Innov8Hub logo
Home Services How It Works About Pricing Client Login Book Free Automation Plan

Privacy Policy

Last updated: 23 June 2026

This Privacy Policy applies to all personal information collected by Innov8Hub ("we", "us" or "our") via the website located at www.innov8hub.io (Website).

1. What information do we collect?

The kind of Personal Information that we collect from you will depend on how you use the Website. The Personal Information which we collect and hold about you may include:

We collect the following personal information from website users: name, email address, phone number, company name, IP address, browser type and version, device information, cookies and tracking data, usage data and analytics, payment information (processed securely through third-party payment processors), project requirements and specifications, communication records and correspondence, account login credentials, and any other information voluntarily provided through contact forms, service requests, or the SaaS client portal.

2. Types of information

The Privacy Act 1988 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.

If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as "Personal Information" and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive Information will be used by us only:

  • for the primary purpose for which it was obtained;
  • for a secondary purpose that is directly related to the primary purpose; and
  • with your consent or where required or authorised by law.

3. How we collect your Personal Information

  • We may collect Personal Information from you whenever you input such information into the Website, related app, or provide it to us in any other way.
  • We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
  • We generally don't collect Sensitive Information, but when we do, we will comply with the preceding paragraph.
  • Before collecting cookies, we will display a consent banner requiring your affirmative opt-in for non-essential cookies (analytics, marketing), while essential cookies (functional) may be used to ensure Website operation. You may withdraw consent or manage cookie preferences at any time via Cookie Settings in the website footer, and we will maintain records of your consent with timestamps for compliance purposes.
  • Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party — in cases like this we will take steps to make you aware of the information that was provided by a third party.

4. Purpose of collection

  • We collect Personal Information to provide you with the best service experience possible on the Website and to keep in touch with you about developments in our business.
  • We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.
  • We require all service providers and third parties who access Personal Information to execute Data Processing Agreements that mandate compliance with the Australian Privacy Principles, implement security measures equivalent to our standards, prohibit secondary use of your information, and establish breach notification obligations with defined timelines without undue delay, and in any event within 24 hours of becoming aware of an actual or suspected breach.
  • By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information directly from you, and if it is material of a type which you would reasonably expect to receive from us. We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe link.

5. Security, access and correction

We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. Most of the Personal Information stored in our client files and records will be kept for a maximum of 7 years to fulfil our record-keeping obligations. When we no longer require your Personal Information for the purpose for which it was obtained, we will take reasonable steps to destroy, anonymise or de-identify it in accordance with Australian Standard AS/NZS 5100 or equivalent data destruction protocols. Where we are required to retain Personal Information to comply with legal or regulatory obligations, we will maintain appropriate security measures until those obligations expire.

Technical and organisational security measures

Our platform implements the following technical and organisational security measures in respect of Personal Information processed through our authenticated application environment:

  • Australian data hosting: all Personal Information is stored on servers located in Sydney, Australia (AWS ap-southeast-2 region) and does not leave Australian jurisdiction in the ordinary course of operations.
  • Encryption in transit: all connections to our platform are encrypted using Transport Layer Security (TLS).
  • Tenant isolation: row-level security controls are applied at the database level to ensure that Personal Information belonging to one client cannot be accessed by another client of Innov8Hub.
  • Role-based access controls: access to sensitive functions, including the creation and deletion of financial records, is restricted to authorised user roles (owner, administrator, or bookkeeper) only.
  • Audit logging: an append-only audit log is maintained to record actions taken within the platform. Audit log entries cannot be deleted by platform users.

These security measures apply to our authenticated application environment. Certain preview or prototype interfaces accessible via our platform may not implement the same technical controls, and we do not represent that all interfaces or features of our Website operate under identical security configurations.

Data export upon termination: upon termination of your service agreement with us, we will make reasonable efforts to provide you with an export of your Personal Information held within our platform within 30 days of the date of termination, upon written request. Following the expiry of that period, we may destroy or de-identify your data in accordance with our data retention practices set out above, subject to any applicable legal obligations.

The Australian Privacy Principles permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12), and allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).

6. Complaint procedure

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us using the details set out in Section 8 below. All complaints will be considered by Benjamin Alibuyog, and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

7. Overseas transfer

Your Personal Information will not be disclosed to recipients outside Australia unless you expressly request us to do so. If you request us to transfer your Personal Information to an overseas recipient, the overseas recipient will not be required to comply with the Australian Privacy Principles, and we will not be liable for any mishandling of your information in such circumstances.

8. How to contact us about privacy

If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through: hello@innov8hub.io.

9. Safeguards for overseas transfers

Where we transfer your Personal Information overseas, we will take reasonable steps to ensure the overseas recipient handles your information in accordance with the Australian Privacy Principles, including through contractual arrangements requiring equivalent data protection standards. You may contact us to request details of the safeguards we have implemented for any specific overseas transfer, and we will provide this information within 3 business days of your request.

10. Complaint handling timeframes and procedures

We will acknowledge all complaints within 1 business day of receipt and complete our investigation within 5 days. You will receive a written response detailing our findings, any remedial actions taken, and your right to escalate the matter to the Office of the Australian Information Commissioner if you remain dissatisfied. All complaints and resolutions will be documented for audit purposes, and we will implement interim remedies where appropriate during the investigation period.

Innov8Hub logo

Making business automation practical, accessible, and simple for small service businesses in Australia.

Solutions

  • Business Automation
  • Strategy & Consulting
  • How It Works

Company

  • About Us
  • Pricing
  • Contact

Legal

  • Privacy Policy
  • Terms & Conditions
  • Cookie Settings

© 2026 Innov8Hub. All rights reserved.  ·  Privacy  ·  Terms