1. Who we are

Zellio is operated by Zellio Pty Ltd (ABN to be confirmed), a company registered in Victoria, Australia. We operate the Zellio rent rewards platform at zellio.com.au. In this policy "Zellio", "we", "us" and "our" refer to Zellio Pty Ltd.

We take your privacy seriously. This policy explains what personal information we collect, why we collect it, how we use it, and your rights in relation to it.

2. What information we collect

Information you provide directly

• Full name
• Email address
• Rental property address
• Rent payment reference number

Information collected automatically via email forwarding

When you set up email forwarding as instructed during signup, Zellio receives forwarded rent receipt emails from your property manager's software. From these emails we collect:

• Email header data including sender address, timestamp and message identifier
• Your rent payment reference number as it appears in the receipt
• The date and amount of your rent payment

We do not read or store the body content of your emails beyond the specific data fields listed above.

Technical information

• IP address and device type when you access our website
• Browser type and version
• Pages visited and time spent on our website

3. How we use your information

We use your personal information to:

• Create and manage your Zellio account
• Verify your rent payments and credit points to your account
• Process points redemptions and arrange delivery of gift cards via Prezzee
• Send you monthly points balance summaries
• Communicate with you about your account, program changes or technical issues
• Detect and prevent fraud and abuse of the rewards program
• Comply with our legal obligations

4. Who we share your information with

We do not sell your personal information to third parties. We share your information only in the following limited circumstances:

• Prezzee — when you redeem points, we share your first name and email address with Prezzee to issue your gift card. Prezzee's own privacy policy applies to this data.
• Energy and NBN comparison partners — only if you choose to use a switching service through Zellio. We share only the information necessary to initiate your quote or application. We never share your data without your active choice to use the service.
• Service providers — we use third party services including cloud hosting (AWS), email delivery (SendGrid) and authentication (Auth0). These providers process data on our behalf and are bound by confidentiality obligations.
• Legal requirements — we may disclose information if required by law, court order or regulatory authority.

We never share your personal information with your property manager or landlord.

5. Data storage and security

Your data is stored on servers located in Australia operated by Amazon Web Services. We implement industry-standard security measures including:

• Encryption of data in transit using TLS
• Encryption of data at rest
• Access controls limiting who can view your personal information
• Regular security reviews

No system is completely secure. In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

6. How long we keep your information

We retain your personal information for as long as your account is active, plus a reasonable period thereafter for legal and business purposes. Specifically:

• Account data is retained for 7 years after account closure to satisfy Australian tax and record-keeping obligations
• Email receipt data is retained for 24 months to allow dispute resolution
• You may request deletion of your account and personal data at any time by contacting us at hello@zellio.com.au

7. Your rights

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)
• Complain about a breach of the Australian Privacy Principles

To exercise any of these rights, contact us at hello@zellio.com.au. We will respond within 30 days.

8. Cookies

Our website uses essential cookies only — small files stored on your device that are necessary for the website to function. We do not use advertising or tracking cookies. You can disable cookies in your browser settings but this may affect website functionality.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email to your registered address. Continued use of the platform after changes take effect constitutes acceptance.

10. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. We ask that you contact us first at hello@zellio.com.au to give us the opportunity to resolve the issue.

11. Contact

Privacy enquiries: hello@zellio.com.au
Zellio Pty Ltd, Melbourne, Victoria, Australia