Legal
Privacy policy
Instill BI Pty Ltd, operator of InstillCore and InstillHire.
Outline only. Needs a lawyer's pass before publication. Structure follows the Australian Privacy Principles.
1. Who we are
Instill BI Pty Ltd, ABN [to add], [address]. Contact: privacy@instillcore.com.au.
2. What we collect
Account details of users (name, work email); the subscribing business's accounting data read from Xero with its authorisation; documents the business uploads or emails; usage and security logs.
3. Why
To provide the service the business subscribed to. We do not sell data and do not use it for advertising.
4. Third parties
Microsoft Azure (hosting, Australia). Anthropic (reading uploaded documents: the document image and extracted text only; not used to train models). Mailgun (sending and receiving email). Xero (the accounting connection the business authorises).
5. Where data is held
Australia. Anthropic and Mailgun process outside Australia for the purposes above.
6. Retention
For the life of the subscription and [n] days after. A business can request an export and deletion.
7. Access and correction
How a user asks; how a business exports its own records.
8. Security
See Security.
9. Data breaches
We notify affected businesses and the OAIC as required by the Notifiable Data Breaches scheme.
10. Cookies
A session cookie only. No tracking cookies.
11. Complaints
privacy@instillcore.com.au, and the Office of the Australian Information Commissioner.