Privacy Policy

Version 2026-07-18

This Privacy Policy explains how [LEGAL ENTITY NAME — e.g. 'My New Details Pty Ltd' or sole trader name] (ABN [ABN]) ("we", "us") collects, uses, stores and discloses personal information in connection with My New Details, and how long we keep it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). [LAWYER: confirm whether the small business exemption applies and whether this policy should nonetheless commit to APP compliance.]

1. What we collect

• Account details: your name, email address, date of birth (to confirm you are 18 or over), password (stored only as a salted cryptographic hash — we cannot read it) and, optionally, your mobile number. If you enable two-factor authentication, the authenticator secret is stored encrypted.
• Payment information: top-up amounts, currency and payment-provider references. Card numbers are collected and held by our payment providers, not by us.
• Usage information: the details you rent, the websites you nominate them for (including attempts to select prohibited websites), your wallet transactions, messages received by your rented details, and — if you were referred by another customer — who referred you.
• API keys, if you create any: stored only as cryptographic hashes.
• Technical information: IP addresses (at registration, sign-in and rental), and first-party analytics about pages visited on our own site, including a coarse device type (mobile/desktop) derived from your browser — the browser identifier itself is never stored. We do not use third-party analytics or advertising trackers.

2. How we use it

• To provide the Service: deliver rentals, show received messages, maintain your wallet, and guarantee details are never reused for the same website.
• To keep the Service safe: fraud and abuse prevention, enforcing our Acceptable Use Policy, rate limiting, and investigating payment reversals.
• To meet legal obligations: financial record-keeping, and responding to lawful requests from law enforcement and regulators.
• To communicate with you about your account: verification codes, password resets, top-up receipts, monthly-plan renewal reminders, and — only if you opt in — a notification when your private number receives a text (the notification never includes the message content). We do not sell personal information, and we do not send marketing without consent.

3. Who we disclose it to

We disclose personal information only to the service providers we use to run the Service, and where the law requires or permits it:

• Stripe and Airwallex (payment processing) — United States / global;
• Mailgun (sending and receiving email) — United States / European Union;
• Plivo and Twilio (phone numbers and SMS) — United States;
• Render (cloud hosting; our servers and database) — hosted in Singapore;
• Cloudflare (network security) — global network;
• Sentry (error monitoring; configured not to receive emails or IPs) — United States.

Some of these providers store information outside Australia, in the locations noted above. We take reasonable steps to ensure overseas providers handle personal information consistently with the APPs. We may also disclose information to law enforcement, regulators or affected third parties where required or authorised by law, including investigating misuse of the Service.

4. How long we keep it (retention)

• Messages received by rented details: deleted 12 months after receipt. You can also permanently delete any message (or all messages on a rental) yourself, immediately, from your dashboard. When you delete a message we destroy its content at once; we keep only a small delivery record (that a message arrived, its sender, and when it was received and deleted) for dispute resolution and abuse prevention, and the sender is removed on the same 12-month clock.
• Rented details themselves (the address/number, the website nominated, and the fact of the allocation): kept indefinitely, because the permanent ledger is what guarantees a detail is never reused for the same website and supports fraud investigation.
• Site-selection and abuse logs (including blocked attempts): kept for the life of the account plus [PERIOD — suggest 2 years] after closure.
• Wallet and payment transaction records: kept at least 7 years, as required for Australian tax and financial record-keeping.
• IP addresses (registration, sign-in, rental): kept with the associated account records.
• First-party page-view analytics: deleted after 12 months.
• Email verification codes and password reset tokens: stored only as hashes and expire within minutes; consumed records are retained briefly for security auditing.
• Unverified accounts that are never used are deleted automatically after 30 days (a warning email is sent first).
• When you delete your account from account settings, your stored messages are destroyed and your personal details de-identified immediately. We keep what the purposes above require: the payment ledger, the allocation ledger (which contains rented addresses and nominated websites, not message content), and abuse-prevention records.

5. Security

Passwords are hashed with bcrypt; verification codes and reset tokens are stored only as hashes; connections use HTTPS; payment card data never touches our servers; and administrative access to customer data is restricted and logged. No system is perfectly secure, but if we become aware of a data breach likely to result in serious harm we will notify affected users and the OAIC as required by the Notifiable Data Breaches scheme.

6. Cookies

We use only essential first-party cookies: a session cookie that keeps you signed in, an anonymous visitor identifier used for our own traffic statistics, and — if you arrive through a referral link — a 30-day cookie recording the referral code. We do not use advertising or cross-site tracking cookies.

7. Access, correction and complaints

• You can access and update your account details from your dashboard, or ask us for a copy of the personal information we hold about you.
• You can ask us to correct inaccurate information, or to close your account and delete information we are not required to keep.
• Complaints: contact support@mynewdetails.com.au first and we will respond within a reasonable time. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

8. Changes to this policy

If we make a material change to this policy, you will be asked to review and accept the updated version before continuing to use the Service.

9. Contact

[LEGAL ENTITY NAME — e.g. 'My New Details Pty Ltd' or sole trader name] (ABN [ABN]) Email: support@mynewdetails.com.au

Terms of Service · Acceptable Use Policy · ← Home