Last updated: 30 September 2026

1. About this Privacy Policy

Petty Cash App Pty Ltd (ACN 692 699 059, ABN 30 692 699 059) (“Petty Cash“, “we“, “us” or “our“) operates the Petty Cash mobile application, the website at pettycash.io, our waitlist and related services (together, the “Services“).

Petty Cash is an Australian marketplace that enables individuals, businesses, contractors and tradespeople to list, discover, buy, bid on and sell surplus construction materials and other permitted goods.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

• access or use the Petty Cash app

• visit our website

• create or manage an account

• create, view, buy, bid on or sell a listing

• communicate with another user

• make or receive a payment

• interact with our marketing or communications

• join our waitlist

• contact us for support

• otherwise interact with the Services.

We are committed to managing personal information responsibly and, where applicable, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy is intended for users of the Services in Australia.

Certain features described in this Privacy Policy may not be enabled at all times. Where we refer to features that may be introduced in the future, we will only collect or use information in connection with those features when they are made available.

2. Who can use Petty Cash

The Services are intended for users aged 18 years or over.

Petty Cash is not designed or marketed as a service for children.

Some parts of our website may be viewed without creating an account. However, marketplace functions such as listing, bidding, buying, selling, messaging and payment generally require an account and the provision of personal information.

3. Personal information we collect

The information we collect depends on how you use Petty Cash.

3.1 Account and contact information

When you create or maintain an account, we may collect:

• first name

• last name

• email address

• mobile number

• residential or other address

• profile photograph

• language preference

• password, authentication credentials or credentials-related information

• information associated with login through Apple, Google or another supported identity provider.

When you use a supported third-party login provider, we may receive information made available by that provider and authorised by you. Depending on the provider and information available, this may include:

• your name

• email address

• mobile number

• date of birth

• profile photograph

• address

• business information.

Payment setup and other progressive onboarding information is handled separately from social login.

3.2 Business information

If you register or operate as a business, contractor, tradesperson or other business user, we may collect:

• business name

• business type

• ABN

• business description

• industry or business category

• business verification status

• confirmation from you that the business belongs to or is represented by you.

We may check business information using ABN Lookup and the Australian Business Register.

A business account may display a verification badge where the applicable ABN or business details have been verified.

The verification badge relates to business or ABN verification. It should not be interpreted as a guarantee of a user’s identity, trustworthiness, creditworthiness, product quality or conduct.

3.3 Payment and financial information

When you buy or sell through Petty Cash, we may collect or process financial and payment information.

Depending on the payment flow, this may include:

• payment card details, including card number

• masked card details or the last four digits of a card

• payment tokens or payment method references

• bank account information, including BSB and account number where applicable

• payment status

• payout status

• transaction identifiers

• fees

• transaction and payment history.

In some purchase flows, payment card information may be held within Petty Cash systems hosted on AWS. Payment information stored by Petty Cash is protected using security controls including encryption in transit and, for applicable payment information, encryption at rest.

In other payment or payout flows, payment details are collected and processed by Stripe, with Petty Cash receiving or retaining payment references, tokens, status information or other information required to operate the transaction.

Stripe may independently collect and process payment and banking information in accordance with its own privacy terms.

3.4 Identity and payment verification information

Petty Cash’s own business verification primarily involves checking an ABN and recording the result or status of that check.

Stripe may separately perform identity, business, payment, fraud or regulatory verification. Information Stripe may request can include:

• driver’s licence

• passport

• selfie or facial image

• proof of address

• date of birth

• identity document number

• business information

• verification status or results

• other information required by Stripe for identity, fraud, payment, compliance or regulatory purposes.

Petty Cash may receive verification outcomes, account status information or other information from Stripe that is necessary to operate the Services.

3.5 Listing information

When you create, view or interact with a listing, we may collect information including:

• listing title

• listing description

• listing photographs

• category

• price

• quantity

• location information associated with the listing

• listing status

• listing creation and update timestamps

• listing history

• information about views, searches or interactions with the listing.

Listing photographs may be taken using your device camera or selected from your photo library.

3.6 Marketplace and transaction information

When you bid, make a partial bid, use Buy Now, buy or sell an item, we may collect:

• buyer account identifier

• seller account identifier

• listing identifier

• bid amount

• accepted amount

• quantity requested

• quantity purchased

• quantity accepted as part of a partial bid

• date and time information

• transaction status

• exchange code

• payment status

• fees

• transaction history.

