Legal

Privacy Policy

Last updated: 1 March 2026

Postcard, operated by Cybertrack Pty Ltd ("we", "us", or "our"), provides the platform available at haloeffect.au. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

1. Information We Collect

We collect information you provide directly to us, including:

• Name, email address, hotel name, and role when you register interest or create an account
• Social media profile data (display name, follower count, post engagement) when a guest connects a social account
• Usage data and log information when you interact with the platform

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Postcard platform
• Send transactional emails (vouchers, notifications, and platform alerts)
• Respond to enquiries and provide customer support
• Comply with our legal obligations

We do not sell your personal information to third parties.

3. Social Media Data

When a hotel guest connects a social media account (Instagram, TikTok, or YouTube), we access only the data permitted by the relevant platform's API and the permissions the guest explicitly grants. We use this data solely to calculate a social influence score and determine offer eligibility. Guests may disconnect their accounts at any time, which will remove the associated data from our platform.

4. Data Storage and Security

Your data is stored on servers located in Singapore. We use industry-standard encryption (AES-256 at rest, TLS 1.2+ in transit) and apply row-level security controls to ensure hotel tenant data is strictly isolated. No data from one hotel is ever accessible to another.

5. Data Retention

We retain your information for as long as your account is active or as required to provide services. You may request deletion of your personal data at any time by contacting us at hello@haloeffect.au.

6. Cookies

Our website uses essential cookies only — no tracking or advertising cookies. We do not use third-party analytics services that share data with advertisers.

7. Your Rights

Under the Australian Privacy Act 1988 and applicable state legislation, you have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at hello@haloeffect.au.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, contact us at hello@haloeffect.au.