Privacy Policy

DatumDesk is operated by Sarah-Jane Kavanagh, trading as DatumDesk, who is responsible for the personal information described in this policy. For any privacy request or question, contact us at privacy@datumdesk.ai.

We collect the following categories of information:

• Account information — your email address and, where you provide it, your name. Sign-in is passwordless (email one-time code).
• Practice profile — the profession, building classes, and states or territories you select during onboarding, used to tailor your compliance answers.
• Queries and answers — the questions you ask, the answers returned, and the source references retrieved. We keep these as an audit trail so you can re-open past answers.
• Connected apps: if you connect an AI app such as Claude to DatumDesk, the name of that app, when you connected it, and the access it was granted. See Connected AI apps below.
• Billing information — subscription status and a customer identifier from our payment processor. We do not see or store your full card details; those are handled directly by Stripe.
• Technical information — standard log and device data generated when you use the service, used for security and reliability.

We use personal information to:

• Provide, maintain, and improve the service;
• Generate compliance answers tailored to your profession and jurisdiction;
• Authenticate you and keep your account secure;
• Process subscriptions and billing;
• Respond to support requests and send service-related communications; and
• Meet our legal and regulatory obligations.

We do not sell your personal information, and we do not use the content of your queries to advertise to you.

We use a small number of trusted providers to run the service. They process data on our instructions and only as needed to provide their function:

• A cloud database and authentication provider — stores your account, practice profile, and query history. This data is hosted in Sydney, Australia (ap-southeast-2).
• Stripe — our payment processor, which handles subscription payments and card details. We never see or store your full card number.
• AI and vector-search providers — interpret your question, retrieve the relevant source passages, and generate the cited answer. The text of your question is sent to these providers to produce a response.
• Web hosting and analytics providers — deliver the site and help us understand how it is used. Our analytics provider sets cookies (see Cookies and analytics below).

Some providers may process data outside Australia. Where that happens, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

A current list of the specific sub-processors we use is available on request at privacy@datumdesk.ai.

We use cookies and similar technologies to keep you signed in and to measure how the site is used. Essential cookies are required for the service to work, including authentication. Analytics cookies, set by our analytics provider, help us understand traffic and improve the site; you can block or delete cookies in your browser settings, though some features may not work as well if you do.

To answer a question, DatumDesk sends the text you enter to the AI and search providers listed above. Please avoid including personal information about identifiable individuals, or confidential client details, in your questions where it is not necessary to get a useful compliance answer.

You can connect DatumDesk to an AI app, such as Claude or ChatGPT, so you can ask DatumDesk questions from inside that app. To connect, you sign in to DatumDesk and approve the app on a DatumDesk consent screen. The app then receives an access token linked to your account.

A connected app can use two DatumDesk functions only: asking an NCC compliance question, and checking which NCC edition applies in a state or territory. It cannot open your projects, saved answers, account details or billing, and it cannot read the source documents DatumDesk searches.

• What we receive: the question the app sends, any state, territory or building class it includes, and the access token that identifies your account. We do not request or receive your conversation with the app, its chat history or memory, or your files.
• What we keep: each question and its answer is saved to your DatumDesk history, the same as a question asked on the website, and kept as described in How long we keep information. Edition checks are not stored.
• What we send back: the cited answer and its clause and source references. Once the app receives the answer, the app’s provider (Anthropic for Claude, OpenAI for ChatGPT) handles it under its own privacy terms.
• Usage: questions asked through a connected app use your DatumDesk subscription and are subject to a usage limit to protect the service.

You can see and disconnect your connected apps at any time in Settings, under Connected apps. Disconnecting stops the app’s access immediately.

We keep your account information and query history for as long as your account is active, so you retain your audit trail. We keep billing records for as long as required for tax and accounting purposes. When you close your account we delete or de-identify your personal information within a reasonable period, except where we are required to retain it by law.

We protect your information with measures including encryption in transit, row-level access controls that restrict each user’s data to that user, and restricted administrative access. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.

You can access and correct your personal information, or ask us to delete it, by contacting privacy@datumdesk.ai. If you are not satisfied with how we handle a privacy concern, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. If we make material changes we will take reasonable steps to notify you. The “last updated” date above shows when the policy last changed.

For any question about this policy or your personal information, contact privacy@datumdesk.ai.