Privacy Policy

Last updated: 27 October 2026

Central Software Pty Ltd (ACN 688 271 230) operates centralOS and other Central Software products. This policy explains how we handle personal information under Australian privacy law.

The short version

• We work for you. Not advertisers, not data brokers, not anyone else. We never sell your information and there are no ad trackers here.
• Your data is stored in Australia. AI features you choose to use, and our payment and sign-in providers, may process some of it overseas, mostly in the US.
• You decide what to connect, like Google, Microsoft, Facebook or Instagram, and you can disconnect anything at any time.
• We only hand information to governments or authorities when the law makes us, and only what it makes us.
• Want a copy of your information, or something fixed or deleted? Email us at admin@centralsoftware.au.

What we collect and why

Depending on how you use our products, we collect:

• Account information, such as your name, email address, profile picture, organisation and role, to create and manage your account.
• Customer content, such as contacts, staff records, communications, files, invoices and transactions, to provide the features you use.
• Billing information, such as your plan, payment status and transaction records, to manage subscriptions. Stripe handles payment card details.
• Technical information, such as your IP address, browser, sign-in activity, security events and application logs, to operate and secure our products.
• Communications, such as support requests and feedback, to respond to you and improve our products.

We collect this information from you, your organisation, services you connect and the operation of our products. We use it only to provide and support our products, process payments, communicate with you, improve reliability and security, and comply with law.

Please do not enter sensitive information, such as health information, unless you need to and the law allows it.

Third-party accounts and integrations

If you choose Google or Microsoft sign-in, we receive your name, email address, profile picture and provider account identifier solely to authenticate and link your account. Standard sign-in does not give us access to your mailbox, calendar, contacts or files.

If you choose to enable optional integrations, such as Google Calendar or Google Contacts:

• We access, sync and update your calendar events or contacts to provide two-way sync features within centralOS. Relevant synced data may also be used for AI features you choose, as described below. centralOS requests the minimum privilege needed, such as limiting calendar access to calendars you own.
• Synchronised data is stored securely in Australia alongside your customer content.
• We do not sell your connected data or use it for advertising. Sharing and provider processing are limited to the purposes described below and remain subject to applicable restrictions, including Google's Limited Use requirements.
• You can disconnect integrations at any time in Settings, which immediately stops syncing and revokes active access tokens. You can request deletion of synced data at admin@centralsoftware.au or revoke access via your provider's account security settings.

centralOS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect a Facebook Page or Instagram professional account, we receive data from Meta for that Page or account only: its name and profile picture, the posts it publishes, comments and likes on those posts (with the commenter's name and profile picture where Meta provides them), messages sent to it on Messenger or Instagram, and post views and follower counts.

• We use this data only to provide centralOS features to the business that connected the account: publishing its posts, showing and replying to comments and messages, saving a person who comments or sends a message as a contact when the business chooses to, and showing how its posts perform.
• Comments the business chooses to feature on its own centralOS website are shown without the commenter's name or picture.
• We do not sell this data, use it for advertising or share it with other businesses. It is stored in Australia alongside your customer content, and may be used for AI features you choose, as described below.
• You can disconnect a Page or Instagram account at any time in Settings, which immediately stops posting and syncing. Removing centralOS from your Facebook or Instagram settings also disconnects it. To ask us to delete data we received from Meta, email admin@centralsoftware.au.

Customer content and AI

Our customers decide what information their authorised users enter into centralOS and are responsible for having authority to provide it. We process that information to provide the service to them.

When you use an AI feature, relevant connected-account data may be sent to an AI provider solely to deliver the requested functionality. The content you submit and other relevant context may also be sent to that provider for the same purpose. We do not use, or allow AI providers to use, submitted content or connected-account data, including aggregated, anonymised or derived forms of it, to create, train or improve foundational or generalised AI or machine-learning models. AI processing may occur outside Australia, including in the United States.

Our mobile app

The centralOS app for iPhone and Apple Watch uses your centralOS account and stores data in the same places as centralOS on the web. It asks for each permission only when you use the feature that needs it:

• Microphone, to dictate messages and record meetings. Recordings are uploaded to centralOS and sent to our AI provider to be transcribed and turned into notes. Dictation uses Apple's speech recognition.
• Contacts, to add people from your phone to centralOS or save centralOS contacts to your phone. We only read the contacts you choose.
• Photos and camera, to attach the photos you choose.
• Notifications. We store a notification token for your device so we can send you notifications, and delete it when you sign out.

The app has no advertising or analytics trackers and doesn't track you across other companies' apps or websites.

Sharing and overseas processing

We share personal information only with:

• authorised users in your organisation;
• providers that help us operate our products, such as Amazon Web Services, Stripe, Google, Microsoft, Meta and AI providers;
• advisers, authorities or other parties where required by law; or
• a buyer or successor involved in a genuine sale or restructure of our business.

We do not sell personal information. Providers may process it to deliver their services, protect safety and security, prevent abuse or meet legal obligations, subject to applicable terms and the restrictions described in this policy.

Depending on the service and applicable settings, providers may retain submitted content, generated results and related data, and allow authorised personnel to review it for safety, security or abuse prevention. Retention periods and deletion rules vary by provider.

centralOS customer content and core application data are stored in Australia. Identity, payment and AI providers may process information in other countries, including the United States, under their own infrastructure and privacy terms.

Security, retention and cookies

We use reasonable technical and organisational safeguards to protect personal information. No online service can guarantee complete security.

We keep personal information only for as long as needed to provide our products, meet legal obligations and resolve disputes. We then delete or de-identify it where practical.

Our products use cookies and browser storage needed for sign-in, security and preferences. We do not use advertising trackers or third-party behavioural analytics.

Your choices and complaints

You can ask to access, correct or delete personal information we hold about you by emailing admin@centralsoftware.au. We may need to verify your identity, and the law may sometimes require us to retain information.

You can also use that address to make a privacy complaint. We will investigate and respond within a reasonable time. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

Changes

We may update this policy when our products or privacy practices change. We will publish the new version here and provide additional notice for material changes.

Contact