Privacy Policy

We collect information you provide directly to us and information generated through your use of the Service:

We use the information we collect to:

• Provide, operate, and improve the Service.
• Process shipments and communicate tracking updates to you and your customers.
• Send transactional emails, invoices, and account notifications.
• Respond to your support requests and troubleshoot issues.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Analyse usage patterns to improve product features (using aggregated, de-identified data).

We do not sell your personal information. We may share your information with:

• Carriers and logistics partners — to fulfil shipments on your behalf (e.g., Australia Post, StarTrack, DHL).
• E-commerce platform integrations — to sync orders from your connected stores (e.g., Shopify, WooCommerce).
• Payment processors — Stripe processes billing information under their own privacy policy.
• Infrastructure providers — Supabase (database), Vercel (hosting), and Resend (email) process data on our behalf under data processing agreements.
• Legal authorities — when required by law, court order, or to protect our rights.

Your data is stored on servers located in Australia and the United States. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Role-based access controls limiting who can access your data.
• Regular security audits and penetration testing.
• Multi-factor authentication for internal systems.

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained for the duration of your subscription plus 30 days after cancellation.
• Shipment records are retained for 7 years to comply with Australian tax and business record requirements.
• Usage logs are retained for 90 days.
• You may request deletion of your personal data at any time (subject to legal retention requirements).

Under the Australian Privacy Act and applicable laws, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — request deletion of your personal information (subject to legal obligations).
• Portability — request your data in a machine-readable format.
• Opt-out — unsubscribe from marketing communications at any time.

To exercise these rights, contact us at privacy@multicartpro.com.au. We will respond within 30 days.

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse Service usage. You can control cookie settings through your browser, though disabling certain cookies may affect Service functionality.

We use analytics tools to understand how users interact with the Service. This data is aggregated and does not identify individual users.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

Some of our service providers are located outside Australia. When we transfer your data internationally, we ensure appropriate safeguards are in place, including contractual protections consistent with the Australian Privacy Principles.

We may update this Privacy Policy periodically. We will notify you of material changes by email or through a prominent notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have a complaint about how we handle your personal information, please contact us first at privacy@multicartpro.com.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

For privacy-related enquiries: