Privacy

Privacy Policy

Last updated: 11 August 2026

This Privacy Policy explains how Avada Services Pty Ltd T/A Eleos Business Services, ABN 89 630 298 047, handles personal information for EleosForms and related services.

Information We Collect

We may collect business and contact details, account login details, two-factor authentication setup information, subscription and billing identifiers, support enquiries, portal configuration details, domains, usage records, logs, form templates, uploaded files, signatures, and form submissions processed through hosted portals.

Payment Information

No payment details are required when a no-card trial is created. When an owner or billing contact later activates a subscription, payment details are collected and processed by Stripe. EleosForms may store Stripe customer, subscription, invoice, and payment-method identifiers, along with limited card metadata such as brand, expiry, and last four digits where available. We do not store raw credit card numbers or CVV codes.

How We Use Information

We use information to provide hosted forms portals, process signups and subscriptions, deploy and support instances, secure accounts, send transactional emails, respond to enquiries, manage invoices, improve the service, prevent abuse, and comply with legal, tax, accounting, and payment-processing obligations.

Customer Portal Data

Customers control the forms and submissions they collect through their hosted portals. Customers are responsible for giving appropriate privacy notices to their own users, staff, contractors, clients, and form submitters, and for ensuring they have a lawful basis to collect and process that data.

AI-Assisted Features

Where you use AI-assisted features, relevant prompts, form instructions, or selected content may be sent to AI service providers to generate responses or drafts. You should avoid submitting sensitive or regulated information to AI features unless it is lawful, necessary, and appropriate for your business process.

Sharing Information

We may share information with service providers who help operate EleosForms, including hosting providers, email delivery providers, payment processors such as Stripe, analytics or security tools, professional advisers, and authorities where required by law. We do not sell personal information.

International Processing

Some service providers may process information outside Australia. Where this occurs, we take reasonable steps to use providers with appropriate security, privacy, and contractual controls.

Security

We use reasonable technical and organisational measures to protect information, including access controls, password hashing, mandatory two-factor authentication for management access, encrypted storage for selected secrets, HTTPS in production, and operational logging. No online service can guarantee absolute security.

Retention

We keep information for as long as needed to provide the service, meet legal and accounting obligations, resolve disputes, enforce agreements, maintain backups, and support customers. Deleted or cancelled portal data may remain in backups for a limited period before expiry.

Marketing

If you opt in to product updates or newsletters, we may send relevant EleosForms updates. You can opt out of marketing communications at any time. Transactional service, billing, security, and support emails may still be sent where needed.

Access and Correction

You may request access to or correction of personal information we hold about you. We may need to verify your identity or authority before acting on a request.

Complaints

If you have a privacy concern, contact us first so we can review it. If you are not satisfied, you may have the right to contact the relevant privacy regulator in your location, including the Office of the Australian Information Commissioner in Australia.

Contact

Privacy questions can be sent through our contact page or by post to PO Box 1397, Osborne Park DC WA 6100.