Last updated: 15 February 2026

Overview

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you access or use our software-as-a-service (SaaS) products, including AI-assisted AML/CTF compliance tools and related web applications (the "Services").

By using the Services, you acknowledge that your information will be handled as described in this Privacy Policy.

Information We Collect

We may collect the following categories of information:

1) Account and profile information

Name
Email address
Authentication details and login metadata
Account preferences and settings

2) Billing and subscription information

Purchase history, plan details, and credit balance data
Payment-related identifiers from payment processors
Limited billing contact details
We do not store full payment card numbers; payment processing is handled by third-party payment providers.

3) Content you submit

Documents, files, prompts, and messages you upload or submit
Follow-up questions and chat history associated with your account
Metadata about uploaded files (for example, filename, size, type, and processing status)

4) Usage and technical information

Device and browser information
IP address and approximate location
Log data, diagnostics, and analytics events
Cookie and similar tracking data, subject to your choices

How We Use Information

We use personal information to:

Provide, operate, maintain, and improve the Services
Authenticate users and secure accounts
Process payments, credits, and transactions
Deliver AI analysis results and related features
Communicate service notices, support responses, and updates
Detect fraud, abuse, security incidents, and policy violations
Comply with legal obligations and enforce our terms

AI Processing and Service-Specific Data Use

When you use AI features, your submitted content may be processed by AI service providers acting on our behalf to generate analysis and responses. We may also process technical metadata (for example, token usage, processing time, and workflow logs) to operate features, measure performance, allocate credits, and improve reliability.

You are responsible for ensuring you have the right to submit any content you upload and that it does not violate applicable law or third-party rights.

Cookies and Similar Technologies

We use cookies and similar technologies for:

Essential site functionality
Preferences and consent management
Security and fraud prevention
Analytics and product performance

Where required by law, we request consent for non-essential cookies. You can manage cookie preferences through our cookie settings tools and your browser controls.

We do not sell personal information. We may share information:

With service providers that help deliver the Services (for example, cloud hosting, authentication, payment processing, email delivery, analytics, and AI infrastructure)
With professional advisers, auditors, and legal counsel under confidentiality obligations
In connection with a merger, financing, acquisition, or asset sale
To comply with law, regulation, legal process, or enforceable governmental request
To protect rights, property, safety, users, or the public
With your consent or at your direction

International Data Transfers

Our providers and infrastructure may operate in multiple countries. Where information is transferred across borders, we use appropriate safeguards as required by applicable law.

Data Retention

We retain personal information for as long as necessary to:

Provide the Services and maintain your account
Meet legal, accounting, tax, and regulatory obligations
Resolve disputes and enforce agreements
Maintain security, audit, and fraud-prevention records

Retention periods may vary by data category and service context.

Data Security

We implement reasonable technical, administrative, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location and applicable law, you may have rights to:

Access, correct, or delete personal information
Request a copy or portability of certain information
Object to or restrict certain processing
Withdraw consent where processing is based on consent
Opt out of marketing communications

To exercise rights, contact us using the details below. We may need to verify your identity before processing your request.

Children

The Services are intended for business and adult users and are not directed to children under 16. If you believe a child has provided personal information, contact us so we can take appropriate steps.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by other reasonable means. The "Last updated" date shows when this Privacy Policy was most recently revised.

Contact

For privacy questions or requests, contact: contact@instsoft.com.au

Privacy Policy