Privacy Policy

1. Who this policy covers

This policy applies to two groups:

• Brokers — businesses and their staff who subscribe to Apprailo.
• Applicants — people who complete a finance application through a broker's Apprailo link.

For applicant information, the broker is responsible for how they use it in arranging finance. Apprailo acts as their service provider and handles that information on the broker's behalf. Applicants should also read their broker's privacy policy and Credit Guide.

2. Information we collect

• Brokers: name, email, phone, business name, ABN/ACN, ACL/CRN, logo, and billing details (card payments are processed by Stripe — we never store full card numbers).
• Applicants: identity and contact details, address and employment history, income, expenses, assets and liabilities, the finance and asset requested, and uploaded documents such as driver licences, payslips, bank statements and tax documents.
• Usage data: device and browser details, IP address, and activity logs used for security and auditing.

Applicants should black out their Tax File Number (TFN) before uploading documents. We do not ask for or intend to collect TFNs.

3. How we use information

• To provide the service: delivering applications to the broker, sending document requests and reminders, and saving progress.
• To secure accounts, prevent fraud, and keep an audit trail of views and edits.
• To bill subscriptions and provide support.
• To improve the product using aggregated, de-identified data.

We do not sell personal information, and we do not use applicant information for our own marketing.

4. Disclosure

Applicant information is shared only with the broker the applicant applied through. That broker may then disclose it to lenders and credit providers to arrange finance, under their own obligations. We also use trusted providers to run the service, including cloud hosting and storage, email delivery, address lookup and payment processing (Stripe). Some of these providers may store or process data outside Australia; we take reasonable steps to ensure they protect it to a standard consistent with the APPs. We may disclose information where required by law.

5. Storage and security

Data is encrypted in transit, each brokerage's data is kept separate, and documents are stored privately and accessed only through short-lived secure links. Access is limited to authorised broker staff. No system is perfectly secure, but we act promptly on suspected incidents and will notify affected people and the OAIC where required under the Notifiable Data Breaches scheme.

6. Retention

We keep information while a broker's account is active and as needed to meet legal obligations. Brokers can request deletion of applicant records, and we delete or de-identify data when it's no longer needed.

7. Access, correction and complaints

You can ask to access or correct your personal information, or make a privacy complaint, by emailing apprailoofficial@gmail.com. Applicants may be referred to their broker for information the broker controls. We aim to respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

8. Cookies and advertising

We use essential cookies and local storage to keep you signed in and save application progress.

On our marketing and broker sign-up pages only, we use the Meta (Facebook) Pixel to measure visits and broker trial sign-ups from our ads and to help Meta show our ads to similar businesses. Meta receives your browser and device details, page visits and a sign-up event; we don't send names, emails or any client application information. The Pixel never runs on client application or document upload pages. Visitors in the EU, UK and Switzerland are asked first. You can accept, reject or withdraw anytime using Cookie settings; a withdrawal takes effect immediately.

9. Changes

We may update this policy and will post the new version here with a revised date.