NOTOOL privacy policy.

A clear Australian privacy policy for a product that works with real documents, real accounts and real operational logs.

Effective 12 June 2026

The short version is simple: we use data to run NOTOOL, protect it, improve it and support you. We do not sell your uploaded documents.

Plain English version

Your documents stay yours.
We use your documents and queries to run NOTOOL and return source-backed answers.
We do not sell your uploaded documents.
AI and infrastructure providers may process your content so the service can work.
Stripe handles card details; NOTOOL does not see or store full card numbers.
We log enough to support the service, stop abuse, manage credit/billing, improve quality and debug problems.
You can ask for access, correction or deletion by emailing [email protected].

Who this policy covers

This privacy policy explains how NOTOOL (ABN 66 691 752 682) handles personal information for notool.au, tool.notool.au and related NOTOOL services.

It is written to be understandable first, and to cover the kinds of information required by the Australian Privacy Principles under the Privacy Act 1988 (Cth): what we collect, why we collect it, how we use and disclose it, overseas disclosure, access/correction and complaints.

Personal information we collect

account details such as name, email, organisation, role, login details and support contact details
billing, plan, credit, top-up, promo and Stripe payment-status records
uploaded documents and document-derived content where those documents contain personal information
queries, prompts, answers, citations, generated outputs, feedback and quality-review signals
usage, telemetry, audit, security, browser, device, IP address, cookie and analytics information
booking, support, approval-request and communication records
information required to investigate abuse, security events, service faults, disputes or legal requests

How we collect it

directly from you when you sign up, upload documents, ask questions, request support, book a call, use approval-gated features or contact us
automatically when you use the website or app, including logs, cookies, analytics and technical telemetry
from service providers such as Stripe, hosting, email, analytics, support, scheduling and identity/security tools
from your organisation or authorised users if they invite you, administer your account or upload shared project material

Why we collect, use and disclose it

to provide NOTOOL, process documents, answer queries, preserve citations and show account history
to manage accounts, authentication, subscriptions, credit, billing, refunds and support
to review quality, improve retrieval, tune workflows and identify degraded or failed operations
to protect the platform against spam, fraud, misuse, unauthorised access and harmful content
to communicate about service, support, approval requests, security, billing and product updates
to comply with legal obligations, resolve disputes and enforce terms
to generate aggregated or de-identified operational insights that do not reasonably identify a person

AI processing and document data

NOTOOL is a document-intelligence product, so uploaded material and query context may be processed by AI models, retrieval systems, OCR/extraction tools, hosting infrastructure and operational systems.

Where possible, we limit disclosure to what is needed for the task. For sensitive, regulated or high-risk material, talk to us before uploading it so we can confirm whether NOTOOL is appropriate for that use case or whether a dedicated arrangement is needed.

Disclosure to service providers

We may disclose personal information to providers that help us run NOTOOL, including:

cloud hosting, storage, database, logging and security providers
AI, OCR, extraction, embedding and model/API providers
payment and billing providers such as Stripe
email, support, analytics, booking and communication tools
professional advisers, regulators, courts, law-enforcement bodies or others where required or authorised by law

Overseas disclosure

Some providers may process or store information outside Australia. Depending on the provider and service configuration, this may include the United States, the European Union, the United Kingdom, Singapore or other locations used by cloud, AI, payment, support, analytics and communications providers.

If a customer needs stricter data residency, isolated hosting or enterprise controls, they should arrange that with NOTOOL before uploading regulated or highly sensitive material.

Security and retention

We use practical security controls for the size and nature of the service, including access controls, account controls, provider security features, logging and operational review.

We keep personal information for as long as needed to provide the service, support users, maintain history, manage billing/credit, improve quality, investigate issues, comply with legal obligations or resolve disputes. We delete or de-identify information when it is no longer reasonably needed, unless retention is required or permitted by law.

Access, correction and deletion

You can ask to access or correct personal information we hold about you by emailing [email protected]. You can also ask us to delete uploaded material or account information.

We will respond within a reasonable time. Some deletion requests may be limited where information is needed for billing, security, audit, backup, dispute, legal or operational reasons.

Complaints

If you think we have mishandled your personal information, email [email protected] with the details. We will acknowledge the complaint and work through it with you.

If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy when the service, providers, legal obligations or information-handling practices change. The current version will be published on this page.

NOTOOL | ABN 66 691 752 682

Contact: [email protected]