Privacy Policy

1. Who we are

Impact Analytics Australia Pty Ltd operates the website at impactanalyticsaustralia.com.au (the “Site”) and the HIVE (Australian housing intelligence) and COMPASS (NDIS intelligence, launching 1 July 2026) platforms. In this policy, “we”, “us”, and “our” refers to Impact Analytics Australia Pty Ltd.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What information we collect

2.1 Information you give us

• Your name, work email, organisation, and message when you submit a demo request or contact form
• Account details (name, email, organisation, and a password) where a platform requires you to register
• Correspondence, feedback, and support requests you send us

2.2 Content you enter into the platforms

• HIVE: the questions and search queries you type into our research and policy-analysis tools
• COMPASS: the information you enter into the workflow tools (for example intake records, vacancy listings, quotes, and compliance items). This may include personal information about other people — such as prospective participants or tenants — and may include sensitive information. Where it does, your organisation is responsible for that information and we handle it on your behalf (see Section 7).

2.3 Information collected automatically

• Browser type, device, operating system, IP address, and referring URL via server logs
• Pages visited, session duration, and navigation paths via privacy-focused analytics
• Cookies, as described in Section 9

2.4 The underlying evidence base

HIVE and COMPASS are built on publicly available government and research data (for example AHURI, AIHW, ABS, Treasury, and NDIA publications). This is not your personal information.

2.5 What we do not collect

• We do not collect or store payment card details — payments (when paid plans launch) are handled by Stripe
• We do not ask you to enter sensitive or personal information into our free-text AI query boxes, and we ask that you avoid doing so

3. How we use your information

We use the information we collect to:

• Provide, maintain, secure, and improve the platforms and the Site
• Respond to demo requests, enquiries, and support
• Send service communications (such as account and billing notices)
• Send product updates — with your consent and an easy opt-out
• Detect, prevent, and investigate fraud or misuse
• Meet our obligations under Australian law

We do not sell, rent, or trade your personal information.

4. AI and automated processing

Some HIVE and COMPASS features generate written analysis and search results using third-party AI and vector-search services. When you use these features, the text you enter is sent to and processed by:

• Anthropic (the Claude model) — to generate written analysis and summaries
• OpenAI — to create the numerical “embeddings” that power semantic search
• Pinecone — to store and search the indexed evidence base

These providers are located in the United States. Under our API agreements with them, the inputs you send through our platforms are not used to train their AI models and are retained by them only for limited operational and abuse-monitoring purposes. Outputs are generated by automated systems and may contain errors — they should be verified against primary sources before you rely on them. Please avoid entering personal or sensitive information into AI query boxes unless it is necessary.

5. Who we share information with

We disclose personal information only to the service providers we need to run the platforms, and only what is necessary:

• Vercel — website and application hosting
• Formspree — contact and demo-request form handling
• Anthropic, OpenAI, Pinecone — AI analysis and search (see Section 4)
• Mapbox — interactive maps within COMPASS
• Our database and infrastructure providers — to store COMPASS account and workflow data
• Stripe — payment processing, once paid plans launch
• Our email provider — to correspond with you

Each provider is bound by its own terms and privacy commitments. We may also disclose information where required by Australian law, court order, or a regulator, and in connection with a business sale or merger (in which case we will notify affected users).

6. Overseas disclosure

Several of the providers listed above — including our AI and search providers and our hosting — are located or store data overseas, primarily in the United States. By using features that rely on these providers (in particular the AI research and analysis tools), you consent to your information being disclosed to and processed in those locations. We take reasonable steps to use reputable providers that handle information consistently with the Australian Privacy Principles.

7. COMPASS and your organisation’s data

When your organisation uses COMPASS to manage intake, placements, quotes, or compliance, you may enter personal information about individuals such as prospective participants or tenants. For that information:

• Your organisation is responsible for it; we handle it as a service provider, on your instructions, solely to provide COMPASS to you
• We do not use it for any other purpose, and we do not use it to train AI models
• Sensitive information (such as disability- or health-related information) should only be entered where your organisation has the necessary consent and authority to do so
• On account closure, we will delete or return this data in line with your instructions and our retention obligations

8. Storage and security

We store data on reputable cloud infrastructure (including the providers listed in Sections 4 and 5, some of which are based in the United States). We apply reasonable security measures including TLS encryption in transit, access controls, and ongoing review. No method of transmission or storage is completely secure, and while we take reasonable steps to protect your information, we cannot guarantee absolute security.

9. Cookies

We use cookies and similar technologies to operate and improve the platforms, including:

• Strictly necessary cookies — for authentication and session management
• Analytics cookies — privacy-focused measurement of how the Site is used, without cross-site fingerprinting

You can control cookies through your browser. Disabling some cookies may affect functionality.

10. Data retention

We keep personal information only as long as needed for the purposes above and to meet legal obligations. Contact and demo-request submissions are kept for around 2 years. Account data is kept for the life of the account plus a short period. Information your organisation enters into COMPASS is kept according to your instructions. You can request deletion at any time (see Section 11).

11. Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you may:

• Access the personal information we hold about you
• Correct information that is inaccurate or out of date
• Request deletion of your personal information (subject to legal retention obligations)
• Opt out of marketing communications at any time
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs

To exercise any of these, email support@impactanalyticsaustralia.com.au. We aim to respond within 30 days.

12. Third-party links

Our Site and platforms may link to external websites (for example NDIA, ABS, and AHURI). We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.

13. Privacy of children

Our platforms are for business and professional use. We do not knowingly collect personal information from anyone under 18.

14. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the most recent revision, and we will notify registered users of significant changes by email.

15. Contact us

For privacy enquiries or complaints: