Privacy policy

Who we are

AusRedact is provided by Touring Golf Pty Ltd, trading as Bloody Good Software (ABN 79 695 344 211), of 36-50 Taylor St, Annandale NSW 2038. In this policy, "we", "us" and "our" mean Touring Golf Pty Ltd.

We handle personal information in line with the Australian Privacy Principles. This policy covers the AusRedact app at app.ausredact.com.au and this website, ausredact.com.au.

For anything about your privacy, email support@ausredact.com.au or call 0405 788 848. You can also write to us at 36-50 Taylor St, Annandale NSW 2038.

What we collect

When you redact a document

• The document you upload, which we hold only while you work on it (see Your documents).
• Your internet address (IP address), which we turn into a one-way code to limit how many files one address can upload. We do not store the address itself.
• A job cookie that links your browser to your job.

When you pay

• Your email address, so we can send your tax invoice and tell you about any refund. If you are not signed in, you give it to Stripe at checkout.
• A payment record: the amount, the number of pages, the date, Stripe's payment reference, the terms version you accepted at payment and when your email address was confirmed.

Your card details go to Stripe, not to us. We never see or store your full card number.

If you sign in or buy a page pack

Your email address, your page balance, a record of the pages added to and used from your pack (dates and page counts only, never what was in a document), the version of the terms you accepted, and when you last signed in. An account is set up the first time you use a sign-in link, so you can buy a pack and use your pages later. You sign in with a link we email you, so we hold no password.

If you pay by card for fewer than 10 pages as a guest, we create an account for the email you paid with, holding only that email and your page balance.

When you contact us

Whatever you choose to put in your email. Please never email us a document, even a redacted one.

What we never collect

• Your file names. Your browser names the download from its own copy, and the name never reaches our storage.
• The text of your documents in our database. Findings are stored only as box positions and a label such as "TFN".
• Analytics or advertising data. This website and the app run no analytics or advertising trackers.

Your documents

Your documents often hold other people's personal information, sometimes sensitive information such as health or financial details. We treat every document as confidential, whoever it is about.

• We process a document only to provide AusRedact to you: to scan it for malware, read its text, look for what to redact, show it to you for review and make the redacted copy.
• Your documents are processed and stored in Australia, on Microsoft Azure in New South Wales. The AI check runs on Amazon Bedrock in Sydney and Melbourne, on copies of your pages with the identifiers we have already found masked. You can switch the AI check off.
• The text we read from your pages is kept in our Australian file storage while you work, so searches are fast, and is deleted with the document.
• There is no staff tool for viewing documents. Our admin access needs multi-factor sign-in.
• We never use your documents to train AI, and neither do the services we use.

If you are named in a document someone else redacted with AusRedact, we will have deleted it within 24 hours of upload. We cannot tell you what was in it or who uploaded it, because we keep no record of a document's content.

How we use it

We use personal information to:

• provide AusRedact and process your documents as you ask
• take payment, send tax invoices and keep your page balance
• send sign-in links, links to reopen a job, "your file is ready" emails and refund notices
• answer your questions and handle complaints and refunds
• keep the service secure and stop misuse
• meet our legal obligations, such as keeping tax records

We do not sell personal information. We send only the emails the service needs, such as sign-in links, tax invoices and refund notices. We do not send marketing email. If you paid by card, the "your file is ready" link opens your document only in the browser you paid from. Links to reopen a job go only to an email address we have confirmed.

