Legal
Privacy Policy
Last updated: March 2026
Frly is operated by Frly (ABN 58 240 786 021), based in Melbourne, Australia. This policy explains what information we collect, how we use it, and your rights under the Australian Privacy Act 1988.
Short version: We collect only what we need to lodge your BAS. We don't sell your data. We don't share it with anyone except the ATO and the services required to run Frly.
What we collect
When you sign up or use Frly, we may collect:
- Your name and email address
- Your ABN and GST registration details
- Income and expense information you provide during the BAS flow
- Platform data you enter (e.g. Uber, DoorDash, DiDi earnings)
- Payment information processed via Stripe (we never store card details directly)
- Basic usage data such as pages visited and actions taken within the app
How we use your information
We use your information to:
- Prepare and lodge your Business Activity Statement with the ATO
- Send you confirmation emails and BAS deadline reminders
- Process payments securely via Stripe
- Improve the Frly product and fix bugs
- Comply with our obligations as a registered BAS agent
We do not use your information for advertising, profiling, or sale to third parties.
Who we share it with
We only share your information with:
- The ATO — to lodge your BAS on your behalf
- Stripe — to process payments securely
- Resend — to send transactional emails (confirmations, reminders)
- Anthropic (Claude) — to power the conversational BAS flow. Data sent to Claude is not used to train AI models under our enterprise agreement
We do not sell, rent, or trade your personal information.
Data storage and security
Your data is stored securely in Australia. We use industry-standard encryption in transit (TLS) and at rest. Access to your data is restricted to authorised Frly personnel only.
While we take reasonable steps to protect your information, no system is completely secure. If we become aware of a data breach that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
Retention
We retain your tax records for 7 years, as required by the ATO. You can request deletion of your account and non-tax data at any time by emailing us.
Your rights
Under the Australian Privacy Act, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and non-ATO data
- Complain to the OAIC if you believe your privacy has been breached
Cookies
We use minimal cookies — primarily for Google Analytics (to understand how people use the site) and to keep you logged in. We don't use advertising or tracking cookies.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify you by email. The current version is always available at frly.app/privacy.
Contact us
If you have questions about this policy or want to exercise your privacy rights, email us at [email protected]. We'll respond within 5 business days.