Last updated 10 September 2026
This explains what we collect, why we collect it, and what we will never do with it. It is written to be read, not to be survived.
What we collect
Account information you give us: your name, business name, email address and billing details.
Business records you create in IniDeck: clients, quotes, invoices, documents and the messages exchanged through the platform.
Technical information: log data, device and browser information, and analytics about how the site and product are used.
What we never send to third-party AI models
Your clients' names, contact details and financial figures are removed before any request reaches an external language model. The model works with placeholders and never sees the real values.
Your business records are never used to train any public AI model, ours or anyone else's.
Where we improve our own systems, we use anonymised records of how instructions were structured — never the contents of your business.
How we use what we collect
To run the product for you: preparing and sending your documents, communicating with your clients on your instruction, and keeping your records.
To bill you, support you, and tell you about material changes to the service.
To understand and improve how the product is used, in aggregate.
Who else sees it
Service providers who help us operate: hosting, payment processing, email and messaging delivery, and error monitoring. Each is bound by contract and may only use the data to provide their service to us.
We do not sell your data, and we do not share it for advertising.
We may disclose information where we are legally required to.
Where it is held and for how long
Data is held on infrastructure in secure data centres. We will name our processing locations and sub-processors on request.
We keep your records for as long as your workspace is active, and for a limited period afterwards to meet legal and accounting obligations.
You can export your records at any time, and you can ask us to delete them.
Your rights
You can access, correct, export or delete your information. Where the Australian Privacy Principles or GDPR apply, you have the rights those frameworks provide, including complaint to a regulator.
To exercise any of this, contact us and we will respond within the statutory period.
Cookies and analytics
We use a small number of cookies to keep the site working and to understand usage in aggregate. You can refuse non-essential cookies without losing functionality.
Contact
Questions about this policy can be sent to our contact address, and we will answer them properly.