Red Owl Pty Ltd - Privacy Notice
1. Who We Are
Our company details are Red Owl Pty Ltd ACN 676 456 321.
This Privacy Notice explains how Red Owl Pty Ltd ("RedOwl", "we", "us" or "our") collects, uses, shares, and protects your personal and financial information in connection with our finance governance platform, AP fraud prevention engines, transaction interrogation systems, and related activities.
Red Owl Pty Ltd acts as a data controller in respect of your personal information. We are committed to protecting your privacy, complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), international data protection standards, and upholding principles of transparency, fairness, and ethical conduct.
2. The Information We Process
We collect and process personal, transaction, and confidential business information at the start of, and throughout, your relationship with us. This may include:
- Basic details: name, date of birth, nationality, contact details, work email, business address.
- Financial & Transaction data: accounts payable records, invoice line-items, bank accounts (BSB/Account numbers), corporate card transaction records, payment histories, and ERP general ledger logs.
- Digital & Technical information: online platform credentials, IP addresses, device identifiers, browser attributes, cookies, and system interaction logs.
- Identity and verification data: ABN/ACN registry records, signatory authorizations, delegation of authority matrices, and executive contact verification logs.
- Commercial Contract data: signed master service agreements (MSAs), rate cards, CPI indexation terms, and procurement governance rules.
3. How We Obtain Information
Your information comes from:
- Direct interactions when you book a demo, configure company parameters, or use our real-time interrogation tools.
- Automated ERP integrations, bank data feeds, and payment card rail webhooks (e.g., SAP, NetSuite, Oracle, Workday, CBA, NAB, Westpac, ANZ, Amex, Mastercard, Visa).
- Public registers and identity databases, including the Australian Business Register (ABR), ASIC registries, and corporate sanction lists.
4. How We Use Your Information
We process your data strictly to:
- Interrogate invoices and corporate card spend against active contracts to prevent overpayments, duplicate charges, and fraudulent bank alterations.
- Provide CFO dashboards, EBITDA leakage assessments, and automated audit trails.
- Ensure regulatory compliance under Australian Financial Services laws and anti-fraud mandates.
- Protect against synthetic invoices, Business Email Compromise (BEC), and unauthorized funds redirection.
5. Data Security and Cryptographic Audit
We deploy bank-grade AES-256 encryption at rest and TLS 1.3 in transit. All transaction checks and verification decisions generate immutable cryptographic audit logs to maintain complete evidentiary integrity for enterprise audit committees and external assurance.
6. Your Rights & Contact
Under the Privacy Act 1988 (Cth), you have the right to request access to personal information we hold about you, request corrections, or lodge a privacy concern. You can contact our Privacy Officer at privacy@redowl.ai.