy and learn more about how Google protects your data through the Google Analytics data privacy guide. To opt-out of Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.

5.3 Interest-based Advertising

You can limit the use of your information for interest-based advertising by blocking third-party cookies in your browser settings, using browser plug-ins/extensions, or using your mobile device settings to limit the use of the advertising ID associated with your mobile device. You can also opt out of interest-based ads from companies participating in the following industry opt-out programs by visiting the linked websites:

• (a) Network Advertising Initiative, available at https://thenai.org/how-to-opt-out/.
• (b) Digital Advertising Alliance, available at https://optout.aboutads.info.
• (c) European Interactive Digital Advertising Alliance, available to individuals in Europe at http://www.youronlinechoices.eu/.

Some of the companies we work with may offer their own opt-out mechanisms. For example, you can learn more about how Google uses cookies for advertising purposes through the Google Advertising Policies and manage personalised advertising preferences through Google Ads Settings.

Many of the opt-out preferences described in this section must be set on each device or browser for which you want them to apply. Please note that some of the advertising companies we work with may not participate in the opt-out mechanisms described above, so even after opting-out, you may still receive interest-based advertisements from other companies. If you opt out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.

5.4 Do Not Track

Some browsers may be configured to send "Do Not Track" signals to the online services that you visit. The Platform currently does not respond to "Do Not Track" or similar signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

5.5 Your Privacy Rights

Depending on where you live and the nature of your interactions with our Services, you may have the following additional privacy rights in regards to your personal information depending on applicable law in your jurisdiction. Please note, these rights may not apply in your jurisdiction, are not absolute and, in some cases, we may not be able to respond to your request, such as when a legal exemption applies or if we are not able to verify your identity.

• (a) know or obtain information about how we have collected and used your personal information. We have made this information available to you without requiring a separate request by including it in this Privacy Policy.
• (b) access a copy of the personal information we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, and readily usable format.
• (c) correct personal information that is inaccurate, incomplete, or out of date.
• (d) request deletion of personal information that we collected from you and no longer require to provide the Services or for other lawful purposes.

• (e) opt out of the sharing of your personal information for cross-context behavioural advertising purposes or the exchange of your personal information for monetary or other valuable consideration. To exercise this right, you can use the "Do Not Sell or Share My Personal Information" link in the footer of our website. Where required by law, our website may also recognise the Global Privacy Control (GPC) signal.

  If you use a different browser or device, or clear cookies that store your preferences, you may need to select your preferences again or rebroadcast the GPC signal.

To make a privacy rights request, except where otherwise directed, please email us or write to us as instructed in the "How to Contact Us" section below. We may ask for specific information from you to help us confirm your identity. Depending on where you live, you may be entitled to empower an authorized agent to submit requests on your behalf. We will require authorized agents to confirm their identity and authority in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination. We try to respond to all legitimate privacy rights requests within 45 days or such other period as required by applicable law.

In some instances your choices may be limited, such as when fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. If you are dissatisfied with how we address your request, you may submit a complaint by contacting us as instructed in the "How to Contact Us" section below. Depending on where you reside, you may have the right to complain to a data protection regulator where you live or work or where you feel a violation has occurred.

6. Other Sites And Services

Our Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations do not endorse or represent that we are affiliated with any third party. We do not control websites or online services operated by third parties and are not responsible for their actions. This Privacy Policy does not apply to such third-party sites or services. We encourage you to read the privacy policies of the other websites and online services you use.

7. Security

We use reasonable organizational, technical, and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration, and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee the security of personal information.

For more information about our security practices, please see our Security Policy.

8. Children's Privacy

Our Services are not intended for children under 18 years of age. If we learn that we have collected personal information through the Services of a child under 18 without the consent of the child's parent or guardian as required by law, we will delete it.

9. International Data Transfers

Onedash is based in Australia. Personal information may be processed in Australia and may be disclosed to service providers, affiliates, and other recipients located overseas where reasonably necessary to provide, operate, secure, support, or improve our Services.

Where we disclose personal information to an overseas recipient, we take reasonable steps, where required by law, to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information.

Overseas recipients may be located in jurisdictions that have privacy and data protection laws that differ from those in Australia. Where practicable and required by applicable law, we will identify the countries in which overseas recipients are likely to be located in this Privacy Policy, another applicable privacy notice, or at the time the relevant personal information is collected.

Where another applicable privacy law requires additional safeguards for an international transfer, we use an appropriate contractual, organisational, or other lawful transfer mechanism. For further information about how we handle cross-border disclosures and transfers of personal information, please contact us using the details provided in the "How to Contact Us" section of this Privacy Policy.

