Privacy Policy

1. About This Policy

ExitLink Pty Ltd ("ExitLink", "we", "us", "our") is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect personal information collected through the ExitLink platform (exitlink.app).

2. Information We Collect

We collect the following types of personal information:

• Account information: Full name, email address, password (hashed)
• Business listing data: Business name, financial figures, location, contact details
• NDA submissions: Full name, email, phone, company, address, intended use, IP address (for audit trail purposes)
• Usage data: Pages visited, listing view counts, session duration
• Payment data: Processed securely by Stripe. ExitLink does not store card details.

3. How We Use Your Information

• To provide and operate the ExitLink platform
• To process payments and manage subscriptions
• To facilitate NDA signing and buyer-seller communication
• To send transactional emails (listing notifications, NDA alerts)
• To improve platform features and user experience
• To comply with legal obligations

4. IP Address Collection

We collect and store IP addresses as part of the NDA signing audit trail. This is to create a legally defensible record of NDA acceptance. IP addresses are treated as personal information under applicable privacy laws.

5. Disclosure of Your Information

We do not sell your personal information. We may share information with:

• Stripe: Payment processing
• Base44: Platform infrastructure and hosting
• Law enforcement: When required by law

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent for marketing communications

To exercise these rights, contact us at privacy@exitlink.app.

7. Data Retention

We retain personal information for as long as necessary to provide our services and comply with legal obligations. NDA records may be retained for up to 7 years for legal compliance purposes.

8. Security & Confidentiality

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Payment data is processed entirely by Stripe and is never stored on our servers.

Confidential business material — financial records, lease documents, legal agreements and supporting files uploaded by a seller — is handled separately from public listing content:

• Private storage: Confidential documents are held in private storage and are encrypted in transit and at rest. They are never placed in a public location.
• No public links: Raw file locations are never exposed. Documents open only through signed links that expire one hour after they are generated.
• NDA-gated access: Buyers cannot see confidential documents until they have signed and submitted an NDA and the seller has approved it. Access is tied to that specific NDA record, and the seller can revoke it or delete documents at any time.
• Never sold or shared: Confidential documents are not sold, shared with advertisers, or used for any purpose other than presenting your listing to buyers you have approved.
• Audit trail: NDA submissions record the signatory's name, timestamp and IP address so that access to confidential information is traceable.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

9. Cookies

We use essential cookies for authentication and platform functionality. By using ExitLink, you consent to the use of these essential cookies. We will provide a full cookie consent mechanism in a forthcoming update.

10. Contact

For privacy enquiries, contact our Privacy Officer at: privacy@exitlink.app

ExitLink Pty Ltd, Australia