Privacy Policy

UN8tech Pty Ltd (ABN: 38 691 379 530, ACN: 691 379 530) ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use ClaimMore (the "Service").

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in how we handle your personal information.

1. Types of Personal Information We Collect (APP 3)

For Anonymous Users:

If you use the Service without creating an account, we collect minimal information:

• Session Data: Browser-based localStorage data (not transmitted to our servers)
• Technical Information: IP address, browser type, device information, session identifiers
• Usage Analytics: Aggregated, anonymized usage data

For Registered Users:

We collect the following types of personal information:

• Account Information: Email address, name, password (hashed and encrypted), occupation (optional), subscription details
• Usage Information: Queries you submit, interaction history, feedback you provide, feature usage patterns
• Technical Information: IP address, browser type, device information, session identifiers, usage analytics
• Communication Information: Records of correspondence, support requests, and feedback

Information We Do NOT Collect:

• Tax File Numbers (TFN)
• Financial account details or bank information
• Sensitive tax documents or returns
• Credit card numbers (processed by third-party payment providers)

2. How We Collect Personal Information (APP 3)

We collect personal information in the following ways:

• Directly from you: When you create an account, submit queries, provide feedback, or contact us
• Automatically: Through cookies, session identifiers, and analytics tools when you use the Service
• Third parties: Through authentication services (such as Supabase) if you sign up using third-party providers

You can use some features of the Service without creating an account. In such cases, we may still collect technical information and session identifiers to provide the Service, but this information is not linked to your identity.

3. How We Use Personal Information (APP 6)

Primary Purpose:

We use your personal information primarily to:

• Provide, operate, and maintain the Service
• Process and respond to your queries using AI technology
• Manage your account and subscription
• Communicate with you about your account, the Service, or important updates

Secondary Purposes:

We also use your information to:

• Improve and develop the Service
• Provide customer support and respond to inquiries
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations
• Enforce our Terms and Conditions
• Prevent fraud and abuse

4. Use of AI and Large Language Models

The Service uses artificial intelligence technology, including Large Language Models (LLMs) and Retrieval-Augmented Generation (RAG), to process your queries and generate responses.

How Your Data is Used with AI:

Your queries and interactions may be processed by AI systems to:

• Generate responses to your questions in real-time
• Improve the accuracy and relevance of the Service

AI Model Training:

We will NOT use your personal queries or data to train AI models without your explicit opt-in consent.If we seek to use your data for AI training purposes, we will:

• Request your explicit consent through a clear opt-in mechanism
• Anonymize your data before using it for training (where possible)
• Allow you to withdraw consent at any time

While we take reasonable steps to protect your personal information, AI processing may involve automated decision-making and data processing by third-party AI service providers (such as OpenAI). We ensure that any third-party AI providers comply with appropriate data protection standards.

5. We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for marketing or commercial purposes.Your personal information is used solely for the purposes described in this Privacy Policy.

6. Disclosure to Third Parties (APP 6)

We may disclose your personal information to third parties in the following circumstances:

• Service Providers: To third-party service providers who assist us in operating the Service, including:
  • Hosting providers: Supabase (database and authentication)
  • AI service providers: OpenAI, Anthropic, or similar (for LLM processing)
  • Payment processors: Stripe or similar (for subscription payments)
  • Analytics providers: For aggregated usage analytics
• Legal Requirements: When required by law, court order, or government authority, or to protect our rights, property, or safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred to the acquiring entity
• With Your Consent: When you have given us explicit consent to disclose your information

We require third parties to protect your personal information in accordance with this Privacy Policy and applicable privacy laws. We do not authorise third parties to use your personal information for their own purposes except as necessary to provide services to us.

7. Overseas Data Processing (APP 8)

Some of our service providers may be located outside Australia, including in countries where privacy laws may differ from Australian law. Specifically:

• United States of America: AI service providers (OpenAI, Anthropic) process queries in the USA
• Other countries: Cloud hosting and database services may process data in various locations

When we transfer personal information overseas, we take reasonable steps to ensure that your information is protected, including:

• Using service providers that comply with recognised privacy frameworks (such as GDPR-equivalent standards)
• Including appropriate contractual protections in our agreements with service providers
• Conducting due diligence on service providers' data protection practices
• Ensuring service providers have adequate security measures in place

By using the Service, you consent to the transfer of your personal information to service providers located outside Australia for the purposes described in this Privacy Policy.

8. Data Storage and Security (APP 11)

We store your personal information in secure databases hosted by third-party service providers, including cloud storage providers that comply with Australian data protection standards.

Security Measures:

We implement reasonable technical and organisational measures to protect your personal information, including:

• Encryption in transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Encryption at rest: Sensitive data (passwords, personal information) is encrypted in our databases
• Secure authentication: Passwords are hashed using industry-standard algorithms
• Access controls: Limited access to personal information on a need-to-know basis
• Regular security assessments: We conduct security audits and updates
• Monitoring: We monitor for security threats and unauthorized access

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Breach Notification:

In the event of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) within 72 hours, as required by law.

9. Cookies and Analytics

We use cookies and similar tracking technologies to collect information about how you use the Service. Cookies are small data files stored on your device that help us improve your experience.

Types of Cookies:

• Essential Cookies: Required for the Service to function (session management, authentication)
• Analytics Cookies: Help us understand how users interact with the Service (with your consent)
• Preference Cookies: Remember your settings and preferences

We do NOT use third-party advertising cookies. We do not track you across other websites or serve targeted advertisements.

You can control cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Service.

We may use analytics tools to collect aggregated, anonymized data about Service usage. This information helps us understand how users interact with the Service and make improvements.

10. Your Rights Under Australian Privacy Law (APPs 6, 12, 13)

Under the Privacy Act 1988 (Cth), you have the following rights:

• Access (APP 12): You can request access to the personal information we hold about you. We will provide this within 30 days, free of charge (unless the request is excessive or repetitive)
• Correction (APP 13): You can request correction of inaccurate, incomplete, or outdated personal information. We will correct it promptly
• Deletion: You can request deletion of your personal information, subject to legal and operational requirements (e.g., we must retain financial records for 7 years for ATO compliance)
• Opt-out: You can opt-out of marketing communications at any time
• Complaint (APP 1): You can make a complaint if you believe we have breached the APPs

To exercise these rights, please contact us using the contact information provided below. We will respond to your request within a reasonable time frame, usually within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):

• Website: https://www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

11. Data Retention

We retain your personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods:

• Query History: 12 months for free users, 24 months for Pro users
• Account Data: Until you request deletion + 90 days backup period
• Financial Records: 7 years (as required by ATO regulations)
• Communication Records: 2 years for customer support purposes

When personal information is no longer needed, we will securely delete or anonymize it, except where we are required to retain it for legal or regulatory purposes.

If you delete your account, we will delete or anonymize your personal information within 90 days, except for information we are required to retain by law (such as financial records).

12. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

If we make material changes that significantly affect your rights, we will notify you by email (if you have an account) or by a prominent notice on the Service.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

UN8tech Pty Ltd
ABN: 38 691 379 530
ACN: 691 379 530
Website: https://www.un8tech.com.au
Email: admin@un8tech.com.au

For privacy complaints, you can also contact the Office of the Australian Information Commissioner:

Website: https://www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au