Privacy Policy

1. Information We Collect

We collect personal information that you provide directly to us, including:

• Account information: your name, email address, and password (or Google account details for OAuth sign-in).
• Business information: brokerage name, broker contact details, and information about business listings you enter into the platform to generate Information Memorandums.
• Billing information: payment details are processed by Stripe and are not stored on our servers. We retain transaction records (amount, date, subscription status) for accounting purposes.
• Usage data: pages visited, features used, and actions taken within the platform to improve our service.
• Communications: any support requests or other correspondence you send to us.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the MemorandumMaker platform.
• Process payments and manage your subscription.
• Send transactional emails (account confirmation, password reset, payment receipts).
• Generate Information Memorandums using the business information you supply — this content is processed by our AI provider (Anthropic) solely to generate your document.
• Respond to your support requests and enquiries.
• Monitor platform usage to detect fraud, security incidents, and abuse.
• Comply with our legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Third-Party Service Providers

We share your information only with service providers necessary to operate the platform:

• Supabase — database and authentication hosting. Your data is stored in Supabase's managed infrastructure.
• Anthropic (Claude AI) — AI content generation. Business information you enter is sent to Anthropic's API to generate IM sections. Anthropic's data handling is governed by its own privacy policy and enterprise terms.
• Stripe — payment processing. Stripe collects and stores your payment card details under its own PCI-DSS compliant privacy policy.
• Vercel — application hosting and content delivery.
• Google — if you choose to sign in with Google, Google shares your name and email with us under its OAuth terms.

All providers are required to handle your information in accordance with applicable privacy laws. Some providers may store data outside Australia; where this occurs, we take reasonable steps to ensure appropriate protections are in place.

4. Document Content

The Information Memorandum content you create — business descriptions, financial data, asking prices, and other listing details — is your content. We store it to provide the service and do not use it for any purpose other than generating your documents. We do not review, share, or monetise the content of your IMs. You are responsible for ensuring that any personal information included in your IMs (such as seller contact details) is handled lawfully and with appropriate consent from the individuals concerned.

5. Data Retention

We retain your account and document data for as long as your account is active, plus a reasonable period thereafter to comply with legal obligations (generally 7 years for financial records under Australian taxation law). You may request deletion of your account and associated data at any time by contacting us at privacy@memorandummaker.com.au.

6. Security

We implement industry-standard security measures including TLS encryption in transit, row-level security in our database, and access controls limiting who can view your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Cookies

We use essential cookies and local storage to maintain your session and authentication state. We do not use advertising or cross-site tracking cookies. Basic analytics may be collected via Vercel's edge network to measure aggregate traffic.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your personal information (subject to legal retention obligations).
• Complain about how we handle your personal information.

To exercise any of these rights, email us at privacy@memorandummaker.com.au. We will respond within 30 days.

9. Complaints

If you are unsatisfied with how we have handled your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the platform. Continued use of MemorandumMaker after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or requests, please contact: