Privacy Policy

1. What Personal Information We Collect

1.1 Information You Provide

When you create an account and use OweMe, we collect:

• Full name
• Email address
• Password (stored in encrypted form — we never store plaintext passwords)
• State of residence (e.g. NSW, VIC, QLD)
• Banking relationships (banks you have or have had accounts with)
• Service subscriptions (streaming, insurance, telco services you use or have used)
• Vehicle ownership history (where relevant to specific settlements)
• Subscription plan (payment card details are handled entirely by Paddle — we never store them)

1.2 Information Collected Automatically

When you use OweMe, we may automatically collect device type, browser type, IP address, pages visited, and date/time of access. This is used to improve platform performance and diagnose technical issues.

1.3 Information from Third Parties

If you sign in using Google OAuth, we receive your name and email address from Google's authentication service. We do not receive or store your Google password.

2. How We Use Your Personal Information

We use your personal information to:

• Create and manage your OweMe account
• Match you to Australian class action settlements based on your profile
• Personalise the settlement results displayed to you
• Process and manage your subscription payments
• Send you notifications about new settlements and upcoming deadlines (where you have consented)
• Respond to your enquiries and provide customer support
• Improve and develop the OweMe platform
• Comply with our legal obligations under Australian law
• Detect and prevent fraud or misuse of the platform

3. Legal Basis for Processing

• Performance of contract — to provide the services you have subscribed to
• Legitimate interests — to improve our platform and prevent fraud
• Consent — for marketing communications and optional notifications
• Legal obligation — to comply with Australian law

4. How We Store Your Personal Information

4.1 Storage

Your personal information is stored on Supabase, a cloud database service with SOC 2 Type II compliance. Data may be stored on servers in Australia, the United States, or other countries.

4.2 Security Measures

• All data transmitted is encrypted using TLS (HTTPS)
• Passwords are hashed using industry-standard cryptographic methods
• Database access is restricted using role-based access controls
• Payment card information is never stored by OweMe

4.3 Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where required by law (up to 7 years for financial records).

5. Disclosure of Your Personal Information

5.1 Service Providers

We share your personal information only with trusted service providers who help us operate the platform:

5.2 Settlement Administrators

OweMe does not share your personal information with settlement administrators. When you click "Register" on a settlement, you are directed to the administrator's website where you provide information directly to them under their own privacy policy.

5.3 Legal Requirements

We may disclose your personal information if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of OweMe, our users, or the public.

6. Cookies and Tracking

OweMe uses local browser storage (not traditional cookies) to remember your session, subscription status, and dismissed notifications. This data is stored on your device only and is not transmitted to third parties.

We do not currently use advertising trackers or third-party analytics that track you across other websites.

7. Your Rights Under Australian Privacy Law

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of your personal information
• Withdraw consent to marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Marketing Communications

With your consent, we may notify you about new settlements, upcoming deadlines, and platform updates. You can opt out at any time by updating your notification preferences in Account settings or contacting [email protected].

9. Children's Privacy

OweMe is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us immediately at [email protected].

10. Cross-Border Data Transfers

Your personal information may be transferred to and stored in countries outside Australia, including the United States, where our service providers operate. We take reasonable steps to ensure that overseas recipients maintain privacy standards comparable to the Australian Privacy Principles.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on the platform. The updated Policy will take effect 14 days after notification.

12. Complaints

If you have a complaint about how we have handled your personal information, contact us first at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the OAIC:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

13. Contact Us

• Email: [email prot