Petty Cash facilitates the marketplace transaction but does not itself provide delivery or pickup services.

Buyers and sellers arrange the physical exchange of goods between themselves.

Petty Cash may provide an exchange code or similar functionality to assist the parties in confirming that an exchange has taken place.

We do not currently maintain a separate delivery or pickup status.

3.7 Location information

Depending on the features you use and the permissions you provide, we may collect or process:

• precise device location or GPS information

• IP address

• suburb

• postcode

• listing location

• location history

• map searches

• geographic areas viewed

• locations associated with marketplace activity.

Precise location may be used when creating a listing and to support location-based marketplace functionality.

When another user views a listing, Petty Cash may display:

• an approximate distance from the listing

• an approximate map location or map pin

• the suburb or general location associated with the listing.

We do not automatically publish a seller’s exact street address to other users.

Where an exact pickup or exchange location is required, the seller may choose to disclose that information directly to the buyer through the in-app chat.

Information voluntarily disclosed in a listing or chat can be seen by the recipients of that information.

3.8 Search and browsing activity

We may collect information about how you use and navigate the marketplace, including:

• searches performed

• listings viewed

• categories viewed

• map areas viewed

• interactions with listings

• marketplace activity

• navigation and session activity.

This information may be used to operate and improve the Services.

Petty Cash may also use this information in the future to provide features such as personalised listings, recommendations, saved-search experiences, relevant notifications or other personalised marketplace functionality.

3.9 Communications between users

Petty Cash provides in-app communication functionality so buyers and sellers can communicate in connection with listings and transactions.

We may hold:

• the content of messages

• the identity of the sender and recipient

• message timestamps

• the listing or transaction associated with the conversation

• questions relating to listings.

Petty Cash does not currently provide chat attachments or message delivery/read-status functionality.

Communications are intended to remain within the Petty Cash platform. Email addresses and mobile numbers are not displayed to other users as part of the normal marketplace experience.

Authorised Petty Cash personnel may access communications where reasonably necessary for:

• technical troubleshooting

• legal or regulatory compliance

• investigating reported content or conduct.

3.10 Ratings

Users may receive a publicly visible star rating.

We do not currently provide public written reviews as part of the rating functionality.

3.11 Reports about users or listings

Users may report marketplace content or activity.

A report may include:

• the relevant listing

• the reason for the report

• additional information supplied by the reporting user.

Petty Cash personnel may review reported content.

Where appropriate, Petty Cash may suspend or remove a listing or account.

We do not currently maintain a separate long-term history of enforcement actions, although information may be retained where reasonably necessary for legal, compliance, security or operational purposes.

3.12 Technical, device and diagnostic information

We may automatically collect technical information relating to your use of the Services.

This may include:

• IP address

• session information

• activity logs

• security logs

• event logs

• crash reports

• error reports.

Where a crash or technical error occurs, diagnostic information may also include:

• device type or model

• operating system and version

• Petty Cash app version

• device identifiers

• technical information associated with the error.

3.13 Support communications

If you contact us at support@pettycash.io, we may collect the information contained in your correspondence, such as:

• your name

• email address

• account information

• description of the issue

• screenshots or other information you provide

• previous correspondence relating to the request.

Support correspondence is generally retained within our support mailbox.

3.14 Marketing information

Where marketing functionality is enabled and you have provided the required consent, we may collect:

• marketing preferences

• email marketing consent

• SMS marketing consent

• push-notification preferences

• interaction with marketing messages

• advertising and campaign interaction information.

Marketing preferences may be managed separately for email, SMS and push notifications.

3.15 Waitlist information

Before launch or while a waitlist is operating, we may collect:

• name

• email address

• mobile number

• marketing preferences

• website interaction information

• information about interaction with waitlist communications.

Waitlist users are not automatically converted into Petty Cash accounts. A waitlist user must separately create an account to use the marketplace.

Waitlist information is used primarily for:

• managing the waitlist

• providing early-access information

• notifying users about launch

• communicating relevant Petty Cash updates

• measuring interest in Petty Cash.

The waitlist database is intended to be deleted one year after the launch of Petty Cash, subject to information that we need to retain for legal purposes, consent records or suppression records required to honour marketing opt-outs.

4. Information visible to other users

Marketplace participation involves sharing certain information with other users.

Depending on your account type and activity, other users may be able to see:

• your first and last name

• profile photograph

• business name, where applicable

• active listings

• the year you became a member

• your public star rating

• your business or ABN verification badge, where applicable.

