Privacy policy

Fobmo handles personal information on behalf of the buildings we serve. This policy explains what we collect when you buy a fob or mobile credential through a building storefront, why we collect it, who sees it, and what choices you have. It is written in plain English on purpose. If anything here is unclear, please email admin@fobmo.com.

Who we are

Fobmo is an Australian company that runs the access governance platform used by your building. We operate the storefront where you bought your fob or mobile credential on behalf of the building's owners corporation (the "OC"). The OC's manager fulfils your order; Fobmo provides the technical platform and routes the payment.

For the purposes of the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), Fobmo is the entity that handles your personal information when you use the storefront.

What we collect

When you place an order through a building's Fobmo storefront, we collect:

• Identity details: your first name and last name.
• Contact details: your email address and mobile number.
• Shipping address: street address, suburb, state, and postcode (for physical fobs that are posted to you).
• Your apartment: the lot number or code in the building that the credential is for.
• Order details: the product you bought, the price you paid, and the time of the order.
• Technical signals: your IP address and browser user agent, captured automatically by our servers and by Stripe Checkout when you reach the payment page.

We do not collect or store your payment card details. Card information is handled directly by Stripe (see "Payment" below).

Why we collect it

We use your personal information only for the following purposes:

• To fulfil your order. The building's OC manager needs your name, contact details, lot, and (for physical fobs) shipping address so they can deliver or provision the credential.
• To communicate with you about your order. You will receive an order confirmation email when you pay, and a follow-up when the OC manager confirms and fulfils the order.
• To keep a record of who has access to the building, which is the governance trail your OC and its insurer rely on.
• To respond to any questions you send to admin@fobmo.com about your order.

We do not use your information for marketing, profiling, or analytics. We do not sell, rent, or share your information with advertisers.

Who sees your information

Inside Fobmo, your order details are visible to:

• The property management contacts at your building. These are the people (usually one or two OC managers, plus the senior OC contact) who fulfil and audit access for your building.
• Fobmo platform administrators at admin@fobmo.com. We act on behalf of the building and we maintain the platform, so the platform admin can see all orders.

Your information is not visible to other buyers, to other buildings, or to anyone outside the platform. It is not shared with third parties for marketing, and it is not used to train any machine learning model.

Payment

Payments on Fobmo storefronts are processed by Stripe, a global payment platform. When you click Pay, you are taken to a payment page hosted by Stripe; your card details are entered there, transmitted to Stripe, and never touch Fobmo's servers.

Stripe is the controller of your card data and handles it under its own privacy policy. See Stripe's Privacy Policy and Consumer Terms for details. Stripe is PCI-DSS compliant; Fobmo relies on Stripe for payment security.

How we protect your information

Names, email addresses, mobile numbers, and shipping addresses are encrypted at rest on our servers using industry-standard encryption with rotating keys. Access to decrypted personal information inside Fobmo is restricted to the platform administrators and the property management contacts at your building, and every access is logged.

Fobmo is an Australian company, but our servers are not in Australia. The platform runs in Singapore, so your personal information is stored and processed overseas. We handle it under the Australian Privacy Principles wherever it sits, and Australian Privacy Principle 8 obligations apply to that disclosure. Stripe separately processes payment data on its own global infrastructure.

How long we keep your information

Access records are governance documents. The building, its insurer, and its OC committee rely on being able to answer "who had access to this building, and when" for years after a fob is deactivated. For that reason, we retain your order and access records for as long as the building uses Fobmo, plus a reasonable additional period for legal, audit, and insurance purposes.

You can ask us to delete personal information that is no longer needed for these purposes. See the next section.

Your choices and rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Correct personal information that is inaccurate, out of date, or incomplete.
• Ask us to delete personal information that we no longer need for the purposes above.
• Complain if you think we have mishandled your information.

To exercise any of these rights, email admin@fobmo.com. We will respond within 30 days and confirm what we have done. If your request would compromise the governance record that the building relies on (for example, deleting all evidence that you ever held a fob), we will tell you that and explain what we can do instead, such as redacting fields that are no longer needed.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).

Cookies and tracking

Fobmo storefronts use the minimum cookies needed to run a checkout. When you reach the payment page, Stripe sets its own cookies to keep your session secure; this is part of how Stripe Checkout works. We do not use marketing cookies, advertising trackers, or third-party analytics on the storefront.

Our marketing site at www.fobmo.com uses Google Analytics to measure page traffic. The storefront itself does not.

Children

Fobmo storefronts are not intended for people under 16. If you believe a minor has placed an order, please email admin@fobmo.com and we will work with the building's OC manager to resolve it.

Changes to this policy

We will update this page if we change how we handle personal information. The "Effective" date at the top reflects the current version. For material changes, we will also note the change at the top of this page for at least 30 days.

How to contact us