Privacy policy
Last updated 23 September 2026
This policy explains what personal information A Clebio Costa Bispo Publicidade Ltda (we, us) collects through RealtyAML (the Service), why, and how it is handled. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1. Information we collect
- About you and your firm: your email address, your firm's name, ABN, sector, the name of your compliance officer and the answers you give when building your AML/CTF program.
- About your clients and staff: the identification, risk and training records your firm enters into the Service. Your firm decides what to enter; we store it on your behalf.
- About your use of the Service: sign-in times, the actions recorded in your audit trail, and standard server logs (IP address, browser, pages requested).
- Payment details are collected and stored by our payment provider, Stripe. We never see your full card number.
2. Why we collect it
- To provide the Service: sign you in, generate your program, keep your records, send review reminders and produce reports.
- To bill you and manage your subscription.
- To keep the Service secure and to fix problems.
- To contact you about your account, including changes to these terms or the Service. We do not send marketing without your consent.
3. Who we share it with
- Service providers that host and run the Service: our hosting and database provider, our email delivery provider (for sign-in links and notices) and Stripe (for payments). Each only processes data as needed to provide its service to us.
- Regulators or law enforcement, where the law requires it.
- Nobody else. We do not sell personal information.
4. Where it is stored
Your data is stored with our hosting provider and may be processed outside Australia by the providers listed above. We choose providers with security practices appropriate to compliance records.
5. How long we keep it
Client identification and transaction records must be kept for 7 years under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). Records your firm enters are kept for at least that long. Archived client records leave your register but stay stored. Account and billing records are kept while your account exists and for as long as the law requires afterwards.
6. Security
Access to the Service is by single-use sign-in links. Data is encrypted in transit. Every change to compliance records is written to an audit trail that cannot be edited or deleted from within the Service. Only staff who need to operate the Service have access to production data.
7. Your rights
- You can see and update your firm's details in the Service at any time.
- You can ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing hello@realtyaml.com.au.
- You can close your account by emailing us. Records subject to the 7-year retention rule are kept until that period ends.
- If you have a complaint about how we handle personal information, email us first. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
8. Cookies
The Service uses only the cookies needed to keep you signed in and protect forms from misuse. There are no advertising or tracking cookies.
9. Changes
We may update this policy. Material changes are emailed to account owners before they take effect. The date at the top shows the current version.
10. Contact
A Clebio Costa Bispo Publicidade Ltda · hello@realtyaml.com.au