Terms of Use & Privacy Policy

1. Acceptance of Terms

By accessing or using ImmunaStock (the "Service"), you agree to be bound by these Terms of Use ("Terms"). If you are using the Service on behalf of an organisation — such as a medical practice — you represent that you have the authority to bind that organisation to these Terms, and "you" refers to both you individually and that organisation.

If you do not agree to these Terms, do not access or use the Service.

We may update these Terms from time to time. Continued use of the Service after changes are posted constitutes acceptance of the revised Terms. We will make reasonable efforts to notify you of material changes via email or in-app notification.

2. Description of Service

ImmunaStock is a cloud-based vaccine stock management platform designed for Australian general practices and immunisation providers. The Service includes features for vaccine stocktake, stock-in and stock-out recording, order form generation, discard reporting, and user management within a practice.

The Service is operated by Motta Consulting ("we", "us", "our"). We reserve the right to modify, suspend, or discontinue any part of the Service at any time with reasonable notice.

3. User Accounts

Access to the Service requires a registered account. You are responsible for:

• Maintaining the confidentiality of your login credentials.
• All activity that occurs under your account.
• Ensuring that your account information is accurate and up to date.
• Notifying us immediately of any unauthorised use of your account at info@mottaconsulting.com.au.

Each practice account ("Tenant") is managed by a designated administrator. The administrator is responsible for managing user access and ensuring that all users within their practice comply with these Terms.

You must not share your login credentials with others or allow multiple individuals to use a single account.

4. Acceptable Use

You agree to use the Service only for its intended purpose — the legitimate management of vaccine stock within an Australian healthcare setting. You must not:

• Use the Service for any unlawful purpose or in violation of any applicable laws or regulations.
• Attempt to gain unauthorised access to any part of the Service, or to any other user's account or data.
• Upload, transmit, or store patient-identifiable health information in the Service.
• Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service.
• Use automated means (bots, scrapers) to access the Service without our prior written consent.
• Transmit viruses, malware, or any other code that may damage or interfere with the Service.
• Resell, sublicense, or otherwise commercialise access to the Service without our written permission.

We reserve the right to suspend or terminate any account that we reasonably believe is in breach of this section.

5. Subscription & Payment

Free Trial. New practices are entitled to a 30-day free trial upon registration. No credit card is required to start a trial. At the end of the trial period, continued access requires a paid subscription.

Paid Plans. Subscription fees are charged monthly in Australian dollars (AUD) as per the pricing displayed on our website at the time of sign-up. Prices are inclusive of GST where applicable.

Billing. Subscriptions are billed monthly in advance. You authorise us to charge your nominated payment method on a recurring basis.

Cancellation. You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. We do not provide refunds for partial periods.

Price changes. We will provide at least 30 days' notice of any price increase. Continued use after the effective date constitutes acceptance of the new pricing.

Non-payment. If payment fails, we may suspend access to the Service until outstanding amounts are settled. We will make reasonable efforts to notify you before suspending access.

6. Intellectual Property

All intellectual property rights in the Service — including software, design, trademarks, and content — are owned by or licensed to Motta Consulting. These Terms do not grant you any rights to our intellectual property other than the limited right to use the Service as described herein.

Your data. You retain ownership of all data you input into the Service ("Your Data"). By using the Service, you grant us a limited, non-exclusive licence to store, process, and display Your Data solely for the purpose of providing the Service to you.

We will not use Your Data for any purpose other than operating and improving the Service, and we will not sell Your Data to third parties.

7. Disclaimers

The Service is provided "as is" and "as available" without warranty of any kind, express or implied. To the maximum extent permitted by applicable law, we disclaim all warranties including, but not limited to, implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that:

• The Service will be uninterrupted, error-free, or secure.
• Any errors in the Service will be corrected within a specific timeframe.
• Output generated by the Service (including order forms and reports) will satisfy all requirements of any particular immunisation program or regulatory body.

You are responsible for verifying that all stock records and generated documentation are accurate and comply with the requirements of your relevant immunisation program (e.g. QHIP) before submission.

8. Limitation of Liability

To the maximum extent permitted by law, Motta Consulting shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, loss of data, or business interruption, arising out of or related to your use of the Service.