A listing may also display:

• suburb or general listing location

• approximate distance

• approximate map pin

• information and photographs included in the listing.

Your email address and mobile number are not displayed to other users through the normal profile experience.

A seller may voluntarily disclose additional information through a listing or chat, including an exact exchange location.

You should only disclose information to other users that you are comfortable sharing.

5. User-generated content

Users are responsible for the content they upload, publish or communicate through Petty Cash.

This includes:

• listing photographs

• profile photographs

• listing descriptions

• messages

• questions

• information voluntarily provided to another user.

User-generated photographs or content may contain information relating to other people, such as faces, addresses, number plates, documents or other identifying information.

You are responsible for ensuring that you have the necessary rights and permissions to upload or disclose content through Petty Cash.

Petty Cash does not routinely or proactively scan all user-generated content.

Users can report content or listings where appropriate.

6. How we collect personal information

We may collect personal information:

Directly from you

For example, when you:

• create an account

• update your profile

• create a listing

• make a bid

• make a purchase

• sell an item

• communicate with another user

• provide payment information

• contact support

• join the waitlist

• provide marketing preferences.

Automatically

For example, through:

• app activity

• server logging

• cookies

• tracking technologies

• analytics software

• crash reporting

• device permissions

• IP information

• location functionality.

From third-party providers

This may include:

• Stripe

• Apple

• Google

• authentication providers

• analytics providers

• advertising providers

• payment and fraud-prevention providers.

From public sources

We may obtain publicly available business information through services such as:

• ABN Lookup

• Australian Business Register.

From other users

For example, another user may:

• transact with you

• send you a message

• give you a rating

• report a listing or account.

7. Device permissions

The Petty Cash app may request permission to access certain device capabilities.

Camera

Used to take photographs for:

• listings

• profile photographs.

Photo library

Used to select and upload photographs for:

• listings

• profile photographs.

Precise location

May be used to:

• establish or assist with a listing location

• support location-based marketplace functionality.

Notifications

Used for marketplace activity and account communications, including notifications connected with:

• bids

• purchases

• sales

• listing activity

• transaction progress

• exchange activity

• buyer and seller actions

• other relevant app events.

Where you separately consent to marketing notifications, notifications may also include promotional or personalised content.

Permissions can generally be controlled through your device settings. Disabling a permission may affect functionality that depends on that permission.

Petty Cash does not access or upload your device contact book.

8. How we use personal information

We may use personal information to:

Provide and operate Petty Cash

Including to:

• create and administer accounts

• authenticate users

• maintain profiles

• create and display listings

• provide search functionality

• show nearby listings

• facilitate bids and partial bids

• facilitate Buy Now purchases

• facilitate transactions between buyers and sellers

• provide messaging

• generate exchange codes

• maintain marketplace records.

Process payments and payouts

Including to:

• process purchases

• process seller payouts

• maintain transaction records

• calculate or record fees

• verify payment status

• manage payment methods

• detect payment issues.

Verify businesses and users

Including to:

• validate ABNs

• verify business information

• support payment-provider verification

• receive identity or verification outcomes

• reduce misuse of the Services.

Prevent fraud and protect the Services

Including to:

• identify potentially fraudulent transactions

• perform payment risk checks

• protect accounts

• monitor suspicious activity

• investigate misuse

• protect users and Petty Cash.

Provide location-based functionality

Including to:

• associate a location with a listing

• calculate approximate distance

• show relevant listings by location

• display approximate map information.

Communicate with you

Including:

• account communications

• transactional messages

• security messages

• marketplace notifications

• support responses

• waitlist communications

• service announcements.

Improve Petty Cash

Including:

• understanding which features are used

• improving search and listing flows

• measuring marketplace activity

• testing new functionality

• troubleshooting

• debugging

• improving performance

• analysing the conversion from signup to transaction

• understanding how users interact with the app and website.

Personalise the marketplace

We may use marketplace activity to provide or improve personalised experiences, including:

• relevant listings

• recommendations

• personalised notifications

• category suggestions

• search improvements.

The types of information used for this may include search activity, listing views, marketplace activity, previous transactions, category interests, saved preferences and location.

Not all personalisation features are currently enabled.

Comply with legal obligations

We may use information where reasonably necessary to:

• comply with laws and regulatory obligations

• respond to lawful requests

• investigate suspected unlawful conduct

• establish, exercise or defend legal rights

• respond to court orders or regulatory processes.

