Privacy Policy

Last updated: 23 July 2026

[Faraday legal entity name] (ACN [insert ACN]) trading as "Faraday" ("Faraday", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect personal information, and how you can access, correct or complain about our handling of it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Faraday platform (the "Platform"), you agree to the handling of your personal information as described in this Policy.

This Policy should be read together with our Terms & Conditions.

1. What personal information we collect

We collect personal information that is reasonably necessary for our functions and activities, including:

(a) Account information - your name, email address, phone number, password (stored in hashed form), organisation, role, and authentication details (including two-factor authentication settings).

(b) Organisation and business information - company registration details, contacts, tax-agent details, and other information you provide about your organisation.

(c) Information you input about others - where you use the Platform, you may enter personal information about your employees, advisors and other individuals, such as names, email addresses, roles, salaries, superannuation, hours worked and R&D time allocations. You are responsible for ensuring you are entitled to provide this information (see clause 4).

(d) Billing information - subscription, seat and billing status. Card and payment details are collected and processed directly by our payment processor (Stripe) and are not stored by Faraday.

(e) Content and usage data - the activities, costs, timesheets, documents and other data you and your users submit or generate, and records of your interactions with the Platform (including AI-assisted features).

(f) Technical data - IP address, device and browser information, log data and cookies (see clause 9).

2. How we collect personal information

We collect personal information: directly from you when you register, subscribe, communicate with us or use the Platform; automatically as you interact with the Platform; and from your authorised users and administrators who input information on your organisation's behalf. Where reasonable and practicable, we collect personal information directly from the individual concerned; however, because the Platform is a business tool, we often collect information about individuals (such as employees) from the organisation that engages us.

3. Why we collect, hold, use and disclose it

We collect, hold, use and disclose personal information to:

(a) provide, operate, maintain, secure and improve the Platform and its features;

(b) create and administer accounts and organisations, and manage roles and access;

(c) help you record R&D activities, time and costs and assemble supporting documentation for an R&D Tax Incentive claim;

(d) process payments, manage subscriptions and billing, and prevent fraud;

(e) provide support, respond to enquiries and send service-related communications;

(f) operate AI-assisted features (see clause 6);

(g) monitor, analyse and improve performance, security and usage; and

(h) comply with our legal obligations and enforce our Terms.

We will not use or disclose your personal information for a purpose unrelated to the above unless you would reasonably expect it, you consent, or we are required or authorised by law.

4. Information you provide about other individuals

Where you enter personal information about your employees, advisors or other individuals, you represent and warrant that you are authorised to do so, and that you have made those individuals aware of the nature of the information collected, that it will be handled by Faraday in accordance with this Policy, and how they can access this Policy. You are responsible for obtaining any consents required from those individuals.

5. Disclosure to third parties (service providers)

We do not sell your personal information. We disclose personal information to trusted third-party service providers who help us operate the Platform, only to the extent necessary to provide their services and under obligations of confidentiality and data protection. These include:

(a) cloud hosting, database and storage providers (for hosting the Platform and storing your data);

(b) our payment processor (for subscriptions and billing);

(c) our email delivery provider (for transactional and service emails);

(d) AI model providers (to power AI-assisted features - see clause 6); and

(e) analytics, logging, security and infrastructure providers.

We may also disclose personal information where required or authorised by law, to enforce our Terms, to protect the rights, property or safety of Faraday or any person, or in connection with a sale, merger or restructure of our business (subject to appropriate confidentiality protections).

6. AI-assisted features

Some Platform features use artificial intelligence and large language models to extract, summarise, draft or classify content. To provide these features, relevant content you submit may be processed by our AI model provider on our behalf. We select providers who commit not to use data submitted through their business APIs to train their general models. AI output may be inaccurate and must be reviewed by you before you rely on it.

7. Overseas disclosure

Some of our service providers, and the servers on which personal information is stored or processed, may be located outside Australia (including, for example, in the United States and other jurisdictions). Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. By using the Platform, you acknowledge and consent to your personal information being stored and processed overseas as described in this Policy.

8. Security

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These measures include encryption in transit, access controls and role-based permissions, tenant isolation, authentication (including optional two-factor authentication), and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials secure and for the activity under your account.

9. Cookies and similar technologies

We use cookies and similar technologies that are necessary to operate the Platform, including to keep you signed in, maintain your session and active organisation, and secure the service. You can control cookies through your browser settings, but disabling essential cookies may prevent the Platform from functioning correctly.

10. Data retention

We retain personal information for as long as it is needed to provide the Platform, for as long as your account or organisation is active, and for a reasonable period afterwards to meet our legal, accounting, audit and record-keeping obligations, or to resolve disputes and enforce our agreements. When personal information is no longer required, we take reasonable steps to delete or de-identify it.

11. Direct marketing

We may send you service-related communications that are necessary to administer your account. We may also, where permitted, send you information about features, updates or offers. You can opt out of marketing communications at any time using the unsubscribe function in the message or by contacting us. We do not use sensitive information for direct marketing without consent.

12. Access and correction

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Much of your information can be viewed and updated directly within the Platform. To make a request otherwise, contact our Privacy Officer (clause 15). We will respond within a reasonable period. There is no charge for making a request, though we may charge a reasonable fee for giving access in some circumstances. If we refuse access or correction, we will tell you why and how you can complain.

Note: where the information relates to an individual within a customer organisation, we may direct the request to, or handle it in conjunction with, that organisation as the entity that controls the relevant data.

13. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact our Privacy Officer (clause 15) with details of your complaint. We will investigate and respond within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be available on the Platform, and the "Last updated" date above will change. Where a change is material, we will take reasonable steps to notify you. Your continued use of the Platform after an update takes effect constitutes acceptance of the updated Policy.

15. Contact us

For privacy questions, requests or complaints, contact our Privacy Officer:

Faraday - Privacy Officer

Email: privacy@faradayrnd.com