Privacy Policy
Last updated: 29 April 2026
1. Who we are
Everyshot Pty Ltd (ABN 12 345 678 901) operates Expertle ("we", "us", "our"). We're committed to protecting your privacy and operate in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. What we collect
From you (the trainer/RTO admin): name, email, phone, organisation, ABN, billing details, login credentials. From learners enrolled in your courses: name, email, course-progress data (sections completed, time spent, scores), assessment responses. From our website: IP address, device, browser, analytics events.
3. How we use it
To deliver the Expertle service, generate course content via AI, track completion, issue certificates, process payments via Stripe, send service-related emails, comply with our legal obligations under the VET Quality Framework, and improve the product. We never sell personal information.
4. Sub-processors we share with
- Firebase / Google Cloud — hosting + database (australia-southeast1)
- Stripe — payment processing
- Anthropic — AI content generation (Zero Data Retention agreement in place; prompts not used for training)
- Cloudflare — CDN + DDoS protection
- Resend — transactional email
Each sub-processor is bound by data processing agreements that require equivalent or stricter privacy protections.
5. Data retention
Course content and learner records are retained for the duration of your active subscription plus 30 days after cancellation (in case you reactivate). Aggregated analytics are retained for 13 months in GA4. Backups are encrypted and rotated 30 days. RTOs subject to ASQA evidence-retention rules can request bulk export anytime.
6. Your rights under the APPs
You can request access to the personal information we hold about you, ask us to correct or delete it, opt out of marketing emails (the "unsubscribe" link is real), and complain to us about how we've handled your data. Email hello@expertle.com.au with the subject line "Privacy request" and we'll respond within 30 days.
7. Cookies & tracking
We use first-party cookies for: auth session management, attribution (UTM tracking — 30-day cookie), preference persistence. We use Google Analytics 4 for aggregated, IP-anonymised website analytics. We use Microsoft Clarity for heatmaps (also anonymised). You can disable cookies in your browser; some features won't work without auth cookies.
8. International data transfers
Customer data is stored in Australian regions. AI processing routes through OpenAI/Anthropic infrastructure which may include US regions; transfers are protected by data processing agreements and Zero Data Retention terms. Stripe payment processing operates globally per Stripe's privacy policy.
9. Security
HTTPS-only, encrypted at rest, role-based access, MFA on all admin accounts, Sentry for error monitoring (with PII scrubbing), regular security reviews. We hold no payment card data — Stripe holds it on our behalf.
10. Children's data
Expertle is not designed for under-16 learners. Where AU VET delivery legitimately includes school-leavers (16-18), parental/guardian consent is the responsibility of the RTO operating the course. We don't collect minors' data outside that context.
11. Complaints
If you're unhappy with our response to a privacy request, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
12. Changes to this policy
We may update this policy. Material changes will be flagged on this page and emailed to active subscribers. Continued use after changes constitutes acceptance.
13. Contact
Everyshot Pty Ltd
Level 1, 123 Adelaide Terrace
East Perth WA 6004
hello@expertle.com.au
This policy is plain-English by design. If anything is unclear, ask us — we'll add an FAQ entry.