Privacy Policy

Linkro Pty Ltd (ACN 687 898 488, ABN 81 687 898 488), Level 5, 11 Finchley Street, Milton, QLD 4064, Australia, operates the Linkro Platform and the website at linkro.com.au. In this policy, "we", "us" and "our" mean Linkro. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including the Notifiable Data Breaches scheme. For privacy questions, contact privacy@linkro.com.au.

Information you give us. When you contact us or request a demonstration, we collect your name, work email address, contact number, location, industry and anything you choose to write in your message.

Account and usage information. If you use the Linkro Platform, we collect account details, authentication events, activity and audit logs, and records of documents accessed within a data room.

Customer content. Documents and data uploaded to a data room belong to the customer. We process that content on the customer's instructions and do not use it for our own purposes.

Technical information. Device type, browser, approximate location derived from IP address, and pages visited, used to keep the service secure and reliable.

We use personal information to:

• respond to enquiries and arrange product walkthroughs;
• provide, secure, support and improve the Linkro Platform;
• maintain audit trails and detect misuse or unauthorised access;
• send service communications and, where permitted, relevant product updates;
• meet legal, regulatory and contractual obligations.

Linkro AI features operate on customer content within the boundaries of a customer's data room. AI processing is carried out in Australia using a licensed third-party model (Azure OpenAI, Australia East). The model provider does not use customer content to train or improve its models, results are segregated per customer with no cross-customer aggregation, and the provider may retain only a limited, short-term sample in the same region for abuse monitoring. Linkro does not read or inspect the content of customer documents in providing the AI features.

AI features are assistive and outputs should be reviewed by appropriately qualified people before being relied upon. Concerns about how an AI feature behaves can be raised at ethics@linkro.com.au.

Linkro needs the contact information you provide to us to contact you about our services. You may unsubscribe from these communications at any time by using the unsubscribe link in any message we send, or by emailing privacy@linkro.com.au. We will continue to send essential service messages relating to any account you hold.

We do not sell personal information. We share it only with service providers who help us run the platform, with your organisation's administrators where you use Linkro through an employer, and where required by law. Each provider is bound by contractual confidentiality and security obligations, and we remain responsible for the processing they carry out for us.

The sub-processors that handle customer content are:

• Microsoft Azure (Australia East) - cloud hosting, compute and storage;
• Azure OpenAI (Australia East) - AI processing for the AI features.

We maintain a sub-processor register and give customers reasonable notice before adding a new sub-processor that handles customer content.

We operate an information security management system aligned to ISO/IEC 27001 and an AI management system aligned to ISO/IEC 42001. Measures include encryption at rest (AES-256) and in transit (TLS), identity and access management with multi-factor authentication, least-privilege and just-in-time privileged access, per-customer segregation, security logging and monitoring, vulnerability management and testing, personnel screening and training, and a documented incident-response process.

Suspected vulnerabilities can be reported to security@linkro.com.au. No system is perfectly secure, but we treat every report seriously and without reprisal.

If we become aware of a data breach affecting personal information or customer content that is likely to result in serious harm, we will notify the affected customer without undue delay and cooperate with them in accordance with the Notifiable Data Breaches scheme.

We keep personal information only as long as needed for the purposes described here, or as required by law. Enquiry records are retained while a commercial conversation is active and for a reasonable period afterwards.

Customer content is retained for the subscription term. When a data room is closed, or a subscription expires or is terminated, customers may export their content during a 30-day window beginning on that date. After that window we securely delete the content within 60 days, except where retention is required by law. Extended retention can be arranged as a paid option recorded in the order form.

You may request access to the personal information we hold about you, ask us to correct it, request deletion, or object to certain processing. Write to privacy@linkro.com.au and we will respond within a reasonable time. Where personal information sits inside a customer's data room, that customer controls it and we will assist them in responding to your request. If you are not satisfied with our response, you may raise the matter with the Office of the Australian Information Commissioner.

Customer content is hosted in Microsoft Azure in the Australia East region, and AI processing of that content is also performed in Australia, so there is no cross-border disclosure of customer content for the AI path. A small number of business systems we use to run the company, such as email delivery, may process contact details outside Australia; where that happens we put appropriate safeguards in place so the information keeps an equivalent level of protection.

We may update this policy as our services evolve. The date at the top shows when it was last revised, and material changes will be communicated to customers directly.