TrueVault Pty Ltd (ACN 675 825 966)
Version TV-DCS-V2.0 - Updated 18 September 2026
This Data Collection Statement sets out details of how and why TrueVault Pty Ltd ACN 675 825 966 (“TrueVault”, “we”, “us” or “our”) collects personal information. In this Statement, “you” refers to any individual about whom we collect personal information in Australia.
What personal information do we collect?
We collect personal information that is information that identifies you or information by which your identity can reasonably be ascertained and may include an opinion about you. We also collect “sensitive information” as defined by the Privacy Act 1988 (Cth) - biometric information, and a signature sample where you use TrueVault to sign a document - from you.
How and why we collect personal and sensitive information
We collect personal and sensitive information to register and manage your user account and to provide you with the services you have requested from us.
Personal information we will typically collect includes your name, contact details, including phone number, address and email address, account login information (including registration usernames), details of the services you have used, together with any additional information necessary to deliver those services and respond to your queries.
We collect your personal information when you use our services or interact with us, including when you create a user account with us as a registered user on our website or web portal, by telephone, email or online communication with one of our representatives, or when you access or use our website or social media sites or participate in surveys. We may also collect personal information about you from third parties where you have agreed with them that your information may be disclosed to us, such as via social media platforms.
We typically use your personal information to:
- provide you with the credentialing services you have requested
- respond to your queries and requests, and resolve complaints
- keep a record of our dealings with you and contact you when necessary
- comply with our legal obligations
We check an identity document - a driver’s licence, passport, change-of-name document, proof-of-age card, government card, birth or marriage certificate - with the authority that issued it, and then delete the file. We do not keep document files, scans or images after the check is complete, and we do not keep document numbers in the clear.
What we keep is your name and contact details, your date of birth, the document expiry date where the check returns it, a partially masked document reference (for example AB******9), the outcome of the verification, and the biometric binding that lets you prove your identity again. That is the whole list.
A document may show other sensitive information - organ donor status, health details, or information about your relationships. We do not extract it, use it or keep it, and it goes with the document image.
Each time you verify again, we capture a new image of your face and add it to your profile, so that we keep recognising you accurately over time. We use those images only to confirm it is you. We do not use them to test or improve our matching or liveness detection.
Where you ask us to obtain a check such as a nationally coordinated criminal history check or a court records check, we obtain it through an accredited provider, with your separate consent, and we tell you who will receive the result and how long it is kept.
We collect sensitive information only where it is reasonably necessary for one or more of our functions or activities, and only with your consent.
Are we required by law to collect your personal information?
No, we are not required by law to collect personal information from you in order to provide our services.
Consequences if personal information is not collected
The main consequence of us not collecting your personal information is that we will not be able to provide our primary service of credentialing or confirming an identity. For other services, we may not be able to provide the services or information you requested, or to provide them to the same standard.
Sharing personal information
We may share your personal information with third-party businesses that contract with us, and with contractors, agents or service providers that carry out functions on our behalf and assist us to deliver our services.
We also share your verified facts with a business at your direction, when you ask us to verify you to that business. You can see who has verified you, and you can withdraw a business’s access.
We store your personal information in Australia, and we do not disclose biometric information overseas ever, and under no circumstance, including a business continuity event. There is one circumstance in which identity information leaves Australia in the ordinary course: where you ask us to verify a credential issued overseas - currently only an Indian identity credential - we send the minimum information that check needs to the authority that issued it, in that country, and only with your consent at the point of verification. Foreign passports are verified through the Australian VEVO service and do not leave Australia.
Separately, in a business continuity situation we may temporarily engage overseas processors to keep the service available. Currently this may include processors in Singapore and the United States. Your biometric information is never disclosed to them. We use them only for as long as the situation requires, and we keep the information disclosed to the minimum necessary to keep the service running.
We will never supply, sell or in any other knowing way make available your personal information to other parties other than in the circumstances outlined above, unless you authorise us to do so.
Our Privacy Policy
More detailed information about the way we use and disclose your personal information is set out in our Privacy Policy, which also explains how to opt out of marketing communications, how you can seek access to and correct your personal information, and how to raise a privacy concern.
This Statement and the Privacy Policy are read together. Where they differ, the Privacy Policy governs.
Contacting us
Privacy Officer
TrueVault Pty Ltd ACN 675 825 966
Email: support@truevault.com.au