Private work.
Handled with care.
Updated 5 October 2026.
REALMSTRY PTY LTD · ABN 44 690 348 853. Contact: info@realmstry.com.
Business contact address: Level 1, 63–73 Ann Street, Surry Hills NSW 2010, Australia
What we collect and why
We collect your email for sign-in, your name and enquiry details to respond, and membership, payment-status and session details to deliver the service. Your workspace stores the ambitions, decisions, tasks and notes you choose to save. Stripe handles card and payment details; full card numbers are not stored in Realmstry’s database. Security records include limited request identifiers, login attempts and session expiry.
Please avoid health information, financial account details, passwords or confidential information about others. We do not need these for the Club. The service is for adults.
How your information is used
Where GDPR applies, account, enquiry and membership processing is assessed as necessary for the contract or requested pre-contract steps. We use a legitimate interest in protecting accounts, preventing abuse and handling disputes, subject to your rights. Optional analytics and advertising rely on your choice. We retain records where required by applicable law; we assess the appropriate GDPR basis separately. A service enquiry does not subscribe you to marketing.
Who can see it
Private project records belong to your account. Other members cannot access them. The host receives your enquiry and membership information, and sees work you deliberately share during sessions. Authorised technical access may be needed for support or security, with access limited to the task. No recordings or automatic transcripts are made as part of the current offer.
Service providers and overseas handling
Realmstry uses OpenAI Sites and Cloudflare for hosting and storage, Stripe for payments, Resend for login codes and service messages when email delivery is connected, and Google’s meeting service for sessions. Optional Google and Meta measurement is described in Cookies. Providers may process information outside Australia and outside your country. We do not claim that all data remains in Australia.
Before opening international membership, we must verify provider processing terms, applicable transfer safeguards and any required EU or UK representative arrangements. Contact us for the current provider and transfer details.
First-party website analytics
If you allow analytics, we record public marketing-page views, a broad referring-source category, and an approximate daily visitor count in our own hosting database. A keyed daily digest replaces the incoming IP address and browser type; those raw values are not saved in analytics. This is separate from enquiry records and does not track private account or workspace pages. Analytics records expire after 90 days and are cleaned when new activity arrives. Change your choice through Cookie preferences.
Retention
Login codes expire after 10 minutes; email sessions expire after seven days. During routine maintenance, we remove closed enquiries older than 12 months and service email copies older than 90 days after successful delivery. The owner also has an explicit cleanup control. Your workspace remains available while your account is open; you can export it, delete its contents, or request account erasure. Financial and dispute records are kept separately for the period required by applicable law, rather than retaining private project notes for accounting purposes. Deletion requests are assessed and handled through the rights process; they do not silently leave an active renewal unresolved.
Your choices and rights
You can access and correct profile and workspace information, download account data, and request access, correction, erasure, restriction, portability or objection where applicable. Withdraw optional consent through Cookie preferences. Use the rights form or contact us. We verify identity before disclosing or deleting account data and ordinarily respond within one month where GDPR applies. If more time or an exception is needed, we explain it.
Complaints and updates
Contact us to raise a privacy concern. Where applicable, you may also complain to the Office of the Australian Information Commissioner, your EU supervisory authority or the UK Information Commissioner. We update this notice when our practices materially change and provide appropriate notice. No website or storage system can promise absolute security.