Privacy notice
Last updated 30 October 2026.
This notice covers the CBStrata platform. Strata companies and their managers use the platform to run their finances and records. For each strata company, the strata manager decides what is collected and why. We run the software for them.
What we hold
- Owners: name, lot, postal address, email, phone, levy invoices, payments and the balance of the lot.
- Tenants and owners using the portal: name, email, and the maintenance requests and photos you send. If you tick “OK to share my contact for access”, your name and phone can be given to a contractor for that job only.
- Contractors: business name, contact name, email, phone, trades, ABN, licence and insurance dates, plus the work orders, quotes, invoices and photos for jobs sent to you. You see only your own jobs — never the ledger, other contractors’ jobs, or owner records.
- Council members: name, email, and the votes you record.
- Website visitors who write to us: your name, email, phone (if given) and message. A one-way scrambled form of your internet address is kept for a short time to stop spam; the address itself is not stored.
- A record of activity: sign-ins, changes to access, postings, document downloads and exports, kept so problems can be traced. It does not hold email text or full personal records.
We do not store card numbers or owners’ bank details. The strata company’s own bank and BPAY details are printed on invoices on purpose.
Why
To raise and record levies, send invoices, answer enquiries, handle maintenance, keep the strata company’s records, and keep the platform secure. We do not sell personal information or use it for advertising.
Where it goes
- Books, records and uploaded files are stored in Sydney, Australia (Supabase).
- Pages are delivered through Cloudflare’s global network, so page requests pass through servers in many countries. Cloudflare also runs the spam check on contact forms.
- Emails (invoices, sign-in links, enquiry notices) are sent through Resend. Resend keeps copies of messages in the United States for about 30 days.
- Our hosting providers’ support staff and platform logs can sit outside Australia.
Who can see it
Access is by invitation. Owners see their own lots. Tenants see their own requests. Council members see the strata company’s finances and council records. Contractors see only the jobs sent to them. Managers see the sites they manage. Our platform administrators cannot see a client’s ledger or owner details unless a manager’s organisation asks for help; that access is time-limited and logged. In the same way, an administrator can look at the portal as a tenant or owner sees it (read-only) to help with a problem; each of those views is logged. Managers and council members sign in with a second step (an authenticator app).
How long we keep it
Financial records are kept for as long as the strata company needs them, and at least as long as the law requires it to. Spam-check data is deleted within days. When a strata company stops using the platform, its data can be exported and then deleted on request.
Your choices
You can ask to see the information we hold about you, or to correct it. Owners can request changes to their contact details when signed in; a manager confirms them. Ask your strata manager (notifications@strata-app.com). If we cannot sort it out, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
If something goes wrong
If personal information is lost or accessed by someone who should not have it, we will work out who is affected and tell them and the strata manager, and report it to the OAIC where the law requires.