Privacy Policy

1. Introduction

Fentropy Pty Ltd trading as LegiStream (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use the LegiStream platform.

By using our website or service, you consent to the practices described in this policy. If you do not agree, please do not use our website or service.

2. Information We Collect

2.1 Information You Provide

• Account information — name, email address, organisation, job title, department, and role details you provide during registration or the early access signup process.
• Preferences — jurisdiction, regulatory domain, and industry selections you configure in your profile.
• Communications — any messages, feedback, or support requests you send to us.

2.2 Information Collected Automatically

• Usage data — interactions with the platform such as documents viewed, preferences set, and features used.
• Technical data — browser type, IP address, operating system, and device information collected automatically for security and service improvement.
• Cookies — we use essential cookies required for the website and service to function. We do not use third-party advertising or tracking cookies. See Section 7 for details.

3. How We Use Your Information

We use your information to:

• Provide and operate the LegiStream service.
• Personalise your experience and deliver relevant regulatory updates based on your jurisdiction and industry preferences.
• Process your early access application and communicate about your participation.
• Improve the platform, including AI model performance and accuracy.
• Communicate with you about your account, service updates, and product announcements.
• Ensure the security and integrity of the service.
• Comply with legal obligations.

4. Data Sharing

We do not sell your personal data. We may share data only:

• With third-party service providers who assist in operating the platform (e.g. hosting, email delivery, analytics), under strict confidentiality agreements.
• With AI service providers (specifically Anthropic) for the purpose of generating legislative analysis. Your personal data is not included in AI processing — only legislative source material is sent for analysis.
• Where required by law, regulation, or legal process.
• To protect our rights, privacy, safety, or property, or that of our users or the public.

5. Data Retention & Deletion

We retain your personal data for as long as your account is active or as needed to provide the service. When you delete your account, your personal data is removed within 30 days, except where retention is required by law.

Early access signup data is retained for the duration of the early access program and a reasonable period thereafter. You may request deletion at any time by contacting us.

6. Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access controls and authentication requirements.
• Regular security monitoring and vulnerability assessments.
• Data isolation between organisations.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Cookies

Our website uses only essential cookies required for the site to function (e.g. session management, CSRF protection). We do not use cookies for advertising or cross-site tracking.

If we introduce analytics in the future, we will use privacy-respecting tools that do not require cookie consent banners (e.g. Plausible Analytics), or we will update this policy and obtain your consent as required.

8. Your Rights

Under the Australian Privacy Act 1988 and applicable privacy legislation, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your personal information (subject to legal retention requirements).
• Withdraw consent for data processing where consent is the basis for processing.
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy rights have been breached.

To exercise any of these rights, please contact us at privacy@legistream.com.au.

9. International Data Transfers

Our servers are located in Australia. If you access our service from outside Australia, your information may be transferred to and processed in Australia. By using the service, you consent to this transfer.

Where we use third-party service providers located outside Australia, we ensure appropriate safeguards are in place in accordance with the Australian Privacy Principles.

10. Children’s Privacy

LegiStream is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and update the “Last updated” date at the top of this page. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Fentropy Pty Ltd trading as LegiStream
Email: privacy@legistream.com.au
General enquiries: support@legistream.com.au