9. Artificial intelligence and automated features

9.1 AI-assisted listing descriptions

Petty Cash may provide an optional AI-assisted feature to help generate listing descriptions.

When you use this feature, Petty Cash may provide OpenAI with:

• the product title

• the product URL you provide.

The AI service may use information available through the linked product page to prepare a suggested description.

We do not intend to provide your Petty Cash account details to OpenAI as part of this listing-generation request unless required to provide or secure the functionality.

AI-generated descriptions are suggestions only.

You may:

• edit the generated description

• replace it

• choose not to use it.

Petty Cash does not require an AI-generated description to be published automatically.

9.2 Image analysis

Petty Cash may introduce automated image-recognition or image-analysis functionality in the future to support listing creation, marketplace functionality, safety or product improvement.

Where introduced, relevant information about its operation and any material privacy implications will be reflected in our Services or privacy notices as appropriate.

9.3 Automated fraud and risk processing

Stripe uses automated fraud and risk systems in connection with payment processing.

These systems may use information such as:

• transaction information

• payment information

• account information

• device or technical information

• verification information

• fraud and risk signals.

Automated risk processing may result in a payment being:

• approved

• declined

• blocked

• delayed

• flagged

• subjected to additional verification.

Petty Cash may in the future engage other fraud-prevention or risk service providers to assess accounts, profiles, transactions or related information against fraud, risk or misuse indicators.

9.4 Automated marketplace processing

Automated systems may also be used to:

• calculate distances

• determine geographically relevant listings

• rank or organise listings

• support recommendations or personalisation

• assist with marketplace functionality.

These processes may use information including location, marketplace activity, search activity and listing information.

10. Analytics, cookies and tracking technologies

Our website and app may use cookies, pixels, SDKs, tags and similar technologies.

These technologies may collect information such as:

• IP address

• browser or device information

• pages or screens viewed

• interactions

• session activity

• referral information

• advertising interactions

• conversion events

• technical performance information.

Providers and technologies we use or may use include:

• Google Analytics

• Meta Pixel

• Google Ads conversion tracking

• TikTok Pixel

• PostHog

• Cloudflare Analytics

• application session and security cookies

• advertising and retargeting technologies.

PostHog is primarily used for product and application analytics.

Sentry may be used for application diagnostics, error monitoring and crash reporting.

These technologies help us:

• understand website and app usage

• improve features

• measure performance

• identify errors

• understand conversion

• measure campaign effectiveness

• provide or measure advertising

• support retargeting and audience functions.

Some analytics and advertising technologies may activate when you access the website or use relevant Services.

You may be able to control certain cookies through your browser or device settings. Blocking certain cookies may affect website or app functionality.

Where consent is required by applicable law for a particular technology or use, we will obtain that consent as required.

11. Marketing and advertising

Where marketing functionality is enabled, Petty Cash may use personal information for:

• promotional emails

• SMS marketing

• newsletters

• promotional push notifications

• offers

• relevant listing notifications

• personalised recommendations

• digital advertising

• retargeting

• audience matching with advertising platforms such as Meta, Google or TikTok.

Where required, marketing consent will be obtained separately from general account creation.

Our intended marketing controls include:

• a separate unticked marketing consent option

• separate preferences for email, SMS and marketing push notifications

• an in-app marketing preferences screen

• the ability to withdraw marketing consent.

You can opt out of marketing at any time using:

• an unsubscribe link in an email

• an available SMS opt-out method

• applicable app marketing preferences

• device notification settings

• another method made available in the relevant communication.

Withdrawing consent to marketing does not prevent us from sending necessary service, security, account or transaction-related communications.

Where applicable, electronic marketing communications will be managed in accordance with the Spam Act 2003 (Cth).

We may retain limited information about an opt-out request so we can ensure marketing is not sent after you have unsubscribed.

12. Waitlist communications

Petty Cash may continue to hold information collected through our pre-launch waitlist.

Waitlist users may receive:

• early access information

• launch notifications

• product updates

• communications they agreed to receive.

Joining the waitlist does not create a Petty Cash marketplace account.

A waitlist participant must create an account separately if they wish to use the Services.

Depending on when you joined the waitlist, providers involved in waitlist communications may include:

• Klaviyo

• Twilio

• Amazon SES

• legacy Mailchimp services.

The waitlist database is intended to be deleted one year after launch, except where limited information must continue to be held for:

• legal requirements

• consent records

• suppression or unsubscribe records

• another permitted purpose.

13. Disclosure of personal information

We do not sell, rent, trade or license personal information as a product.

