Privacy Policy

Effective and last updated: 16 July 2026

1. About this policy

Urbyte Pty Ltd (ACN 692 885 019) (Urbyte, we, us or our) operates an independent telecommunications waste verification platform, including Urbyte accounts and wallets, Data-Backed Units (DBUs), marketplace access and Givabit features.

This policy explains how we manage personal information in connection with our websites, platform, communications and services. We seek to handle personal information consistently with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable Australian laws.

2. Information we collect

3. Information in uploaded evidence

Mobile bills and screenshots may contain personal information beyond what Urbyte needs, such as your address, account number, other services or charges. Please crop or redact information that is not required for verification. Do not upload call histories, message content, browsing content, identity documents, payment card details or other sensitive material unless we specifically request it through a secure process.

Urbyte verifies the figures and account context needed to support a data entry. We do not connect to or control your mobile service and do not access the content of your calls, messages or internet use.

4. How we collect information

We collect information directly from you when you register, complete a form, upload evidence, use the platform, purchase marketplace access, direct DBUs, contact us or participate in a pilot. We also collect technical information automatically through our websites and may receive limited information from service providers that support authentication, hosting, analytics and payments.

If you provide information about another person, you must be authorised to do so and should make them aware of this policy where appropriate.

5. How we use information

We may use personal information to:

• provide, administer and secure Urbyte accounts, wallets and platform features;
• assess submitted evidence, verify telecommunications waste and maintain DBU ledger records;
• process optional paid marketplace access and manage subscription status;
• record and action marketplace or Givabit directions;
• communicate service notices, respond to enquiries and resolve complaints;
• detect misuse, duplicate claims, security incidents or suspected fraud;
• analyse and improve platform reliability, performance and user experience;
• create aggregated or de-identified insights that do not reasonably identify an individual;
• meet legal, accounting, regulatory and dispute-resolution obligations; and
• send marketing where we have consent or are otherwise permitted by law.

We do not use uploaded bills or screenshots to inspect personal communications. We do not sell personal information or DBU activity to data brokers.

6. When we disclose information

We may disclose relevant information to:

• technology and hosting providers that operate or secure our website, platform, databases, file storage, authentication and communications;
• payment providers, including Stripe, to process optional paid access and manage payment events;
• analytics providers, including Google Analytics and Google Tag Manager, to understand website use and performance;
• professional advisers, auditors, insurers or contractors where reasonably necessary and subject to appropriate obligations;
• marketplace, Givabit or service partners where needed to carry out an action you request. We will not disclose more identifying information than is reasonably necessary;
• regulators, courts, law-enforcement bodies or other persons where required or authorised by law; and
• a party involved in a genuine corporate transaction, subject to confidentiality and applicable law.

Urbyte does not provide your mobile bill to your telecommunications provider merely because you use Urbyte, unless you ask us to, it is necessary to resolve a matter you have authorised, or disclosure is required by law.

7. Overseas handling

Some providers used by Urbyte operate global infrastructure or process information outside Australia. This may include recipients or systems located in the United States and other countries in which those providers operate. The countries involved can vary according to the provider and service configuration.

Where the APPs apply to an overseas disclosure, we take reasonable steps appropriate to the circumstances to ensure the recipient handles personal information consistently with the APPs, unless an exception applies. Service-provider privacy terms may also apply to their processing.

8. Cookies and analytics

Our sites use essential technologies required for functionality and security, and may use analytics technologies such as Google Analytics and Google Tag Manager. These tools can collect device, usage and cookie information. You can limit non-essential cookies through available consent controls and your browser settings. Blocking some technologies may affect site functionality.

9. Marketing communications

Where you consent to marketing, we may send Urbyte news, platform updates and offers by email or SMS. You can withdraw consent using the unsubscribe option in the message or by contacting us. We will action unsubscribe requests in accordance with applicable law. Essential account, security, transaction and service messages are not marketing and may still be sent while you use the service.

10. Security

We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. No online service can guarantee absolute security. You should use a secure device, protect access to your email and account, and notify us promptly if you suspect unauthorised activity.

If a data breach is likely to result in serious harm and the Notifiable Data Breaches scheme applies, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

11. Retention and deletion

We retain personal information only for as long as reasonably needed for the purposes in this policy, including maintaining account and ledger integrity, preventing duplicate or fraudulent claims, resolving disputes and meeting legal, tax, accounting and audit obligations. Different records may have different retention periods.

When information is no longer required, we take reasonable steps to delete it or de-identify it, subject to legal requirements and technical backup cycles. Closing an account may not immediately remove records we are required or reasonably need to retain. De-identified information that no longer reasonably identifies you may be retained.

12. Access, correction and account requests

You may ask to access or correct personal information we hold about you, or request account closure and deletion of information that we are not required to retain. We may need to verify your identity before acting. In some circumstances the law permits us to refuse or limit a request; if so, we will explain the reason where required.

Send requests to privacy@urbyte.com.au. We aim to acknowledge privacy requests promptly and respond within a reasonable period, generally within 30 days.

13. Anonymity and children

You may browse public parts of our website without identifying yourself, although technical data may still be collected. An identified account is required where identity or service information is reasonably necessary for verification, security, transactions or legal compliance.

Urbyte's account and verification services are intended for people aged 18 years and over. We do not knowingly seek to collect personal information from children for these services. If you believe a child has supplied information to us, please contact us.

14. Privacy complaints

If you believe we have mishandled your personal information, email privacy@urbyte.com.au with enough detail for us to investigate. We will acknowledge the complaint, investigate it fairly and respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

15. Changes to this policy

We may update this policy as Urbyte's services, technology providers or legal obligations change. The current version will be published on this page with its effective date. If a change materially affects how we handle existing personal information, we will take reasonable steps to notify affected users.

16. Contact Urbyte