Skylink privacy notice

Controller: Skylink PTY LTD, ABN 13 676 029 539, Perth, Western Australia. Contact: [email protected]. Website: https://www.skylinkaustralia.com. Effective date: 22 March 2024.

This notice is aligned to the Australian Privacy Principles (Privacy Act 1988 (Cth)).

Local recorder data: camera credentials, video, snapshots, detections, face observations and plate reads stay on the customer's recorder. Retention and access are customer-controlled. The mobile app retrieves authorized media directly over the customer's private HTTPS network. Microphone access is used for push-to-talk. The app does not capture video from the phone camera.

Vendor account data: email, a salted password hash, verification/recovery/session credential hashes, purchase references and verification receipts, licence status, installation identifiers, device push tokens, delivery records and audit metadata. These support sign-in, billing verification, activation/transfer, fraud prevention, account recovery and push delivery. Stripe handles NVR checkout; Apple and Google handle mobile subscriptions. Their own privacy terms also apply.

Push data: installation, event and camera identifiers and an opaque device token are processed by the vendor/Firebase. Generic notification text is used. Camera footage, face/plate values, snapshots, camera names and customer server URLs are not sent through the vendor push gateway. Private deployments may instead use customer-configured direct FCM or other notification channels.

Deleting the Skylink account removes credentials and registered push devices, anonymizes the account and revokes hosted access. It does not erase local NVR recordings. Cancel Apple/Google subscriptions in store settings to stop renewal. Account identifiers are removed from active systems promptly; pseudonymous purchase and audit records are retained for seven years to meet Australian tax and fraud-prevention obligations, and encrypted database backups are retained for up to 14 days.

Where data is processed

Hosted account data is processed on a virtual private server located in Sydney, Australia, provided by Contabo, and in database backups held on the same server. Stripe processes payment data in the United States and other countries it discloses. Apple, Google and Firebase process store purchases and push delivery under their own privacy terms. PurelyMail provides mailbox and email delivery services and may process email outside Australia. These may involve transfers outside Australia; Skylink remains responsible for personal information it discloses to processors.

Your rights and complaints

You may request access to, or correction of, the personal information Skylink holds about you, and you may ask for the account to be deleted, by emailing [email protected]. Skylink will respond within a reasonable period. If you are not satisfied with the response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).