AutoSat Privacy Policy

Effective date: 1 July 2026

Mawson Rovers Pty Ltd (ABN 11 656 018 405) (Mawson Rovers, we, us or our) operates AutoSat, a software platform for satellite and space mission operations.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you:

• use AutoSat or another service we provide;
• visit our website;
• communicate with us; or
• otherwise deal with Mawson Rovers.

It also explains how you may access or correct your personal information and make a privacy complaint.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us.

1. Personal information we collect

The personal information we collect depends on how you interact with us and may include:

• your name, work contact details, job title and organisation;
• account details, authentication information and user preferences;
• billing and transaction information;
• communications with us, including support requests and feedback;
• information about how you access and use AutoSat, such as IP address, device and browser information, login records, audit logs and usage data;
• information provided through integrations with services you or your organisation connect to AutoSat; and
• other information you choose to provide.

We generally do not need or seek to collect sensitive information. Please do not provide sensitive information unless it is reasonably necessary and you have consented to our collection of it, or its collection is otherwise permitted by law.

2. Customer Data

AutoSat customers may submit or generate data through the service, including user information, messages, operational records and other content (Customer Data).

Our customers decide what Customer Data they provide to AutoSat and are responsible for ensuring that they have an appropriate basis for collecting and providing any personal information contained in it.

We handle personal information in Customer Data to provide AutoSat, support the customer, maintain security and reliability, and follow the customer’s lawful instructions. Requests concerning personal information contained in Customer Data should generally be directed to the relevant AutoSat customer in the first instance.

3. How we collect personal information

We may collect personal information:

• directly from you;
• from your employer or another organisation that gives you access to AutoSat;
• automatically when you use our websites or services;
• from services that you or your organisation connect to AutoSat;
• from service providers acting on our behalf; and
• from publicly available sources where appropriate.

We generally need to identify individuals when providing AutoSat accounts, administering customer relationships, processing payments, providing support, maintaining security or meeting legal obligations.

4. Why we collect and use personal information

We may collect, use and disclose personal information to:

• provide, operate, maintain and improve AutoSat and our other services;
• create and administer accounts;
• authenticate users and maintain security;
• process payments and manage our customer relationships;
• provide onboarding, support and service communications;
• investigate faults, misuse, security incidents and suspected unlawful activity;
• understand how our services are used and improve their performance and usability;
• communicate about our services, including relevant product updates and business communications;
• recruit and assess personnel and contractors;
• comply with legal obligations and respond to lawful requests; and
• establish, exercise or defend legal rights.

We may also use personal information for another purpose where you have consented or where permitted or required by law.

5. Direct marketing

We may send business customers and prospective customers information about AutoSat or related services where permitted by law.

You may opt out at any time by using the unsubscribe facility in the communication or contacting us. We may still send service, security, billing and other non-marketing messages where necessary.

We do not sell personal information.

6. Cookies and analytics

Our websites and services may use cookies, local storage and similar technologies to:

• keep you signed in;
• remember settings;
• maintain security;
• understand use of our services; and
• improve performance and usability.

You may be able to control cookies through your browser settings. Disabling some cookies may affect the operation of our websites or services.

7. Disclosure of personal information

We may disclose personal information to:

• personnel and contractors who need it to perform their duties;
• hosting, infrastructure, communications, identity, analytics, support, billing, professional-advisory and other service providers;
• services that you or your organisation choose to connect to AutoSat;
• a purchaser, investor or adviser in connection with a proposed or completed financing, merger, acquisition, reorganisation or sale of all or part of our business;
• regulators, courts, law-enforcement bodies and government agencies where permitted or required by law; and
• other parties with your consent or at your direction.

We require service providers to handle personal information only for authorised purposes and to apply appropriate protections.

8. Overseas handling

Some of our service providers or their personnel may store, process or access personal information outside Australia.

The countries involved may vary depending on the services used by a particular customer and the infrastructure or integrations they select.

Where the Australian Privacy Principles apply, we take reasonable steps required by law in relation to overseas disclosures of personal information.

9. Security

We use reasonable technical and organisational measures designed to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include access controls, authentication, encryption, logging, monitoring, backups, personnel controls and security procedures appropriate to the nature of the information.

No method of electronic transmission or storage is completely secure. You are responsible for protecting your account credentials and notifying us promptly if you suspect unauthorised access to your account.

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme.

10. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide our services, comply with legal and accounting obligations, resolve disputes and maintain security.

Retention periods vary according to the type of information, the relevant customer relationship and applicable legal requirements.

When personal information is no longer required, we take reasonable steps to delete it or de-identify it, unless we are required or permitted by law to retain it.

Customer Data is handled in accordance with our agreement with the relevant customer and our backup and deletion processes.

11. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, contact us using the details below. We may need to verify your identity before responding.

We will respond within a reasonable period. We may refuse or limit access or correction where permitted by law. If we do so, we will generally provide written reasons and explain how you may complain.

We do not charge for making a request. We may charge reasonable costs for providing access where permitted by law and will tell you about any proposed charge in advance.

12. Privacy complaints

You may contact us if you have a question or complaint about how we handle personal information.

Please provide enough information for us to understand and investigate the issue. We will acknowledge your complaint and aim to respond within 30 days, although a complex matter may take longer.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.

13. Third-party services and links

AutoSat may integrate with third-party services, and our websites may contain links to third-party sites.

Those third parties handle personal information under their own privacy policies and terms. We are not responsible for their independent privacy practices.

14. Children

AutoSat is a business service and is not directed to children. We do not knowingly collect personal information directly from children for the purpose of providing individual accounts without appropriate authorisation.

15. Changes to this policy

We may update this Privacy Policy from time to time.

We will publish the updated policy and change the effective date above. If a change materially affects how we handle personal information, we will take reasonable steps to notify affected users or customers.

16. Contact us

For privacy questions, requests or complaints, contact:

Privacy Officer
Mawson Rovers Pty Ltd
ABN: 11 656 018 405
Address: Suite 145, 2–4 Cornwallis St, Eveleigh NSW 2015, Australia
Email: info@mawsonrovers.com