Effective July 2026
The short version: StrataLink is run by body corporate committees to keep lot owners informed, so it needs an account. That means we do collect and store some personal information — your name, email and lot number, and the building information your committee shares. We keep it in Australia, we don't sell it, and we use no advertising or third-party tracking.
StrataLink is operated by Butterfly Bombarby ("we", "us"). This policy explains what personal information we collect through the StrataLink app and website, how we use it, and your rights under the Australian Privacy Principles (Privacy Act 1988 (Cth)).
We do not collect your location, your contacts, or advertising identifiers.
We use it to run the app: to create and secure your account, to show your building's information to the right people, and to provide support. Sign-in records help us protect accounts against unauthorised access. We never use your information for advertising or profiling.
Your account and building information is stored in Australia, in the Sydney region of our database provider (Supabase). It stays within Australia.
Access is scoped to your building. Technical controls in our database (row-level security) mean the members of one building cannot see another building's information. Within your building, committee members and building admins can see committee content; other notices are visible only to the members they are addressed to. Our operators access your information only to run and support the service.
We do not sell your personal information, and we use no advertising or third-party analytics and tracking SDKs. We rely on a small number of infrastructure providers to run StrataLink — principally Supabase (database, authentication and storage, in Australia) and Vercel (which serves the app). These providers process information only to deliver the service and are bound to protect it.
StrataLink is free to download and use. Where a body corporate takes out a paid subscription, that payment is handled by our third-party payment provider — we do not receive or store your card details.
We keep your personal information only for as long as your account is active and your building uses StrataLink, and as otherwise required by law. You can ask us to delete your account and associated personal information at any time by contacting us, and we will action deletion within a reasonable time. (An in-app "delete my account" option is being added as StrataLink comes to the app stores.)
Under the Australian Privacy Principles you can ask to access the personal information we hold about you and ask us to correct it. If you have a concern about how we have handled your information, please contact us first. You can also raise it with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
StrataLink is intended for adults involved in a body corporate community. It is not directed at children.
Information is encrypted in transit, passwords are stored hashed, and access is restricted by role and by building. No system is perfectly secure, but we take reasonable steps to protect your information.
If this policy changes, the update will be posted at this address. Questions, or want your information deleted? Contact us.