Privacy Policy

Unfair Dismissal Experts Pty Ltd trading as OpenHR (ABN 71 616 598 906) (we, us, our) is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, and manage personal information through the Lucy platform at openhr.com.au.

1. What Information We Collect

1.1 Account information

• Name and business name
• Business email address
• Password (stored in hashed form; we cannot retrieve it)
• ABN or ACN (if provided)
• Billing information (processed by Stripe; we do not store card numbers)

1.2 Platform usage information

• Chat messages and conversation history with the Lucy AI
• Documents you generate through the Platform
• Award rate lookups and classification queries
• Consulting requests, including topic, detail, and contact preferences
• Staff sub-account usernames you create

1.3 Employee information you input

You may input personal information about your employees when seeking HR guidance or generating documents. This may include names, employment details, performance information, or disciplinary records. We process this information solely to provide the Platform services to you. You are responsible for ensuring you have authority to input this information and that doing so complies with your obligations to your employees.

1.4 Technical information

• IP address and browser or device information
• Session data and usage logs
• Error and diagnostic data

2. How We Use Your Information

We use personal information to:

• provide, operate, and improve the Platform
• process consulting requests and communicate responses
• send transactional emails (account confirmation, consulting request confirmation, credit notifications)
• process subscription payments and manage your account
• comply with legal obligations
• detect and prevent fraud, abuse, or security incidents

We do not use your information for direct marketing without your consent, and we do not sell your personal information to third parties.

3. AI Processing and Data Retention

Chat messages are processed by Anthropic’s Claude AI model. Conversation history is stored in our database for up to 90 days from the date of each conversation, after which it is automatically deleted. You may export your data or request earlier deletion at any time (see clause 7).

Consulting request details are retained for 12 months to support service delivery and dispute resolution, and then deleted.

We do not use your conversation content to train AI models.

4. Disclosure of Information

We may disclose personal information to:

• Anthropic — for AI processing of chat messages
• Supabase — for secure data storage and authentication
• Vercel — for platform hosting and delivery
• Voyage AI — for semantic search and retrieval
• Stripe — for payment processing
• Resend — for transactional email delivery

Each of these providers is engaged under contractual terms that require them to handle personal information only for the purpose of providing services to us, and to maintain appropriate security standards.

We may also disclose personal information where required by law, court order, or a government or regulatory authority, or where we reasonably believe disclosure is necessary to prevent a serious threat to health or safety.

5. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access. These measures include encryption in transit and at rest, access controls, and monitoring for security incidents. No method of internet transmission is completely secure and we cannot guarantee absolute security.

6. Overseas Disclosure

Some of the third-party service providers listed in clause 4 are based overseas, including in the United States. By using the Platform, you consent to the disclosure of your personal information to those providers. We take reasonable steps to ensure overseas providers maintain standards comparable to the APPs.

7. Access, Correction, and Deletion

You have the right to request access to, correction of, or deletion of personal information we hold about you. You can:

• export your conversation and account data via Settings > Export Data in the Platform
• request correction or deletion by emailing team@openhr.com.au

We will respond to access and correction requests within 30 days. In some circumstances we may be unable to delete information we are required by law to retain.

8. Cookies

The Platform uses session cookies to maintain your login state and functional cookies to remember your preferences. We do not use tracking cookies for advertising or analytics purposes without your consent.

9. Children

The Platform is intended for use by business owners and their authorised staff. We do not knowingly collect personal information from persons under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before any material change takes effect. The current version is always available at openhr.com.au/privacy.

11. Complaints

If you have a complaint about how we handle your personal information, please contact us at team@openhr.com.au. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Contact

Privacy enquiries: team@openhr.com.au

Unfair Dismissal Experts Pty Ltd trading as OpenHR
ABN 71 616 598 906

Last updated: 6 June 2026