Digisurge Pty Ltd ("Digisurge", "we", "us") operates Odin Dealer ("the Service"), a customer relationship management platform for Australian automotive dealerships, and publishes the Google and Microsoft integrations the Service relies on. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
We collect information you provide directly when using the Service, including account details, dealership data, customer contact records, and the content of communications you create or sync. We also collect technical information such as IP addresses, browser type, and usage logs.
Where a user chooses to connect a Google or Microsoft account, the Service requests only the OAuth scopes needed for the feature being used, and only after the user grants consent:
We access this data solely to provide the user-facing features described above. We do not use it to train generalised artificial intelligence or machine learning models, we do not sell it, and we do not use it for advertising.
Odin Dealer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to provide or improve user-facing features that are prominent in the Service, is not transferred to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition, is never used for advertising, and is never read by humans unless we have the user's explicit consent, it is necessary for security or to comply with applicable law, or the data is aggregated and used for internal operations in line with the policy.
We use collected information to operate, secure, and improve the Service, authenticate users, sync calendars and email through Google and Microsoft, send transactional notifications, and meet our legal obligations under Australian law.
All data is stored in Amazon Web Services data centres located in Sydney, Australia (ap-southeast-2). Each dealership's data is isolated in its own database. Data in transit is encrypted with TLS 1.2 or higher, and OAuth tokens and other sensitive fields are encrypted at rest.
When a user disconnects a Google or Microsoft account, or a user is deactivated, the associated access and refresh tokens are revoked and synced message content is purged. When a dealership leaves the Service, its data is retained for 30 days and then permanently deleted, unless we are required to retain it by law.
Under the Australian Privacy Principles you may request access to, or correction of, the personal information we hold about you. Dealerships can also export the data held about an individual on request. To make a request, contact us using the details below.
For privacy enquiries, contact shaun@digisurge.com.au.
Last updated: 8 June 2026