Privacy Policy

1. Who we are

RealmTech Pty Ltd (ACN 693 004 554) operates ModelVault, an on-premises workflow versioning platform for financial and actuarial professionals. We are based in Sydney, Australia.

​

This privacy policy explains how we collect, use, and protect personal information through our website at modelvault.com.au and in the course of our business relationship with you.

​

If you have any questions about this policy or how we handle your information, you can contact us at: privacy@modelvault.com.au

​

2. What this policy covers

This policy covers personal information collected through the ModelVault website and our commercial dealings with you — things like enquiry forms, email correspondence, and customer account management.

​

This policy does not cover the ModelVault product itself. ModelVault is deployed entirely within your own environment, and we do not collect, access, or process any data you store within it. Use of the ModelVault product is governed by a separate licence and user agreement.

​

3. What information we collect

We collect the following categories of personal information:

• Contact and enquiry information: When you request a demo, submit a contact form, or correspond with us by email, we collect your name, email address, phone number (if provided), company name, and job title.

• Customer account information: If you become a customer, we collect the information necessary to administer your licence and account, including billing contact details and organisation name.

• Website usage information: Our website uses only essential cookies required for the site to function correctly (such as session management and security). We do not use tracking cookies, advertising cookies, or third-party analytics services. No personal usage data or browsing behaviour is collected or monitored. If this changes in future, we will update this policy and obtain any required consent.

​​

We do not collect sensitive information such as health data, racial or ethnic origin, political opinions, or biometric data.

​

4. Why we collect your information

We use your personal information for the following purposes:

• To respond to your enquiries and arrange product demonstrations

• To administer customer accounts, licensing, and support

• To communicate with you about your account or our services

• To comply with our legal and regulatory obligations (including tax and corporate record-keeping)

 

We do not use your personal information for automated decision-making, profiling, or direct marketing unless you have explicitly opted in.

​

5. Lawful basis for processing

Where applicable (including under the EU General Data Protection Regulation), our lawful bases for processing your information are:

• Legitimate interests: responding to enquiries, administering customer relationships, and improving our services

• Contractual necessity: fulfilling our obligations under licence agreements and service arrangements

• Legal obligation: complying with tax, corporate, and regulatory requirements

• Consent: where you have opted in to receive marketing communications (you can withdraw consent at any time)

 

Under the Australian Privacy Principles, we collect and use personal information only where it is reasonably necessary for our business functions and activities.

​

6. Who we share your information with

We do not sell your personal information. We may share your information with the following categories of recipients, only to the extent necessary:

• Our website hosting provider, for the purpose of operating the website

• Professional advisors (such as legal counsel), in the context of legal or compliance matters

• A payment processor, if and when we implement online payment — in which case payment information will be processed by the third-party provider and not stored by RealmTech

• Government authorities, where required by law

 

We will update this section if we engage additional service providers (such as a CRM platform or email marketing tool) that process personal information on our behalf.

​

7. International data transfers

Our business is based in Australia. If any of our service providers are located outside Australia (for example, if our hosting provider operates from the United States), your information may be transferred to and processed in those countries.

​

Where this occurs, we take reasonable steps to ensure your information is protected to a standard comparable to the Australian Privacy Principles. For individuals in the European Economic Area, we ensure that appropriate safeguards (such as standard contractual clauses) are in place where required by the GDPR.

​

8. How we store and protect your information

We store your contact and account information securely, with access limited to authorised RealmTech personnel. We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access or disclosure.

No method of storage or transmission is completely secure. If you become aware of any security issues, please contact us immediately at: privacy@modelvault.com.au

​

9. How long we retain your information

We retain your personal information only for as long as reasonably necessary for the purpose it was collected:

• Enquiry and contact form data: retained for 24 months from the date of your last correspondence with us, unless a customer relationship is established

• Customer account data: retained for the duration of the customer relationship, plus 7 years to meet tax and regulatory record-keeping requirements

• Email correspondence: retained in accordance with our standard business records retention

 

When information is no longer needed, we will securely delete or de-identify it.

​

10. Your rights

Depending on your location, you may have the following rights in relation to your personal information:

• Under Australian law: You have the right to access and request correction of your personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

• Under New Zealand law: You have the right to access and request correction of your personal information under the Privacy Act 2020 (NZ).

• Under the GDPR (EU/EEA): You have the right to access, rectify, erase, restrict processing, data portability, and to object to processing of your personal information. You also have the right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at: privacy@modelvault.com.au. We will respond within a reasonable timeframe and in accordance with applicable law.

​

11. Additional rights for United States residents

If you are a resident of a US state with comprehensive privacy legislation (including California, Virginia, Colorado, Connecticut, and others), you may have additional rights regarding your personal information. This section supplements the rights described in Section 10.

​

Categories of personal information we collect: As described in Section 3, we collect identifiers (name, email address, phone number), professional information (company name, job title), and internet activity information (essential cookies only). We do not collect sensitive personal information as defined under US state privacy laws.

Your rights: Depending on your state, you may have the right to:

• Know what personal information we collect about you and how it is used and shared

• Request deletion of your personal information

• Correct inaccurate personal information

• Opt out of the sale or sharing of your personal information (we do not sell or share your personal information for cross-context behavioural advertising)

• Not be discriminated against for exercising your privacy rights

 

Sale and sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioural advertising. We have not sold or shared personal information in the preceding 12 months.

​

Exercising your rights: To submit a request, please contact us at privacy@modelvault.com.au. We will verify your identity before processing your request and respond within the timeframes required by applicable law (generally 45 days for California residents). You may also designate an authorised agent to submit a request on your behalf.

​

California-specific disclosures (CCPA/CPRA): Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, California residents have additional rights including the right to limit the use of sensitive personal information. As noted above, we do not collect sensitive personal information. We do not use or disclose personal information for purposes beyond those disclosed in this policy. We do not use automated decision-making technology in a manner that produces legal or similarly significant effects.

​

12. ModelVault product — data clarification

To be clear: this privacy policy covers the ModelVault website and our business relationship with you. It does not cover data you store or process within the ModelVault product.

​

ModelVault is deployed entirely within your own environment. We do not have access to, collect, transmit, or process any client data stored within the product. The only external communication made by a ModelVault installation is a one-time licence activation call, which transmits only the information necessary to validate your licence — no client data, file content, metadata, or usage information is included.

​

Use of the ModelVault product is governed by a separate licence and user agreement provided at the time of deployment.

​

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If we make material changes that affect how we handle your personal information, we will notify you by email or by posting a prominent notice on our website.

​

14. Contact and complaints

If you have questions about this policy, wish to exercise your privacy rights, or want to make a complaint about how we have handled your personal information, please contact us at:

privacy@modelvault.com.au

Privacy Officer

526/368 Sussex Street
Sydney NSW Australia 2000

 

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:

• Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au

• New Zealand: Office of the Privacy Commissioner — privacy.org.nz

• European Union: Your local data protection supervisory authority

• United States (California): California Attorney General — oag.ca.gov

​

RealmTech Pty Ltd

ACN 693 004 554

526/368 Sussex Street
Sydney NSW Australia 2000

Operator of ModelVault (modelvault.com.au)

​

Last updated: 2 April 2026