Privacy Policy

1. Information we collect

• Account & organisation: name, email, display name, avatar, organisation name and members, and authentication details.
• Content you provide: documents you upload and text you input, and the outputs generated for you (Your Content). Your Content may contain personal information if you choose to include it — please only include personal information you are permitted to.
• Billing: subscription and credit records, and limited payment details. Card payments are processed by our payment provider; we do not store full card numbers.
• Usage & technical: log data, device/browser information, and activity within the Service, used to operate, secure and improve it.

2. How we use information

• to provide, maintain, secure and support the Service and generate outputs for you;
• to process payments, manage subscriptions and credits, and prevent fraud and misuse;
• to communicate with you about your account and the Service; and
• to analyse, develop and improve our products and services, including to train, fine-tune and evaluate artificial-intelligence models(our own and our providers’), as permitted by our Terms.

3. AI processing and model training

The Service uses artificial-intelligence models (our own and third-party providers’) to generate outputs. Content you submit is processed by these models to produce outputs, and — as set out in our Terms — we may use Your Content and outputs to improve and train models. AI processing may occur on infrastructure located outside Australia. If you do not want particular content used in this way, do not submit it to the Service and contact us to discuss your options.

AI-generated outputs are drafts. Consistent with the Standards for RTOs and ASQA’s guidance on the use of AI in vocational education and training, a suitably qualified person must review and approve any output before it is used with learners or for any assessment, compliance or audit purpose — the Service provides a built-in review-and-approval workflow to support this (see our Terms, section 3).

4. Who we share information with

We share information with service providers who help us run the Service, under obligations of confidentiality and data protection, including:

• Hosting & database (Supabase), with our primary data region in Sydney, Australia;
• AI processing (third-party artificial-intelligence infrastructure providers, which process document content to generate outputs on our behalf, and may process content outside Australia);
• Payments (Stripe); and
• Email delivery (Resend).

We may also disclose information where required or authorised by law, to protect our rights or safety or those of others, or in connection with a business transfer. We do not sell your personal information.

5. Cross-border disclosure

Because we use AI and other providers that operate globally, your information (including Your Content) may be stored or processed overseas. By using the Service you acknowledge and consent to such disclosure. Where APP 8 applies we will take reasonable steps to ensure appropriate handling, but you acknowledge we may not be able to ensure an overseas recipient complies with the APPs and, to the extent permitted by law, we are not liable for their acts.

6. Storage, security and retention

We take reasonable steps to protect information from misuse, loss, and unauthorised access, including access controls and encryption in transit. No system is completely secure. We retain information for as long as needed to provide the Service and for our legal, accounting and audit purposes, then delete or de-identify it.

7. Your rights

You may request access to, or correction of, the personal information we hold about you, and you may contact us with a privacy question or complaint. We will respond within a reasonable time. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

8. Cookies

We use cookies and similar technologies that are necessary to sign you in, keep the Service secure, and remember your preferences. You can control cookies through your browser, though some features may not work without them.

We also use analytics tools (including PostHog) to understand how the Service is used, which may record page views and interactions such as clicks, navigation and text entered while using the Service, to help us improve the product. Sensitive fields such as passwords are always masked and never captured.

9. Children

The Service is not intended for children and is for use by adults acting for RTOs and businesses.

10. Changes and contact

We may update this Policy from time to time; material changes take effect when posted. For privacy requests or questions, contact privacy@auditori.com.au.