Privacy Policy

Information in the workspace

Depending on the features used, CORETAXA can hold account and business contact details, client and supplier records, worker information, job schedules, photos, documents, quotes, invoices, expenses and payment or pay-run records. AI conversations can contain prompts, responses and information retrieved from workspace records.

Information is provided by users and their organisation, generated through use of the service, or obtained from a connected service when a user authorises that connection. Avoid entering personal information that is not needed for your work.

Why information is processed

Information is processed to provide the features requested by your organisation, maintain accounts, support users and help protect the service. The information available to other people depends on workspace access and the records you choose to share.

If your employer or another business invited you, that organisation also determines how it uses your information. Contact its administrator about its own collection, access and retention practices.

Service providers and connected accounts

Hosting, storage, email, authentication and AI services may process information needed to deliver the relevant functionality. Connecting an external account can involve sharing information with that provider under its own terms.

The final policy must identify the relevant categories of recipients and likely overseas disclosures, including countries where practicable. This draft makes no claim that all information remains in Australia or New Zealand.

Information used by the AI Assistant

Your questions and the workspace information retrieved to answer them can be processed as part of an AI conversation. Ask only about information you are authorised to use, and avoid including unnecessary personal or sensitive details.

Provider-specific retention and model-training arrangements must be confirmed in the final policy. This draft does not make a “never used for training” commitment.

Storage and retention

Access controls help determine who can use workspace records. No online service can eliminate every security risk. Protect your credentials and review the access of people who join or leave your business.

The final policy must explain how long account records, uploaded files, conversations, logs and backups are retained, including what happens after account closure. Retention may also depend on legal obligations and the customer organisation’s requirements.

Access, correction and questions

Contact us using the details below to request access to or correction of personal information, raise a privacy concern, or ask about deletion. Please describe your request without sending passwords or unnecessary sensitive information. Identity and authority may need to be verified.

Requests involving records controlled by your employer or another customer organisation may need that organisation’s involvement. You can also contact the relevant privacy regulator about your rights or a complaint.

Changes to this policy

The effective policy should be updated when information-handling practices change. Material changes should be communicated clearly, and the published version should show its effective date. This preview is not an effective-date notice.