Privacy Policy

Whypred Pty Ltd(ABN 93 674 284 327) (“we”, “us”) operates Concave Intel at www.concaveintel.com. This policy explains what personal information we collect, how we use it, and your rights, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Information we collect

• Account details — your name and email address when you sign up, and your plan and billing status.
• Usage data — pages viewed, searches and lookups run, API calls (endpoint, row counts, timestamps, key identifier), and technical data such as IP address and browser type, used for security, rate limiting and service improvement.
• Uploads — business names, ABNs and lists you submit for matching or enrichment, processed only to return results to you.
• Payment information — handled by our payment provider, Stripe. We do not store your card details; we receive a customer reference and subscription status.
• Correspondence — messages you send us at info@whypred.com.

2. Business register data

The business records in the Service come from the Australian Business Register bulk extract published by the Commonwealth of Australia under CC-BY 3.0 AU. It is public data. Where a registered entity is an individual or sole trader, we do not run website discovery, enrichment or any other search on their name to build a profile; industry labels for those records are not produced. If you believe a record about you should be corrected, the primary source is the ABR; you can also contact us.

3. How we use information

• to provide, secure and support the Service and your account;
• to meter usage against your plan and process billing;
• to detect abuse, enforce our Terms and comply with law;
• to improve the Service, including aggregate, de-identified analytics;
• to send service messages (for example, password resets or billing notices). We do not send marketing email without consent, and you can opt out at any time.

4. Who we share it with

We share personal information only with providers who help us run the Service, under contract and only as needed:

• Vercel — hosting and application delivery;
• Neon — authentication and account database;
• Supabase — business data database;
• Stripe — payments and subscriptions;
• MotherDuck and Amazon Web Services — data processing and storage for the register pipeline.

Some of these providers store data outside Australia (including the United States). We take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles. We do not sell personal information. We may disclose information where required by law or to protect our rights or safety.

5. Cookies

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising cookies.

6. Security and retention

Data is encrypted in transit; passwords are stored only as salted hashes; API keys are stored hashed. We keep account and billing records while your account is active and for as long as needed to meet legal, tax and audit obligations; usage logs are retained for a limited period for security and metering. Uploaded lists are processed to return results and are not retained beyond what is needed to deliver them and your export history.

7. Your rights

You may request access to, or correction of, the personal information we hold about you, or ask us to delete your account, by emailing info@whypred.com. We will respond within a reasonable time. If you are unhappy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

8. Changes

We may update this policy; the date above will change and material changes will be notified via the Service or by email.

9. Contact

Whypred Pty Ltd (ABN 93 674 284 327) · info@whypred.com