Privacy Policy

Teamakio Pty Ltd ("we", "us", "Akio") operates the Akio mortgage broker software platform at https://akio.com.au and https://portal.akio.com.au. We are an Australian business and our handling of personal information is governed by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

We collect personal information from two distinct groups:

• Brokers: name, email address, work phone, brokerage name, employment details, identity verification data via WorkOS, and billing/payment data via Stripe.
• Loan applicants (introduced to us by brokers):identification documents (driver's licence, passport, Medicare card), date of birth, residential address history, employment and income data, expenses, assets, liabilities, banking transaction data via consented Open Banking access (Basiq), and credit report data via Equifax AU.

• To provide the Akio platform to your broker.
• To extract information from documents and produce structured loan-application data.
• To pull and display credit reports at the broker's instruction.
• To sync your application to your broker's aggregator CRM (where the broker explicitly triggers an export).
• To communicate with you about service-related matters.
• To operate, secure, and improve the platform.

All production data is stored in AWS Asia Pacific (Sydney) — ap-southeast-2 region. Document files, applicant records, broker accounts, and database backups all reside in Australia. Some sub- processors (Stripe, WorkOS, Basiq, Equifax, Mailgun, AWS) may process data outside Australia for specific functions, all under contractual data-protection commitments. A current sub-processor list is available on request.

We retain personal information for as long as we provide services to you and your broker, and for a further period required by Australian financial-services record-keeping laws (typically 7 years from the date of last activity on a loan file). After that, data is securely deleted or de-identified.

You can ask us to:

• Show you the personal information we hold about you.
• Correct inaccuracies.
• Delete your data (subject to record-keeping obligations).
• Stop using your data for marketing (we don't do marketing today, but it's your right anyway).

Email support@akio.com.au with any of these requests. We respond within 30 days.

We use TLS 1.3 in transit, AES-256 at rest (managed by AWS), multi-factor authentication for all admin access, principle-of- least-privilege IAM, and audit logging on every data access event. We don't share applicant data with third parties beyond the sub-processors listed in Section 4 and your assigned broker.

This marketing website does not use any analytics or tracking cookies. The portal uses a small number of strictly-necessary cookies for authentication. We do not use third-party advertising cookies anywhere on our properties.

If you believe we've mishandled your personal information, please contact us first at support@akio.com.au. If we can't resolve your concern, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. The current version is always at https://akio.com.au/privacy with the “Last updated” date at the top.