Privacy Policy

Effective 3 July 2026 · MultiTech Intelligence, Victoria, Australia

What we collect. Your account details (organisation name, email, and — only where you sign in with a password we hold — a one-way hash of it; where sign-in is handled by our identity provider, they hold your credentials and we do not), your subscription and invoice records, and the content you place in your own Hub. Payment card details go directly to Stripe — we never see or store them.

How it's used. To run your account and Hub, bill your subscription, and meet legal obligations (e.g. tax records). Your Hub content is isolated to your own account: it is not read for any other purpose, not shared with other customers, and not used to train AI models.

Who it's shared with. Only the processors needed to run the service: Stripe (payments), Clerk (sign-in and identity, where enabled), our hosting and database providers (Render, Neon), and — only where the portal AI assistant is enabled for your account — our AI provider, as described under Overseas disclosure below. We do not sell or rent personal information.

Overseas disclosure (Australian Privacy Principle 8). Where the portal AI assistant is enabled for your account, the messages you send it are processed by our AI provider on servers located outside Australia. Those messages are processed under contract, are not used to train models, and remain scoped to your own account. The provider and the country its processing takes place in are named on the Trust page for this service, which reads them from the certification recorded for the model actually serving you — so the named provider is always the one in use, not a description that can fall out of date. Where the assistant is not enabled, no message is disclosed overseas for this purpose.

Security. Signing in always takes more than a password: an authenticator code where we hold the account directly, or a one-time code sent to your email address where sign-in is handled by our identity provider. Per-tenant isolation enforced on the server, secrets held in an encrypted vault, and a signed, append-only audit record of governed actions.

If you delete your account. When you delete your account your content and records will be removed and can not be retrieved. MultiTech Intelligence will keep a record of all invoices (tax) and acceptance records (evidence an agreement was made) and a permanent, tamper-evident record that your account existed and was deleted, which cannot be erased to prove what the platform did and didn't do.

Your rights. Ask us to access, correct, export or delete your personal information at any time — via the contact form at mibusinesspartner.com.au. We handle requests under the Australian Privacy Principles.