What the beta stores. Account and committee-access records; strata-roll and contact details; levies, income, expenses, adjustments, budgets and financial statements; bank accounts, uploaded statements and reconciliation records; meetings, compliance and planned-work records; uploaded source documents and generated-document evidence; records requests and access events; account-security events; support requests; and limited subscription, invoice, checkout and payout evidence when billing is enabled.

Why it is stored. To provide authentication, scheme administration, financial and records workflows, document generation and delivery, support, security, recovery, auditing and subscription operations. StrataTally does not sell scheme records or use advertising pixels.

Information about other people. Authorised committee users may enter owner, agent, supplier, requester and recipient details. The committee is responsible for having authority to provide that information and for limiting uploads and messages to what the scheme needs.

Service providers and location. The planned service uses hosting and storage infrastructure, Resend for transactional email and Stripe for provider-hosted billing when enabled. Provider access, subprocessors, contract terms, retention and overseas handling remain subject to the pre-launch privacy and vendor review.

Money. We never hold, touch, or move your scheme's funds. Levies are paid directly into your owners corporation's own bank account. We only record what you tell us or what you import from your own bank statements.

Access, correction, retention and deletion. Authorised office bearers can export the scheme archive. Requests can be sent to hello@stratatally.com.au. Deletion is not unconditional: financial, scheme, security, delivery, billing and backup records may need to be retained or handled under an approved disposal process. The final policy must explain applicable periods and limitations after qualified review.

Security and incidents. Access controls, MFA, retained audit events, integrity fingerprints and backup checks reduce risk but do not guarantee security. Report suspected unauthorised access to hello@stratatally.com.au. Production incident contacts and notification procedures must be approved before launch.

Cookies. StrataTally uses a first-party session cookie for authentication. Any future analytics or additional cookie use requires this notice to be updated first.