Privacy Policy

Privacy and data handling information for Neo Universe Pty Ltd.

This Privacy Policy explains how Neo Universe Pty Ltd handles personal information through neouniverse.com.au and in connection with the DAAS Partner Portal sign-in integration and associated account-activation and security features described below.

Neo Universe Pty Ltd is committed to handling personal information in a reasonable and careful way and to meeting its obligations under applicable Australian privacy law.

What information may be collected

Depending on how you use the website, Neo Universe Pty Ltd may collect:

• Your name
• Your email address
• Your phone number if you choose to provide it
• Business or project information you submit through the contact form
• Technical and usage information such as browser type, device information, referring pages, and general website activity

Disclosure to service providers

Neo Universe Pty Ltd may disclose information to service providers that help operate the website or related business systems, such as hosting, security, analytics, or form-processing services.

Information is only disclosed where reasonably necessary for those functions.

Storage and security

Reasonable steps are taken to protect information from misuse, interference, loss, and unauthorized access, modification, or disclosure.

No internet transmission or storage system can be guaranteed as completely secure, but appropriate practical safeguards are used.

Access and correction

If you want to request access to personal information held about you, or ask for it to be corrected, you can make a privacy enquiry through the website contact form.

Neo Universe Pty Ltd will respond within a reasonable time.

DAAS Partner Portal sign-in services

Neo Universe Pty Ltd is the technical publisher and service provider for the DAAS Partner Portal sign-in integration. DAAS PTE. LTD. operates the portal at portal.daas.team and manages portal accounts, access permissions and business records.

Neo Universe may process personal information when providing technical support, maintenance and security services for the integration. DAAS remains responsible for the portal’s business operations and account-access decisions. This section explains sign-in-related processing; it does not replace the terms governing purchases or other business transactions with DAAS.

Information used for sign-in and account security

Depending on your chosen sign-in method and the information supplied by your identity provider, the integration may process:

• Your name, email address and basic profile information.
• An identity-provider account identifier used to recognise and link your account.
• Authorisation responses and sign-in tokens used to validate your identity and establish access. The portal may retain a provider access token as part of its account-authentication records.
• Account invitations, activation status and account-security records.
• Session cookies and technical records needed to operate and protect the service, which may include sign-in times, IP addresses and browser or device information.

The current Microsoft integration requests basic sign-in, profile and email information. It does not request permission to read your email messages, contacts or files.

When you sign in through Microsoft or Google, authentication takes place with that provider. The integration does not request or receive your Microsoft or Google password.

If you create a portal password, the portal processes it for authentication and stores a password hash rather than the plain-text password.

If you register a passkey, the portal stores a credential identifier and public key used to verify sign-in. It does not receive your fingerprint, facial-recognition data, device-unlock PIN or passkey private key. Your device or passkey provider manages those elements.

Purposes and disclosures

Sign-in information is used to authenticate you, activate or link your authorised account, establish sessions, administer access, provide support and investigate security problems or misuse.

Relevant information may be processed by DAAS, Neo Universe and service providers supporting hosting, authentication, security or technical support. Microsoft and Google also process information under their own privacy policies when you use their sign-in services.

Sign-in information is not collected by this integration for advertising or sold through the integration. Any additional permissions needed for a future feature will be explained separately.

Information may be processed outside your country through the locations used by the portal, its technical service providers and your chosen identity provider.

Retention, account closure and your choices

Sign-in information is retained for as long as reasonably necessary to operate your account, provide support, maintain security and meet applicable legal obligations. Retention may differ between active account records, security logs and backup copies.

You can withdraw an application’s access through your Microsoft or Google account settings. This may prevent that sign-in method from working, but does not by itself close your DAAS portal account or delete its business records.

To request access, correction, removal of a linked sign-in identity or account closure, contact the DAAS team that manages your portal access. You may also contact Neo Universe through its website contact form and identify the enquiry as a privacy request.

Requests will be assessed after appropriate identity verification. Information no longer needed will be deleted or de-identified, subject to applicable legal obligations and necessary security or business-record retention. Backup copies may remain until their normal replacement or expiry.