Version: 2026-07-10
Effective Date: This Policy is effective from the date you first access the platform.
Risk 2 Solution Pty Ltd (ABN 91 128 669 554) (“we”, “us”, or “our”) operates the Presilience360 platform (the Service).
We are committed to protecting your personal information and handling it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This Privacy Policy explains how we collect, hold, use, disclose and protect personal information when you access or use the Service, interact with us, or otherwise provide information to us.
We may collect personal information that is reasonably necessary for our functions and activities.
We may collect personal information you provide directly to us, including:
(a) account and registration details, such as your name, email address, organisation name, role, and ABN;
(b) organisation-related information, such as school or business details, locations, and staff information;
(c) documents, records, and other content uploaded to the Knowledge Base or otherwise submitted through the Service;
(d) payment, billing, and transaction information, including information associated with subscriptions or purchases, noting that payment card information is generally processed by our third-party payment provider rather than stored by us; and
(e) correspondence, support requests, enquiries, feedback, and other communications you send to us.
When you use the Service, we may automatically collect certain technical and usage information, including:
(a) log data, such as your IP address, browser type, pages visited, and the time and date of access;
(b) device information; and
(c) usage information, such as features used, interactions within the Service, and general activity patterns.
We may receive personal information or related information from third parties, including:
(a) the Australian Business Register, where you use ABN lookup functionality; and
(b) Google Places API or similar services, where location enrichment or address-related functionality is used.
We do not actively seek to collect sensitive information unless it is reasonably necessary for providing the Service and permitted by law.
If you upload or provide sensitive information through the Service, you are responsible for ensuring that you are authorised to do so and that the information is relevant to your use of the Service.
We may collect personal information:
(a) directly from you when you create an account, use the Service, contact us, make a payment, or submit information to us;
(b) automatically when you interact with the Service or our systems; and
(c) from third parties and service providers where relevant to the operation of the Service.
Where practicable, we will collect personal information directly from you.
We may collect, hold, use and disclose personal information to:
(a) provide, operate, maintain and improve the Service;
(b) create and manage user accounts and access permissions;
(c) process transactions and send payment, billing, subscription, service, and administrative communications;
(d) provide customer support and respond to enquiries;
(e) operate product features, including search, document processing, document extraction, summarisation, analysis, and content generation tools;
(f) monitor usage, troubleshoot issues, improve functionality, and maintain security;
(g) comply with legal obligations and regulatory requirements; and
(h) protect the Service, our users, and our business against fraud, misuse, security incidents, and unauthorised activity.
We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.
We may disclose personal information to third-party service providers who support the operation of the Service, including providers of:
(a) database and authentication services, including Supabase;
(b) artificial intelligence and machine learning services, including Anthropic, for document extraction, analysis, summarisation, and generation features made available through the Service;
(c) payment processing services, including Stripe; and
(d) mapping, location, and related API services, including Google Places API.
We take reasonable steps to ensure that service providers handling personal information on our behalf do so in a manner consistent with applicable privacy obligations.
We may disclose personal information where required or authorised by law, including in response to court orders, legal process, regulatory requests, or lawful requests from government authorities.
If we are involved in a merger, acquisition, sale of assets, restructure, or similar business transaction, personal information may be disclosed or transferred as part of that process.
Where practicable, we will take reasonable steps to notify affected users before personal information becomes subject to a materially different privacy framework.
Our primary hosting environment is located in Sydney, Australia. However, some of our service providers, related infrastructure, or subprocessors may store, access, process, or back up personal information outside Australia.
As a result, personal information may be disclosed to recipients located in countries outside Australia, including where our third-party providers or their subprocessors operate.
Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles the information in a manner consistent with the Australian Privacy Principles, unless an exception under the Privacy Act applies.
Where you use features of the Service that involve document extraction, analysis, summarisation, or content generation, information submitted through those features may be processed by third-party AI service providers on our behalf.
This may include uploaded documents, prompts, instructions, metadata, and generated outputs to the extent reasonably necessary for the relevant feature to function.
We use these providers to deliver AI-enabled functionality within the Service. We aim to limit the information shared to what is reasonably necessary for that purpose.
You should not upload personal information, confidential information, or third-party information to the Service unless you are authorised to do so.
Our primary data hosting environment is located in Sydney, Australia. We currently use Supabase in the Asia-Pacific (Sydney) region for core database services.
We implement reasonable technical and organisational measures to protect personal information against misuse, interference, loss, and unauthorised access, modification, or disclosure.
These measures may include encryption in transit and at rest, access controls, authentication controls, and periodic security reviews.
While we take reasonable steps to protect personal information, no method of transmission over the internet or method of electronic storage is completely secure. Because of this, we cannot guarantee absolute security.
If we become aware of a data breach affecting personal information, we will assess and respond to the incident in accordance with applicable law, including the Notifiable Data Breaches scheme under the Privacy Act where required.
We retain personal information for as long as reasonably necessary to provide the Service, operate our business, comply with legal obligations, resolve disputes, and enforce our agreements.
If your account is closed or your relationship with us ends, we will take reasonable steps to delete or de-identify personal information within a reasonable period, unless we are required or permitted by law to retain it.
Some information may be retained for longer in backups, security logs, billing records, legal compliance records, or where reasonably necessary to investigate incidents, exercise legal rights, or meet regulatory obligations.
Subject to applicable law, you may request access to the personal information we hold about you and request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information.
You may also opt out of receiving direct marketing communications from us by using the unsubscribe function in those communications or by contacting us using the details below.
To protect personal information, we may need to verify your identity before processing access, correction, or other privacy-related requests.
We use cookies and similar technologies to support the operation of the Service, understand usage, and improve functionality.
You can usually control cookies through your browser settings. However, if you disable cookies, some parts of the Service may not function properly.
The Service is intended for use by organisations and authorised adult users acting on their behalf. It is not directed to children.
We do not knowingly collect personal information directly from children through account registration or direct interaction with the Service. If you believe a child has provided personal information directly to us without appropriate authority, please contact us so we can investigate and take appropriate action.
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties. You should review the privacy policies of those third parties separately.
If you have a complaint about how we handle your personal information, please contact us using the details below.
We will consider your complaint and respond within a reasonable period.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
We may update this Privacy Policy from time to time.
Where we make material changes to the way we handle personal information, we may notify users by posting an updated version on our website or through the Service, and by taking any additional steps we consider appropriate in the circumstances.
The updated Privacy Policy will take effect from the effective date stated at the top of the policy.
For privacy-related enquiries, requests, or complaints, please contact our Privacy Officer:
Risk 2 Solution Pty Ltd PO Box 1009, Cleveland QLD 4163, Australia Phone: 1300 560 295 Email: info@risk2solution.com Website: www.risk2solution.com