Privacy Policy
Effective Date: 1 January 2026 | Last Updated: 25 October 2026
1. Commitment to Privacy
SelfStrata ("we", "our", or "us") is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how personal information is collected, held, used, and disclosed when committees, lot owners, and authorized representatives use the SelfStrata software platform.
2. Our Role: Platform & Data Processor
SelfStrata is a purpose-built software platform that enables self-managed strata committees and Owners Corporations to administer their own schemes. In this context:
- The Owners Corporation is the statutory custodian and controller of its Strata Roll and scheme records under the Strata Schemes Management Act 2015 (NSW).
- SelfStrata operates as a data processor, providing encrypted infrastructure and workflow tools that enable the committee to fulfill its statutory duties.
3. Information We Collect
To enable scheme administration, the platform collects and processes:
Strata Roll Records (s 178 SSMA 2015)
Lot owner names, service addresses, email addresses, phone numbers, corporate nominee details (s 154), and unit entitlements, together with tenancy notice details (s 258) and appointed property manager contacts where applicable.
Financial, Settlement & Accounting Records
Levy notices, Owner-Portfolio PayID reconciliation metadata, supplier invoices, dual-officer signed BECS Direct Debit Request (DDR) mandates, and read-only Consumer Data Right (CDR) Open Banking statement feeds. Online banking passwords are never collected or stored.
Governance & Meeting Records
Meeting notices, agendas, minutes, voting registers, proxy instruments, statutory resolutions, and proof-of-service logs required under Section 256 of the SSMA 2015.
4. How We Use Information
Information is processed strictly for legitimate strata administrative purposes:
- Issuing levy notices, reconciling PayID and BECS settlements, and maintaining double-entry trust ledgers.
- Delivering statutory meeting notices, agendas, and minutes via electronic or physical postal service.
- Maintaining the statutory Strata Roll and generating Section 184 Strata Information Certificates.
- Preserving an append-only audit trail for statutory inspection and independent auditing.
We never sell, rent, or monetize personal information, and external MCP integrations enforce a strict Zero-PII boundary.
5. Australian Data Sovereignty & Non-Custodial Settlement
All primary customer databases and statutory document vaults are hosted in Sydney, NSW, Australia and protected with:
- Encryption: AES-256 encryption at rest and TLS 1.3 encryption in transit.
- Multi-Tenant Isolation: Strict
scheme_idscoping and PostgreSQL Row-Level Security (RLS) preventing cross-scheme data access, alongside Lot Owner vs. Strata Committee visibility boundaries. - Non-Custodial Zero-Float Settlement: Inbound levy receipts settle via licensed payment rails (Monoova, AFSL #421414) with 100% immediate sweep to the Owners Corporation's nominated ADI bank account ($0.00 overnight stored float).
6. Statutory Retention & Tombstoning (SSMA 2015 s 180)
Under Section 180 of the Strata Schemes Management Act 2015 (NSW), Owners Corporations must retain accounting records, minutes, correspondence, and Strata Roll entries for a minimum statutory period of 7 years.
Where an outgoing owner departs a scheme, active portal access and PayID aliases are deactivated upon settlement while historical ownership and ledger entries are preserved in read-only archival state for the statutory retention period.
7. Access, Correction & Inquiries
Under the Australian Privacy Principles, individuals may request access to or correction of their personal information via their elected Strata Committee or by contacting our Privacy Officer.
Privacy Officer Contact
Email: privacy@selfstrata.au
Address: SelfStrata Infrastructure, Level 12, 100 Mount Street, North Sydney NSW 2060, Australia