What I collect, and what happens to it.

Version 1.0 · 28 October 2026

QuantAI is run by me, Dave Richardson, through Jobchange Australia (ABN 30 724 947 983), and I handle personal information in line with the Privacy Act 1988 and the Australian Privacy Principles. This page says what I collect, why I collect it, where it's kept, who else handles it on my behalf, and what you can ask me to do about it. If anything here isn't clear, email me at dave@quantai.com.au and I'll answer it.

What I collect

• When you take the 6-minute check: your name, company name, role, email address and, if you choose to give it, your phone number, along with your answers about how the work gets done in your business. If you tick the box asking for occasional notes, I keep a record that you did and the exact words you agreed to.
• When you book a call: your name, email address and anything you write in the booking form.
• When you email me: whatever you send.
• During an audit: the recordings and transcripts of the interviews, and the figures your business gives me, such as roles, rough hourly costs and the tools you pay for. The engagement terms say how those are handled, and they're deleted 90 days after the debrief.
• When you pay for an audit: your billing name and the business details that go on the tax invoice. Card payments are handled by Stripe, and I never see or keep your card number.
• Business contact details from public sources: I write to some businesses I think the audit could help, using contact details they publish themselves, on their own website or in a business directory or public register. I keep the address, the name and role published beside it, and where and when I found it.
• Site visits: Google Analytics records which pages are visited and roughly where visitors come from, using its own cookies. If you arrive from a link that says where it came from, your browser keeps that on your own device for 90 days, so the check can say where you first found me when you submit it. The check also saves your progress on your device until you send it, so you can come back to it.

Why I collect it

To write and send your check report, to follow up about it, to book and run calls and audits, to invoice, and to keep a record of who has asked not to hear from me so that they don't. I only send the occasional notes to people who ticked the box for them. I don't sell personal information, I don't share it with anyone for their own marketing, and I don't run advertising trackers on this site.

Who else handles it

A few services do part of the work for me, and each of them only gets what it needs for its part:

• Cloudflare runs the check, keeps its submissions and checks submissions for spam.
• Anthropic, the company behind the Claude AI models, writes the two follow-up questions in the check from your earlier answers, helps me draft your report from your answers, and helps me work through audit transcripts. Its terms don't let it train its models on what I send it, and I read and check everything before it goes to you.
• Resend delivers the emails the check sends, and Zoho is my email provider for everything else.
• Vercel and Neon run the system I use to keep track of enquiries, bookings and the people I write to. The database is held in Sydney.
• Cal.com takes call bookings, and interviews run on Zoom and are transcribed by Otter.
• Stripe takes card payments.
• Google receives site usage data through Google Analytics, and never your answers to the check, your name or your email address.
• GitHub hosts this website and keeps standard server logs.

Most of these companies are based in the United States and some of them process information there, so personal information you give me may be handled outside Australia. Beyond these services, I only disclose personal information if the law requires it.

How long I keep it

Check submissions and booking details are kept for as long as they're useful for following up, and deleted whenever you ask. Audit recordings and transcripts are deleted 90 days after the debrief, and invoices are kept for the five years the tax law requires. If you ask me to stop writing to you, I keep your email address on a do-not-contact list for good, because that list is how I make sure it doesn't happen again.

Unsubscribing

Any email I send can be stopped by replying to say so, and on the emails the check sends, most email programs also show an unsubscribe button. Either way you'll hear nothing more from me.

Seeing, correcting or deleting what I hold

Email me and I'll tell you what I hold about you, correct anything that's wrong, or delete it, and I'll do it within 30 days. If there's something I have to keep, such as an invoice, I'll say what it is and why.

Security

Information is encrypted on its way to and from these services, access to it is limited to me, and the services above are the only ones that hold it. If there's ever a data breach that's likely to cause serious harm, I'll tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Complaints

If you're unhappy with how I've handled your information, tell me first, and I'll look into it and come back to you with what I've done about it. If you're still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

When this policy changes in a way that matters, it gets a new version number and date at the top of this page.