Our total cumulative liability to you for any claims arising under or related to these Terms shall not exceed the total fees paid by you to us in the three (3) months preceding the event giving rise to the claim.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under the Australian Consumer Law, including guarantees as to acceptable quality and fitness for purpose.

9. Termination

Either party may terminate the agreement at any time. You may do so by cancelling your subscription and ceasing use of the Service. We may terminate or suspend your access immediately if:

• You materially breach these Terms and fail to remedy the breach within 14 days of notice.
• We are required to do so by law.
• We reasonably believe continued access poses a security or legal risk.

Data on termination. Upon termination, your data will be retained for 30 days, during which time you may request an export. After 30 days, we may delete your data permanently. We strongly encourage you to export your data before terminating.

10. Governing Law

These Terms are governed by and construed in accordance with the laws of Queensland, Australia. You agree to submit to the exclusive jurisdiction of the courts of Queensland for any disputes arising out of or related to these Terms or your use of the Service.

If any provision of these Terms is found to be unenforceable, the remaining provisions will continue in full force and effect.

11. Information We Collect

We collect the following categories of information:

Account & practice information

• Full name and work email address of registered users.
• Practice name, email domain, and subscription status.
• User roles within a practice (e.g. administrator, stock manager).

Usage data

• Stock records entered into the Service (vaccine names, quantities, batch numbers, expiry dates).
• Actions performed within the Service (stock-in, stock-out, discards, order submissions).
• Login timestamps and general usage patterns.

Technical data

• IP addresses, browser type, device type, and operating system (collected automatically).
• Session tokens used for authentication.

12. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Manage user accounts and practice tenancies.
• Process subscription payments and communicate billing information.
• Send transactional emails (account invites, password resets, join request notifications).
• Respond to support requests and enquiries.
• Monitor for security incidents and prevent misuse.
• Improve the Service based on aggregated, de-identified usage patterns.
• Comply with our legal obligations.

We will not use your personal information for direct marketing without your explicit consent. We will never sell your personal information to third parties.

13. Data Storage & Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Security measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Role-based access controls so users can only access their own practice's data.
• Authentication controls including password hashing and optional multi-factor authentication.
• Regular review of access permissions and security practices.

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.

14. Data Sovereignty

We understand that data sovereignty is important to Australian healthcare providers. Our primary database infrastructure is hosted within Australia, and we make every reasonable effort to keep your data within Australian borders.

Where data is transferred overseas, we take reasonable steps to ensure that the overseas recipient handles the information in a manner consistent with the Australian Privacy Principles, in accordance with APP 8.

15. Third-Party Services

We use the following third-party services to operate ImmunaStock. Each has its own privacy policy and data practices:

• Supabase — database, authentication, and backend infrastructure. Data is stored in Supabase's Australia (Sydney) region where available. Supabase is subject to its own Privacy Policy.
• Vercel — web hosting and content delivery. Vercel operates a global CDN which may serve cached assets from servers outside Australia. See Vercel's Privacy Policy.
• Resend — transactional email delivery (invites, notifications, password resets). Email metadata may be processed on servers outside Australia. See Resend's Privacy Policy.

We do not share your personal information with any other third parties except where required by law or with your explicit consent.

16. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Correct personal information that is inaccurate, out of date, or incomplete.
• Request deletion of your personal information, subject to any legal obligations we have to retain it.
• Opt out of any direct marketing communications (where applicable).
• Complain about our handling of your personal information.

To exercise any of these rights, please contact us using the details in Section 18. We will respond to access and correction requests within 30 days.

We may need to verify your identity before processing a request. In some circumstances we may decline a request where permitted by law, and will explain why if that occurs.

17. Cookies & Tracking

ImmunaStock uses session cookies and browser storage (localStorage / sessionStorage) solely for the purpose of maintaining your authenticated session and facilitating secure login flows. We do not use cookies for advertising or behavioural tracking.

Our landing page does not use third-party analytics or advertising cookies. If this changes, we will update this policy and seek consent where required.

You can disable cookies through your browser settings, but doing so may prevent you from logging in to the Service.

18. Contact & Complaints

For any privacy-related enquiries, access requests, or complaints about how we handle your personal information, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):