We may disclose personal information where necessary to provide, operate, protect or improve the Services.

13.1 Cloud and technology providers

This may include providers such as:

• Amazon Web Services (AWS) for cloud infrastructure and hosting

• Auth0 for authentication and account-related services

• Twilio for SMS services

• Amazon SES for email delivery

• Google Maps Platform for mapping and location functionality

• Firebase Cloud Messaging for push notifications

• Sentry for error and crash monitoring

• PostHog for product analytics

• Cloudflare for website security, delivery and analytics.

13.2 Payment, verification and fraud providers

This includes:

• Stripe for payment, payout, verification and fraud-prevention functionality

• other fraud, identity or risk service providers that we may engage in the future.

13.3 Analytics and advertising providers

Where relevant, information may be shared with providers including:

• Google

• Meta

• TikTok

• PostHog

• Cloudflare.

This may occur for:

• analytics

• advertising measurement

• conversion measurement

• retargeting

• audience matching

• campaign optimisation.

Where consent is required for a particular marketing or advertising activity, we will seek that consent as required.

13.4 Authentication providers

If you choose to sign in using a third-party provider, information may be exchanged with providers such as:

• Apple

• Google.

13.5 AI providers

Information required for AI-enabled functionality may be disclosed to providers such as OpenAI.

For AI-generated listing descriptions, this is generally limited to product-related inputs such as the product title and URL.

13.6 Legal and regulatory disclosures

We may disclose information where reasonably necessary or required:

• by law

• by a court or tribunal

• by a regulatory or law enforcement authority

• to establish or defend legal rights

• to investigate suspected fraud, misuse or unlawful conduct

• to protect Petty Cash, our users or others.

13.7 Corporate transactions

If Petty Cash is involved in:

• a merger

• acquisition

• sale

• financing

• restructure

• transfer of business or assets

• insolvency process

• similar corporate transaction,

personal information may be disclosed or transferred as part of that process, subject to applicable privacy obligations.

14. Overseas storage and processing

Petty Cash uses a combination of Australian and overseas service providers.

Our primary AWS environment is hosted in Sydney, Australia.

Auth0 services used by Petty Cash are configured in the Australian region and hosted on AWS infrastructure in Sydney.

Amazon SES is configured in the Asia Pacific (Sydney), ap-southeast-2 region.

Twilio services are configured using its AU1 Australian region where applicable.

Some information may nevertheless be stored, accessed or processed outside Australia.

Known examples include:

• United States, including services such as PostHog and Sentry

• Asia-Pacific locations, including locations used by Stripe.

Other global providers, including Google, Meta, TikTok, OpenAI, Apple and related technology providers, may process information through infrastructure located in Australia or other jurisdictions depending on their service configuration.

The specific countries used by global providers can change over time.

Where Australian privacy laws governing overseas disclosure apply, we take reasonable steps appropriate to the circumstances in relation to overseas handling of personal information.

By using global online and payment services, information may be subject to the laws of the country in which it is processed.

15. Data security

We take reasonable technical and organisational steps designed to protect personal information from:

• misuse

• interference

• loss

• unauthorised access

• unauthorised modification

• unauthorised disclosure.

Measures used by Petty Cash include:

• encryption in transit

• encryption at rest for applicable payment and PCI-related information

• role-based access controls

• system logging

• auditing

• controlled access to systems and information.

Access to personal information is restricted according to operational requirements and authorised roles.

No internet transmission, mobile application, payment system or electronic storage method can be guaranteed to be completely secure.

If we become aware of a security incident involving personal information, we will assess the circumstances and take steps required under applicable law, including notifications where legally required.

16. How long we retain information

We retain different categories of information for different periods depending on why the information is required.

We may retain personal information for as long as reasonably necessary to:

• provide the Services

• maintain marketplace and transaction records

• support security and fraud prevention

• troubleshoot technical issues

• meet legal or regulatory obligations

• resolve disputes

• protect or enforce legal rights

• maintain required business records

• honour marketing preferences and opt-outs.

Account closure

When an account is closed:

• profile information is removed from the active account experience

• active and historical listings are removed from the user’s normal marketplace view

• transaction history is removed from normal user-facing access, subject to any export functionality made available before or through account closure.

Certain underlying records may continue to exist in Petty Cash backend systems.

This may include:

• transaction records

• payment information or payment references

• chats

• ratings

• marketplace records

• technical or security records.

