Privacy Policy

What we collect

• Account details. Your name, email address and password when you sign up with email. We store the password as a one-way hash, never in plain text.
• Google sign-in. If you continue with Google, Google shares your name, email address, profile picture and Google account ID with us. We request only the basic openid, email and profile scopes. We don't get your Google password and can't see your Gmail, Drive, contacts or any other Google data.
• Payments. Payments are handled by Stripe. We receive the plan you bought, the amount, your billing email and Stripe's customer and payment IDs. Your card details go to Stripe and never reach our servers.
• Your business and listings. The websites you add, the listing details you review or edit, and information we read from the public pages of your site: business name, descriptions, logos, ABN and ACN, phone numbers, email and street addresses, licence numbers, opening hours and social links. For a sole trader some of these are personal information.
• Australian Business Register. We look up the ABN you give us on ABN Lookup to confirm it's active and to read the registered entity name, entity type, GST registration and business location.
• Directory accounts. For each directory we create an email alias, a username and a password so the listing is yours. Passwords are encrypted at rest. Emails directories send to those aliases (such as confirmations and approvals) are received and read to update your listing's status.
• Session and security data. When you log in we record your IP address and browser user agent against the session, to keep you signed in and to spot misuse.

How we use it

• To create and secure your account and keep you logged in.
• To list your business on directories, keep those listings up to date, and show you their status and logins.
• To take payment, manage subscriptions and handle refunds.
• To contact you about your account, orders and listings.
• To prevent fraud and abuse and to meet legal obligations.

We don't sell your personal information, and we don't use it for advertising.

Information from Google

We use the name, email address and profile picture from Google only to create your Dirz account, sign you in and identify you in your dashboard. If a Dirz account already uses the same email, the two are linked so you can log in either way. We don't share Google user data with anyone except as needed to run the service described here, and we don't use it for advertising or to train AI models.

Dirz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Dirz's access at any time from your Google account settings. That stops future Google sign-ins; to delete the data we already hold, see "Your choices" below.

Who we share it with

• Directories. Listing your business means sending your listing details (including the ABN, phone, address and licences you approved), the directory account's email alias and username, and any contact details you chose to include. Once published, those listings are public and governed by each directory's own terms and privacy policy.
• Service providers who process data for us: Stripe (payments), Google (sign-in), our hosting and database providers, the AI model and browser providers our agents run on, and, when a directory blocks automated access, captcha-solving and proxy services. They only get what they need for that task.
• When required. If the law requires it, to protect our rights or users, or as part of a sale or merger of the business (in which case this policy continues to apply).

Some of these providers are outside Australia (for example in the United States), so your information may be processed overseas. We take reasonable steps so they handle it consistently with the Australian Privacy Principles.

Cookies

We use only the cookies needed to keep you signed in and to secure sign-in. We don't use analytics or advertising cookies.

How long we keep it

We keep your account, sites and listing logins while your account is open, so you can always get to them. When you delete your account we remove this data within 30 days, except payment records we have to keep for tax and accounting, and backups that are overwritten on their normal cycle.

Your choices

You can see and edit your listing details in your dashboard and download your logins as CSV at any time. To get a copy of your data, correct it, or delete your account, email [email protected]. We reply within 30 days. Deleting your Dirz account doesn't delete listings already published on directories; you keep their logins so you can remove or manage them yourself.

If you think we've mishandled your personal information, email us first and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Traffic is encrypted in transit, account passwords are hashed, and directory passwords are encrypted at rest. No system is perfectly secure, so use a strong, unique password for your Dirz account.

Children

Dirz is for businesses and is not meant for anyone under 18. We don't knowingly collect data from children.

Changes

If we change this policy we'll update the date at the top, and tell you by email or in the app before a significant change takes effect.

Contact

Questions or requests: [email protected].