Effective Date: 1 April 2025 · Last Updated: April 2025
KeyOS is a managed credential SaaS platform operated by KeyOS Access Control Pty Ltd (ABN 74 696 274 138) (“we”, “us”, “our”). KeyOS provides access credential management services including fobs, remote controls, and access cards for strata and apartment buildings across Australia.
We are committed to protecting the privacy of all individuals who interact with our platform, including building managers, tenants, and authorised users. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using the KeyOS platform or our services, you agree to the collection and use of your information as described in this policy.
We collect personal information that is reasonably necessary to provide our services.
We may also receive information from third-party services integrated with KeyOS, including Stripe, Shippit, and Google via Google Sign-In.
KeyOS manages physical access credentials linked to real properties and individuals. Credential serial numbers such as fob, remote, and card IDs are stored against named individuals at specific residential addresses. This data is operationally sensitive and is treated with the highest level of care within our platform.
Access credential data is only accessible by:
We do not share access credential data with any third party unless required to fulfil your service request or as required by law.
Building managers using the KeyOS platform have full visibility of tenant personal details including name, email address, phone number, unit details, and assigned credentials for buildings under their management. This access is necessary for the delivery of our core service. By adding tenant information to the platform, building managers represent that they have a lawful basis for doing so and have obtained any necessary consents from tenants in accordance with applicable privacy laws. KeyOS acts as a data processor on behalf of building managers in relation to tenant data.
We use the personal information we collect to:
We only send transactional emails directly related to your account or orders. We do not send marketing or promotional emails without your explicit consent.
We may disclose your personal information to the following third-party service providers:
All third-party providers are engaged under contractual obligations to handle personal information securely and in accordance with applicable privacy laws. We do not sell, rent, or trade your personal information to any third party for marketing purposes.
Some of our third-party service providers store and process data on servers located outside Australia, primarily in the United States. These providers include Supabase, Vercel, Stripe, HubSpot, and Resend. By using our services, you acknowledge that your personal information may be transferred to, stored, or processed in countries outside Australia. We take reasonable steps to ensure that overseas recipients handle your personal information consistently with the Australian Privacy Principles.
We implement the following measures to protect your personal information:
In the event of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
When personal information is no longer required, we will delete or de-identify it securely.
You have the right to:
To exercise any of these rights, contact us at support@keyos.com.au. We will respond within 30 days.
KeyOS is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact us at support@keyos.com.au and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will notify users via email or a prominent notice on the platform and update the Last Updated date above. Your continued use of KeyOS after any changes constitutes acceptance of the updated policy.
If you have a complaint about how we have handled your personal information, please contact us first:
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner at www.oaic.gov.au or by calling 1300 363 992.