Legal

Privacy policy

Effective 17 September 2026. This policy covers the Markus Marketing Brand Audit service at brand.markus.marketing, operated by WWW.DIRECTORY.COM.AU PTY LTD (ABN 68 090 816 461), an Australian business bound by the Australian Privacy Principles.

What we collect

• Order details you enter: the website address to audit, your email address, an optional business name, optional competitor addresses and optional notes.
• Payment information: handled entirely by Stripe. We receive a payment confirmation, the amount, and a Stripe reference. Card numbers never touch our servers.
• Crawl evidence: the public pages of the website you nominate and of competitor homepages, as fetched by our identified crawler, and the analysis generated from them.
• Technical data: your IP address and browser user agent at the time of ordering (for fraud and abuse prevention and rate limiting), and standard web server logs.

Why we use it

To generate and deliver the reports you ordered, to email you the order confirmation and the ready notice, to prevent abuse of the service, to reconcile payments, and to improve the product. We do not sell personal information and we do not send marketing email unless you ask for it.

Who it is shared with

• Stripe (payment processing) - see Stripe's privacy policy.
• Anthropic (AI analysis) - the crawl evidence pack and your optional notes are sent to the Claude API to write the reports. They are processed under Anthropic's commercial terms and are not used to train models.
• Google (PageSpeed Insights API) - the address of the website you nominate is sent to Google to measure its speed and accessibility, when that integration is enabled.
• Amazon Web Services (hosting in Sydney) and our transactional email relay.

Retention

Orders, evidence packs and reports are kept so that you can reopen your reports, for 24 months from the order date, then deleted. Email logs are kept for 12 months. Server logs are rotated within 30 days. You can ask us to delete an order and its reports earlier at any time.

Security

Reports are reachable only through unguessable links. Configuration secrets are stored outside the web root. Transport is encrypted (HTTPS). No system is perfectly secure; if a breach affecting you occurs we will notify you as required by law.

Cookies

The public site sets no tracking cookies. The one exception is our affiliate programme: if you arrive through an affiliate's link, a first-party cookie named ba_ref holding that affiliate's code is kept for 30 days so the affiliate can be credited if you order; it identifies the affiliate, not you, and is never shared with anyone. The order page uses no other cookies. The administration console uses a session cookie for staff only. We do not run third-party analytics or advertising scripts on this service. We keep first-party, cookie-free page statistics (the page viewed, the referring site, device type and a daily-rotating hash of the IP address and browser that cannot be reversed) for 13 months to understand how the service is used.

Your rights

You can request access to, correction of, or deletion of your personal information, or make a complaint, through the support form. We respond within 30 days. If you are not satisfied you may contact the Office of the Australian Information Commissioner.