These records are not ordinarily available through the closed user account but may remain accessible to authorised personnel where required for a permitted operational, legal, compliance, security or recordkeeping purpose.

We do not currently apply a single fixed retention period to all transaction, chat, location, logging or device information.

Where personal information is no longer required for a permitted purpose, we will take reasonable steps to delete or de-identify it where required by applicable law.

Search history

Users may request deletion of their search history.

Support records

Support communications are retained in our support mailbox. We do not currently apply a fixed deletion period to support correspondence.

Waitlist

Waitlist data is intended to be deleted one year after launch, subject to limited records that need to be retained for permitted purposes such as unsubscribe suppression records or legal requirements.

Aggregated and de-identified information

We may retain aggregated or de-identified information after an account is closed.

Where information has been genuinely de-identified so that it is no longer personal information, we may retain and use it indefinitely for purposes including:

• business reporting

• investor reporting

• marketplace analysis

• product planning

• transaction-volume analysis

• category analysis

• geographic demand analysis

• statistical analysis.

17. Your choices and privacy controls

17.1 Updating your information

You can update certain profile information directly through the app.

You should keep your information accurate and current.

If information cannot be updated through the app, you may contact us to request correction.

17.2 Account deletion

You may request account deletion through the Petty Cash app.

Deleting an account removes the account from normal user-facing Services, but does not necessarily result in immediate deletion of every underlying record where information needs to be retained for a permitted purpose described in this Privacy Policy.

17.3 Search-history deletion

You may request deletion of your search history using functionality made available through Petty Cash.

17.4 Transaction-history export

Business users may have access to functionality that allows them to export transaction history relating to their business activity.

This transaction export is not necessarily an export of all personal information held by Petty Cash.

17.5 Location permissions

You may manage device location permissions through your device settings.

Disabling location access may affect features that depend on location.

17.6 Notification permissions

You may manage push-notification permissions through your device settings and, where available, Petty Cash notification preferences.

17.7 Marketing preferences

You may withdraw marketing consent at any time.

Marketing preferences may be managed separately for:

• email

• SMS

• marketing push notifications.

18. Access to and correction of personal information

Subject to applicable law, you may request access to personal information we hold about you or request that inaccurate, out-of-date, incomplete, irrelevant or misleading personal information be corrected.

Many account details can be reviewed or updated directly through the Petty Cash app.

For information that cannot be accessed or corrected through the app, you can contact us using the details in section 23.

We may need to verify your identity before providing access to personal information or making certain changes.

There may be circumstances where we are permitted or required by law to refuse access or correction. Where applicable, we will explain the reason for that decision.

19. Marketing opt-out

You may stop receiving promotional communications at any time.

Depending on the communication, you can opt out by:

• using an unsubscribe link

• following SMS opt-out instructions

• changing marketing preferences in the app

• disabling marketing push notifications

• contacting us.

We may retain your email address, mobile number or other limited information on a suppression list where necessary to ensure that we continue to honour your request not to receive marketing.

Service, transaction, security and account messages are different from marketing messages and may continue where necessary to provide the Services.

20. Third-party websites and services

Petty Cash may contain links to:

• product pages

• external websites

• third-party services.

Petty Cash is not responsible for the privacy practices, security or content of third-party websites or services that are not controlled by Petty Cash.

You should review the privacy terms of any third-party service you use.

21. Privacy complaints

If you believe Petty Cash has mishandled your personal information, you may make a privacy complaint.

Please provide enough information for us to understand:

• the nature of your concern

• the relevant account or activity, where applicable

• what occurred

• what outcome you are seeking.

We will review privacy complaints and aim to respond within a reasonable period.

If your concern is not resolved and the Privacy Act applies to the matter, you may be entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC).

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to Petty Cash

• new functionality

• changes to our providers

• changes to how information is handled

• legal or regulatory developments.

When we update the policy, we will update the “Last updated” date.

Where an update materially changes how personal information is handled, we may provide additional notice through the website, app or another appropriate channel.

Where consent is legally required for a new use of personal information, an update to this Privacy Policy will not by itself replace that consent.

23. Contact us

For privacy enquiries, access or correction requests, or privacy complaints, contact:

Petty Cash App Pty Ltd
ACN 692 699 059
ABN 30 692 699 059
Registered office locality: Barangaroo NSW 2000
Australia

Email: support@pettycash.io

For ordinary account functions, users should first use the relevant controls available within the Petty Cash app where possible.

© 2026 Petty Cash App Pty Ltd. All rights reserved.