Privacy policy

Last updated: 28 October 2026

The operator of this service (“we”) runs Compliance Portal. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

• Account details: your name, email address and a scrambled (hashed) form of your password. We never store the password itself.
• What you put into your workspace: college details, documents, and the personal information in them (for example trainers’ names, qualifications and work history). Your organisation decides what goes in, and is responsible for having permission to include it.
• Billing: handled by Stripe. We receive your plan, payment status and billing email; we never see or store your card number.
• Technical information: the date and time you sign in, your IP address and browser, kept to keep accounts secure.

How we use it

Only to provide and secure the service, to bill for it, to answer your questions, and to tell you about important changes. We do not sell personal information, and we do not use your workspace’s content to train AI models or for advertising.

Who can see it

• Members of your workspace, according to their role.
• Our service providers, only as needed to run the service: Cloudflare (hosting and storage), Stripe (payments) and, if switched on, our email provider. Some of them may process data outside Australia.
• Our support staff, only when needed to help you or keep the service secure.
• Anyone the law requires us to disclose it to.

Keeping it safe

Data is encrypted in transit. Each workspace’s data is kept separate. Passwords are hashed. Sign-in attempts are rate-limited.

How long we keep it

For as long as your workspace exists. When an owner deletes a workspace, its content is deleted straight away (copies in backups expire within 30 days). Account details are deleted on request when you no longer belong to any workspace.

Your choices

You can see and correct your account details in Settings, download your workspace’s data at any time, and ask us for access to, correction or deletion of personal information we hold. If you have a concern, contact us first at support; if we don’t resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).