How long we keep it

• Your documents, the redacted copies and the text read from them: deleted within 24 hours of upload, or as soon as you press Delete now.
• What we found in a document (box positions and labels only): deleted with the document.
• Your job cookie: expires 24 hours after your last upload.
• Your sign-in cookie: expires after 30 days.
• Upload and sign-in limits (a one-way code made from your internet address, or from your email address when you ask for a sign-in link): deleted within 3 hours.
• Our system logs: kept for 30 days. They hold codes, counts and times only, never your internet address, email address or anything from your documents.
• Emails we send you: our copy is deleted within a day of sending.
• Payment records (including the terms version accepted at payment and when the payer's email address was confirmed): kept for 7 years after the payment, as tax and company law require, then deleted.
• Your account (email address, page balance, a record of pages added to and used from your pack with dates and page counts only, the version of the terms you accepted, and when you last signed in): kept for 12 months after your last sign-in or until your last pack pages expire, whichever is later, then deleted. We delete it sooner if you close it on your account page or ask us to.
• Emails you send to support: kept for up to 2 years after the conversation ends.

A check runs every 5 minutes to delete documents past their time. Deleted documents are not kept as backups or old versions.

Our database is backed up in Australia, and each backup is kept for 7 days. Until a backup expires, it can still hold records we have deleted from the database, such as box positions, labels, account details and payment records. Backups never hold your documents or the text read from them.

Who we share it with

These services process data for us, under contracts that limit what they can do with it. Only the first two ever handle a document.

This website is served by Cloudflare, which processes your IP address to deliver the pages. It never receives a document.

We may also disclose personal information when the law requires it, for example under a court order, or when we reasonably believe it is needed to prevent a serious threat to someone's life, health or safety.

Overseas disclosure

Your documents are processed and stored in Australia and are not sent overseas.

Some other personal information may be handled outside Australia:

• Stripe may process your email address and payment details in the United States and other countries where it operates.
• Cloudflare serves this website from its global network, so your IP address may be processed outside Australia when you visit ausredact.com.au.

We choose providers that have their own legal obligations to protect personal information. If you do not want your payment details handled overseas, please do not pay online. Email us and we will talk through other options.

Cookies

The app uses cookies only to link your job to your browser and to keep you signed in if you have an account. The job cookie expires 24 hours after your last upload. The sign-in cookie expires after 30 days. None of these cookies is used for tracking or advertising.

This website sets no cookies of its own. If you choose a light or dark theme, that choice is saved in your browser and is not sent to us.

Automated decisions

Some parts of AusRedact run automatically. None of them makes a decision that significantly affects your rights or interests, but we list them so you know how they work.

• Finding personal details. Software suggests what to black out in your document. It decides nothing about you or anyone named in it. You review every suggestion and decide what is removed.
• Price. The price is worked out automatically from the number of pages we count in your document. It uses no personal information.
• Upload and sign-in limits. To stop misuse, we automatically limit how many files can be uploaded from one internet address, and how many sign-in links can be sent to one email address. These limits use a one-way code made from your internet address or email address. If you reach a limit, try again later or email us.
• Automatic refunds. If a job fails, the redacted file fails our final check, or a payment reaches us that we cannot use for your document, a refund is issued automatically, or the pages go back to your page balance. This uses your payment record.

If you think an automated step has treated you unfairly, email us and a person will look at it.

How we protect it

• Data is encrypted in transit and at rest, and stored in Australia.
• Every upload is scanned for malware before anything else happens.
• Our database and file storage are not reachable from the public internet.
• Admin access needs multi-factor sign-in, and there is no staff tool for viewing documents.

If we have a data breach that is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner.

Access and correction

You can ask to see the personal information we hold about you, and ask us to correct or delete it. Email us from the address you used with AusRedact. We may need to confirm it is you before we act. We will respond within 30 days.

We cannot give you a copy of a document after it has been deleted. We may need to keep some records, such as payment records, for as long as the law requires.

Complaints

If you are unhappy with how we have handled your personal information, email support@ausredact.com.au with "Privacy complaint" in the subject. We will acknowledge it within 5 business days and give you our response within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC), which can tell you about your options:

• online at oaic.gov.au/privacy/privacy-complaints
• by phone on 1300 363 992

Changes to this policy

We may update this policy. The date at the top of this page shows when it last changed. If you have an account, we will email you about any change that affects how we handle your information before it starts.