Licensing and terms
Where the data comes from
Addresses, coordinates and mesh blocks come from the Geocoded National Address File, published by Geoscape Australia and distributed through data.gov.au under the Creative Commons Attribution 4.0 licence. We load each quarterly release and return its identifiers unchanged.
Incorporates or developed using G-NAF © Geoscape Australia licensed by the Commonwealth of Australia under the Open Geo-coded National Address File (G-NAF) End User Licence Agreement.
What you may do with what you get back
The licence is attribution, so you may use the data commercially, store it, and build on it. What it asks in return is credit. If you display addresses that came from here, say where they came from: a line in a footer or an about page naming G-NAF and Geoscape Australia satisfies it.
You do not need to credit us. The obligation belongs to the data, not to the service.
Terms of the service
The API is offered without warranty. G-NAF is the national address register and is very good, but no address dataset is complete or current everywhere at once, and you should not treat a resolved address as proof that a place exists or that somebody lives there.
Keys are yours to look after. A key found in a public repository or a shipped application may be revoked without notice, because the alternative is somebody else spending your quota.
Plans are billed monthly through Stripe and cancellable at any time. The period you have paid for runs to its end. Usage past a plan's allowance is billed at the rate on the pricing page; the free tier stops instead, because there is no invoice to add it to.
We may suspend an account that is degrading the service for other customers, and will try to reach you first. There is no daily limit hidden behind that sentence: the limits are the ones published on the pricing page and returned in the headers of every response.
Privacy
Addresses you look up are not stored against your account. We count requests and units, because that is what the meter and the invoice are made of, and we keep the queries themselves only in transient logs.
An account holds an email address, which lives with our identity provider, and the hashed form of each API key. A key is stored as a SHA-256 digest, so a dump of our database cannot call the API.