Data Security & Privacy

PostcodeIQ is designed for privacy-first analytics. Learn how our minimal data approach delivers powerful insights while protecting your business information.

Our Security Principles

Postcodes Only

We only need postcodes and values - no names, emails, or personal data

No Tracking

We analyze geographic patterns, not individual customers or behaviors

Minimal Processing

Data is processed for insights then immediately deleted

Encrypted

All communications use enterprise-grade SSL/TLS encryption

How We Protect Your Data

How PostcodeIQ Works

Our system is designed to work with minimal information:

  • We only process postcodes and aggregated values
  • No customer names or emails are needed or wanted
  • AI analyzes geographic and demographic patterns only
  • Census data comes from public ABS sources
  • Your data is processed then immediately deleted

Data Requirements

ℹ️ PostcodeIQ requires only postcodes and aggregated values. Personal customer information should be excluded from your uploads.

Our system is optimized for geographic and demographic analysis:

✓ What we need:

  • • Australian postcodes (4-digit codes)
  • • Aggregated values or metrics

✗ What we DON'T need:

  • • Customer names or IDs
  • • Email addresses
  • • Phone numbers
  • • Street addresses
  • • Personal information

Infrastructure Security

PostcodeIQ is built on Google Firebase, providing enterprise-grade security:

  • SOC 2/3 certified data centers
  • ISO 27001/27017/27018 compliance
  • 256-bit AES encryption at rest
  • TLS 1.3 encryption in transit

Compliance & Standards

Australian Privacy Act 1988

We comply with the Australian Privacy Principles (APPs) and handle all data in accordance with Australian privacy legislation.

Fully Compliant

GDPR Ready

Our privacy-first approach aligns with GDPR requirements for data minimization and user control.

GDPR Aligned

Frequently Asked Questions

Can PostcodeIQ access my customer database?

No. PostcodeIQ only processes the CSV file you explicitly upload. We have no access to your systems, databases, or any data you don't specifically share through the platform.

What happens to my data after processing?

Once we generate your insights, the postcode data is immediately deleted from our systems. We don't store or retain any of your business data.

Is postcode data considered sensitive?

Postcodes alone are considered low-sensitivity data as they represent geographic areas, not individuals. Combined with only aggregated values (no personal identifiers), the privacy risk is minimal.

Can I use PostcodeIQ with confidential business data?

Yes. Since we only require postcodes and aggregated values - never names or personal details - you can analyze your business metrics without exposing customer identities or sensitive information.

How do you handle authentication data?

Authentication is managed by Firebase Auth with industry-standard security. Passwords are never stored in plain text, and authentication tokens use secure, encrypted sessions.

Built on Trusted Infrastructure

Firebase Security
by Google Cloud
SSL/TLS Encrypted
256-bit encryption
Minimal Data Only
Postcodes & values only