Privacy Policy
Last updated:
1. Introduction
ConsultiQ ("we", "our", "us") is committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) (the "Privacy Act"). This policy explains how we collect, use, disclose, and manage your personal information when you use the ConsultiQ platform.
2. Information We Collect
Account Information: When you sign in via Google or Microsoft, we receive your name, email address, profile picture, and a unique provider identifier from the respective OAuth provider. You control what information is shared with us through your Google or Microsoft account settings.
Business Data: Client names, contact details, project information, invoice amounts, notes, and business model canvases that you voluntarily enter into the platform.
Technical Data: We collect session data (authentication tokens, session expiry), IP addresses for security monitoring, and basic usage analytics to improve the platform.
3. How We Use Your Information
- Provide and maintain the ConsultiQ platform and its features
- Authenticate your identity and manage your session
- Store and encrypt your business data securely
- Ensure platform security and detect fraudulent activity
- Improve platform functionality and user experience
- Comply with legal obligations under Australian law
4. Data Security & Encryption
All sensitive personal and business data is encrypted at rest using per-user Fernet symmetric encryption keys derived from a master key. This means even if our database were accessed unauthorised, your data would remain unreadable without your specific encryption key.
We use secure session management with HTTP-only, Secure cookies with SameSite=None attributes and a 24-hour session expiry. All data in transit is protected via TLS/HTTPS.
5. Data Disclosure & Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: Hosting infrastructure (Cloudflare Tunnel) used to deliver the platform securely
- OAuth Providers: Google and Microsoft, as required for authentication
- Legal Obligations: When required by Australian law, court order, or government authority
- Business Transfer: In the event of a merger, acquisition, or sale of assets, subject to ongoing privacy protections
6. Cross-Border Data Transfer
ConsultiQ is an Australian-based service. Your data is stored on servers located in Australia. We take reasonable steps to ensure that any overseas recipients of your personal information are subject to comparable privacy protections and do not misuse your information.
7. Your Rights Under Australian Privacy Law
Under the Privacy Act, you have the right to:
- Access your personal information held by us
- Correct inaccurate, outdated, or incomplete information
- Request deletion of your account and associated data
- Complain to the Office of the Australian Information Commissioner (OAIC) about any privacy breach
To exercise these rights, contact us at [email protected].
8. Data Retention
We retain your personal information for as long as your account is active. When you request account deletion, we will delete your personal information within 30 days, subject to any legal retention obligations. Encrypted business data is permanently deleted upon account closure and cannot be recovered.
9. Children's Privacy
ConsultiQ is not directed at children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform. Your continued use of ConsultiQ after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your personal information, please contact us:
Email: [email protected]
Platform: ConsultiQ — consultiq.app