Privacy Policy

CareVisor AI is operated by ReSkill AI Pty Ltd (ACN 674 133 052) ("CareVisor AI", "we", "us", "our") is committed to protecting your privacy and ensuring your personal information is handled in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable sector-specific requirements (including NDIS, financial services, and real-estate compliance obligations where relevant).

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, use our automation products, interact with our consulting services, or engage with us through any channel.

1. What is Personal Information?

"Personal information" means information or an opinion about an identified individual or an individual who is reasonably identifiable.

This may include your:

• Full name
• Email address
• Phone number
• Mailing or street address
• Job title or business information
• Payment or invoicing details
• Login or authentication details
• Interaction logs with our platform or support team
• Any information you submit when requesting services

Some of our participants operate in regulated industries (e.g., NDIS, accounting, real estate, financial planning). When providing services in those sectors, we may process additional categories of information necessary to meet compliance requirements.

2. Sensitive Information

In limited circumstances, we may collect "sensitive information" as defined under the Privacy Act, including:

• Health information
• Information about an individual's disability status (for NDIS-related automation)
• Background checks required under relevant frameworks
• Compliance-related documentation

We only collect sensitive information:

• With your explicit consent
• Where required or authorised by law
• Where necessary to prevent serious harm
• As part of agreed service delivery in regulated sectors

3. How We Collect Personal Information

We collect personal information directly when you:

• Submit a form on our website
• Communicate with us via phone, email, SMS, online chat, or in person
• Subscribe to our mailing lists or attend events/webinars
• Use or access the CareVisor AI platform
• Participate in surveys or product feedback sessions
• Apply for a role with us
• Onboard as a participant or partner
• Provide documents or data necessary for workflow automation

We may also collect information from third parties, including:

• Referral partners and industry associations
• Publicly available sources
• NDIS portals, CRM platforms, accounting platforms, and industry software you integrate with us
• Identity providers or authentication services (if authorised by you)

4. Information Automatically Collected (Telemetry & Platform Analytics)

When you use our platform or website, our systems automatically collect non-content technical data for system performance monitoring, workflow execution traces, error logs and success rates, usage patterns, and security and audit requirements.

This telemetry does not store raw PII or business content. All identifiers are hashed or pseudonymised in accordance with CareVisor AI's internal compliance and IP-protection frameworks.

5. Why We Collect Personal Information

We collect personal information to:

• Provide and optimise our automation services
• Verify your identity and manage user access
• Deliver training, onboarding, and technical support
• Maintain regulatory compliance in sectors such as NDIS, financial services, real estate, or accounting
• Improve workflow templates and industry automation packs
• Produce anonymised usage insights and ROI analytics
• Communicate updates, offers, or relevant industry information
• Manage billing, administration, and account services
• Protect our platform, IP, and participant data

We may use your information for secondary purposes related to the primary purpose where you would reasonably expect such use.

6. Use of AI, Automations & Human-in-the-Loop Workflows

CareVisor AI uses AI-driven automation, workflow orchestration, and human validation processes.

When a workflow processes data:

• All actions are logged for audit and compliance
• PII is processed only to perform the function you authorise
• Sensitive data is encrypted and access-controlled
• Human-in-the-loop review may occur for exception handling or compliance checks

7. Direct Marketing

We may send you marketing communications about our products, events, or updates if you have subscribed, or you have reasonably expected such communications as part of your relationship with us.

You may opt out at any time by clicking "unsubscribe" or contacting us using the details below.

8. Disclosure of Personal Information

We may disclose personal information to:

• Trusted third-party service providers (hosting, CRM, email, analytics)
• Integration partners required to run your automations (e.g., CRM, accounting platforms)
• Our professional advisors (legal, accounting, security)
• Industry regulators or authorities where legally required
• Subcontractors or consultants involved in service delivery

9. Overseas Disclosure

Some service providers may store data overseas, including within cloud infrastructure regions selected by you or by default (Australia, US, Singapore, etc.).

We only transfer information overseas if:

• You consent
• The receiving party is subject to equivalent privacy obligations
• The transfer is required by law

10. How We Protect Your Information

CareVisor AI implements multiple layers of technical and administrative controls including:

• Encryption of data at rest and in transit
• Strict role-based access control (RBAC)
• Multi-factor authentication (MFA)
• Secure workflow orchestration with no export of core IP
• Audit logging and monitoring
• Secure cloud infrastructure aligned with ISO 27001, SOC 2 and industry standards
• Incident response procedures and breach notification processes

11. Cookies & Website Analytics

Our website uses cookies and analytics tools to improve your experience. Cookies may collect browser type, IP address, device identifiers, pages visited, and session duration.

You may disable cookies in your browser, though this may affect functionality.

12. Retention of Personal Information

We retain personal information only for as long as necessary for:

• The purpose it was collected
• Regulatory or legal obligations (e.g., NDIS, financial services, real estate record-keeping requirements)
• Audit, analytics, and compliance requirements

When no longer required, data is securely destroyed or de-identified.

13. Access and Correction

You may request access to the personal information we hold about you, or correction of inaccurate, out-of-date, or incomplete information.

Requests should be made using the contact details below. We may require identity verification before processing your request. We will respond within a reasonable timeframe (generally 30 days).

14. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those websites and recommend reviewing their policies individually.

15. Complaints

If you believe your privacy has been breached, please contact us using the details below. We may request additional information to investigate the matter.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

16. How to Contact Us

17. Updates to This Policy

We may update this Privacy Policy from time to time. Updated versions will be published on our website.