Clix Capital Pty Limited ACN: 169 978 438, trading as Neallus ("Neallus", "we", "us", "our"), is an Australian SaaS holding company operating cloud-based software platforms including Diogelu (diogelu.com), Proifil (proifil.com) and Cerdyn (cerdyn.com). We are the data controller for personal information collected through our platforms.
Privacy contact: privacy@neallus.com
When you create an account on any Neallus platform, we collect:
Data you enter into our platforms — such as risk records, property details, policy information, incident reports, claims data, professional profile information, and — for Cerdyn — the business card details you choose to publish (name, title, company, phone numbers, email, website, address and an optional uploaded logo). This data belongs to you and we process it only to provide the relevant Service.
Cerdyn additionally generates a QR code and a downloadable vCard (.vcf) contact file from your published card details so that people who scan the code can save your contact information. Anyone with the card's link or QR code can view the published card and download that vCard — do not include information on a card that you do not want to share publicly.
Payment processing is handled entirely by Stripe, Inc. We do not store your full credit card number, CVC or expiry date on our servers. We receive and store a Stripe customer reference and subscription status for account management purposes only.
Actions performed within our platforms (such as adding records, editing data or logging in) are recorded in an audit log associated with your account. This data is visible to administrators within your organisation.
| Purpose | Information used | Legal basis |
|---|---|---|
| Providing our Services | Account data, platform data | Contract performance |
| User authentication and security | Email, password hash, tokens | Contract performance |
| Billing and subscription management | Email, Stripe reference IDs | Contract performance |
| Customer support | Account data, correspondence | Legitimate interest |
| Service improvement and debugging | Usage data, error logs | Legitimate interest |
| Security monitoring and fraud prevention | IP addresses, usage patterns | Legitimate interest |
| Legal compliance | As required by law | Legal obligation |
We do not sell, rent or trade your personal information. We share information only as follows:
We implement appropriate technical and organisational measures to protect your personal information, including:
We retain your personal information for as long as your account is active. If you cancel your subscription or your trial expires:
Billing records and legal documentation may be retained for up to 7 years to meet accounting and legal compliance obligations.
Depending on the platform, we use either browser local storage or a strictly necessary, secure session cookie to keep you logged in. Either method is used solely to authenticate your session and is required for the platform to function. We do not use tracking cookies, advertising cookies or analytics cookies.
You have the following rights regarding your personal information:
To exercise any of these rights, contact us at privacy@neallus.com. We will respond within 30 days.
We are committed to complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where applicable. If you believe we have handled your personal information in a way that breaches the Privacy Act, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Our Services are intended for business use by adults (18 years and over). We do not knowingly collect personal information from minors. If you believe we have inadvertently done so, please contact us immediately.
Your data is stored on servers in Australia or regions with equivalent data protection standards. Where data is transferred internationally (for example, to Stripe's US servers for payment processing), we ensure appropriate contractual safeguards are in place.
We may update this Privacy Policy from time to time. We will notify you of material changes by email to your registered address or via an in-platform notice, with at least 14 days before the updated policy takes effect.
For any privacy questions, requests or concerns: