Practise Board Privacy Policy

Overview

Practise Board Pty Ltd (“we”, “us”, “our”) is committed to protecting personal information. This policy explains how we collect, use, hold, and disclose personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

We collect account details, firm details, team member details, client records, job information, notes, checklist items, billing metadata, support messages, and technical logs needed to operate Practise Board. Where your account is used to store information about your clients (including third-party individuals), you are responsible for ensuring you have the necessary consents to provide that information to us.

How we use information

We use information to provide the service, authenticate users, isolate firm data, send operational emails, process billing, troubleshoot issues, improve product reliability, and meet legal obligations. We do not sell personal information, and we do not use client data for advertising.

Client data and AI features

AI features may send job context, client names, due dates, and note excerpts to AI subprocessors to draft chase emails or summaries. Practise Board masks likely TFNs before AI requests, but users should avoid entering TFNs or other unnecessary sensitive information in notes.

Subprocessors

Practise Board uses service providers including Neon for database hosting, Vercel for application hosting, Resend for email delivery, Stripe for billing, Sentry for error monitoring, Upstash for Redis-backed security controls, and OpenRouter and its model providers for optional AI features.

Overseas disclosure

Some providers may process or store information outside Australia, including in the United States. By using Practise Board, you acknowledge this cross-border processing where it is necessary to provide the service, and we take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs (APP 8).

Security

We implement industry-standard technical and organisational measures to protect personal information, including encryption in transit and at rest, firm-level data isolation, role-based access controls, and multi-factor authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention and deletion

We retain personal information for as long as your account is active and as needed to provide the service and meet legal obligations. Upon cancellation, your data is retained for 90 days to allow export, after which it may be permanently deleted. You may request earlier deletion by contacting us, subject to any legal retention requirements.

Cookies and analytics

We use cookies and similar technologies for authentication, security, and to understand aggregate usage of the website through analytics services. You can configure your browser to refuse cookies, though some parts of the service may not function correctly without them.

Direct marketing

We may send you service-related communications and, where permitted, information about features or offers. You may opt out of marketing communications at any time using the unsubscribe link in the message or by contacting us.

Notifiable data breaches

In the event of a data breach involving personal information that is likely to result in serious harm, we will assess the breach under the Notifiable Data Breaches scheme in the Privacy Act and, where required, notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

Access, correction, and complaints

You can request access to or correction of personal information by contacting support@practiseboard.com.au. We may need to verify your identity and firm authority before acting on a request.

If you are not satisfied with how we have handled your personal information, contact us first and we will aim to resolve the matter promptly. You may also lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.

Contact

For privacy questions or requests, contact us at support@practiseboard.com.au.