Privacy Policy

Information We Collect

Information we collect includes both information you knowingly and actively provide us when using or participating in any of our services and promotions, and any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, other details about your visit, and technical details that occur in conjunction with any errors you may encounter.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Personal Information

We may ask for personal information which may include one or more of the following:

• Name
• Email address
• Phone/mobile number
• Organisation or provider name
• Role or job title
• Account and authentication details

Sensitive Information

Auraso is designed as a compliance-readiness tool that does not require — and asks you not to enter — the personal or health information of NDIS participants. Our services are built to hold organisational compliance records (such as registers, evidence references, worker qualification metadata, and readiness indicators) and the account and contact details of your staff, rather than participant records.

Free-text and note fields should not be used to store the health or other sensitive information of participants. If a user chooses to enter such information contrary to this guidance, they do so on their own responsibility and remain accountable for it under their organisation's own privacy and NDIS obligations. Where we do handle any sensitive information, we do so only with consent or as otherwise permitted by law, and we take reasonable steps to minimise it.

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information from you when you register for an account, sign in to our platform, request a demo or free pilot, complete a free assessment, contact us via email, subscribe to updates, or use our website, associated applications, or integrations.

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

• to enable you to access and use our website, associated applications, and associated social media platforms
• to contact and communicate with you
• for analytics, market research, and business development, including to operate and improve our website, associated applications, and associated social media platforms
• for internal record keeping and administrative purposes
• to comply with our legal obligations and resolve any disputes that we may have
• for security and fraud prevention, and to ensure that our sites and apps are safe, secure, and used in line with our terms of use

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use, or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. We will comply with laws applicable to us in respect of any data breach.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. If your personal information is no longer required, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

Third-party service providers we use include Microsoft Azure (hosting and infrastructure) and Azure Communication Services (transactional email delivery).

• a parent, subsidiary, or affiliate of our company
• third party service providers for the purpose of enabling them to provide their services, including Microsoft Azure and Azure Communication Services
• our employees, contractors, and/or related entities
• our existing or potential agents or business partners
• courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise, or defend our legal rights
• third parties, including agents or sub-contractors, who assist us in providing information, products, services, or direct marketing to you

International Transfers of Personal Information

The personal information we collect is stored and processed in Australia. Our primary hosting and infrastructure providers maintain facilities in Australia.

We do not routinely transfer personal information overseas. If we transfer your personal information to third parties in other countries, we will perform those transfers in accordance with the requirements of applicable law and protect the transferred personal information in accordance with this privacy policy.

Your Rights and Controlling Your Personal Information

You always retain the right to withhold personal information from us, with the understanding that your experience of our website may be affected. We will not discriminate against you for exercising any of your rights over your personal information. If you do provide us with personal information you understand that we will collect, hold, use and disclose it in accordance with this privacy policy. You retain the right to request details of any personal information we hold about you.

If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person's consent to provide the personal information to us.

If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time. We will provide you with the ability to unsubscribe from our email-database or opt out of communications. Please be aware we may need to request specific information from you to help us confirm your identity.

If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au in relation to your complaint.

Use of Cookies

We use "cookies" to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

Contact Us

For any questions or concerns regarding your privacy, you may contact us at hello@auraso.com.au.