10. Retention Of Personal Information

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfill the purposes for which it was collected and processed, per our retention policies, and following applicable laws and regulatory obligations or until you withdraw your consent (where applicable).

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information, and whether we can achieve those purposes through other means, as well as the applicable legal and regulatory requirements.

11. Australian Privacy Rights

Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply, you may have rights in relation to the personal information we hold about you. These rights supplement the information provided elsewhere in this Privacy Policy.

• (a) access your personal information and request a copy of personal information that we hold about you, subject to any exceptions permitted by applicable law.
• (b) request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• (c) request that we stop using or disclosing your personal information for direct marketing purposes where applicable.
• (d) make a complaint about how we have handled your personal information or an alleged breach of the Australian Privacy Principles.
• (e) deal with us anonymously or using a pseudonym where it is lawful and practicable for us to allow you to do so.

We take reasonable steps to destroy or de-identify personal information when we no longer need it for a purpose for which it may lawfully be used or disclosed, unless we are required or authorised by law to retain it.

Requests to access or correct your personal information, or complaints regarding our handling of personal information, may be submitted using the details provided in the "How to Contact Us" section of this Privacy Policy.

12. Notice to Individuals in Europe

The information provided in this section applies only to individuals in the European Economic Area, the United Kingdom, and Switzerland (for purposes of this Privacy Policy, collectively, "Europe"). Except as otherwise specified, references to "personal information" in this Privacy Policy are equivalent to "personal data" governed by European data protection legislation.

12.1 Controller

The controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation is Onedash, 5 Beaumont Parade, West Footscray, Victoria 3012, Australia. Where European or United Kingdom data protection law requires us to appoint a local representative, the representative's contact details will be made available in this Privacy Policy or another applicable privacy notice.

12.2 Legal Bases for Processing

The legal basis of our processing of your personal information as described in this Privacy Policy will depend on the type of personal information and the specific context in which we process it. However, the legal bases we typically rely on are described next to each processing purpose in the section titled, "How we use personal information."

We rely on our legitimate interests as our legal basis only where those interests are not overridden by the impact on you (unless we have your consent or our processing is otherwise required or permitted by law). If you have questions about the legal basis of how we process your personal information, contact us using the contact information included in the section titled, "How to Contact Us."

12.3 Use for New Purposes

We may use your personal information for reasons not described in this Privacy Policy where permitted by law and where the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.

12.4 Your Rights

European data protection laws may provide you with certain rights regarding your personal information. You may ask us to take the following actions in relation to your personal information that we hold:

• (a) Access. Request access to personal information that we hold about you, subject to any exceptions permitted by applicable law.
• (b) Correction. Request that we correct personal information that is inaccurate or incomplete.
• (c) Erasure. Request deletion of personal information in circumstances where applicable law gives you that right.
• (d) Restriction. Request that we restrict certain processing of your personal information where applicable.
• (e) Portability. Request a portable copy of personal information that you provided to us where the right to data portability applies.
• (f) Objection. Object to processing based on our legitimate interests in circumstances provided by applicable law, including objecting at any time to processing for direct marketing.
• (g) Withdraw consent. Where we rely on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
• (h) Complaints. Lodge a complaint with an applicable data protection supervisory authority, including an authority in the country where you live or work or where you believe an infringement occurred.

To exercise these rights, please contact us as described in the "How to Contact Us" section of this Privacy Policy. We may request specific information from you to help us confirm your identity. Applicable law may require or permit us to decline your request. If you have unresolved concerns, you may have the right to complain to a data protection authority where you reside, work, or where you believe a violation has occurred.

12.5 Cross-Border Data Transfer

If personal information subject to European, United Kingdom, or Swiss data protection law is transferred internationally and applicable law requires additional safeguards, we will use an appropriate lawful transfer mechanism and any supplementary measures required in the circumstances. Please contact us using the information at the end of this Privacy Policy for further information about applicable transfer safeguards.

13. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Platform, or as otherwise required by law. In all cases, your continued use of the Services following posting or other notification of changes constitutes your acknowledgement of such changes. Please review this Privacy Policy periodically to keep up to date on our most current policies and practices.

14. How to Contact Us

Onedash is responsible for the personal information covered by this Privacy Policy where we act as a controller or otherwise determine the purposes and means of processing. Where we process Customer Data on behalf of a customer, we act as a processor or service provider as applicable, and that processing is governed by our Data Processing Addendum and the customer's instructions.

If you have any questions or comments about this Privacy Policy or our privacy practices, or if you would like to exercise your rights concerning your personal information, please contact us by email or write to us at:

Onedash
[email protected]
5 Beaumont Parade
West Footscray, Victoria 3012
Australia