Privacy Policy

1. Introduction

Local Knowledge Pty Ltd ("we", "our", "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered strategic advisory platform (the "Service").

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, phone number, company name, job title
• Professional Information: Practice size, professional credentials, areas of expertise
• Billing Information: Payment card details, billing address (processed securely through third-party payment processors)
• Communication Data: Information you provide when contacting us or requesting consultation

2.2 Financial Data

Our Service is designed to process financial documents and data, including:

• Financial statements (balance sheets, income statements, cash flow statements)
• Trial balances and general ledgers
• Tax returns and compliance documents
• Client financial information you upload for analysis

Important: All financial data is encrypted at rest and in transit. We implement bank-level security measures to protect this sensitive information.

2.3 Usage Information

We automatically collect information about how you use our Service:

• Log data (IP address, browser type, access times, pages viewed)
• Device information (hardware model, operating system, unique device identifiers)
• AI interaction data (queries submitted to AI agents, documents processed, insights generated)
• Performance data (system usage patterns, feature utilization, error logs)

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Providing, operating, and maintaining our AI-powered platform
• Processing financial documents and generating strategic insights
• Training and improving our AI models (using anonymized data only)
• Personalizing your experience and tailoring recommendations

3.2 Communication

• Responding to your inquiries and providing customer support
• Sending service-related notifications and updates
• Providing you with news, special offers, and general information (with your consent)

3.3 Analytics and Improvement

• Analyzing usage patterns to improve Service functionality
• Conducting research and development for new features
• Detecting, preventing, and addressing technical issues and security threats

3.4 Compliance and Legal

• Complying with legal obligations and regulatory requirements
• Protecting our rights, privacy, safety, or property
• Enforcing our Terms and Conditions

4. AI and Machine Learning

4.1 Local Knowledge Learning Model

Critical Privacy Principle: Our "Rising Tide" AI learning system is designed with privacy at its core. We learn from local knowledge (anonymized patterns, insights, and best practices)—NEVER from your confidential client data.

Here's exactly how we protect your client confidentiality while enabling intelligent learning:

• Client Data Isolation: Your specific client financial data (names, numbers, transactions) stays completely isolated in your secure environment. This data is NEVER accessed by other users or used to train shared AI models.
• Local Knowledge Only: We extract anonymized patterns, industry trends, and best practices (e.g., "construction companies often face cash flow challenges in Q1") without any client-identifiable information.
• Knowledge Forest Privacy: Our proprietary learning system creates client-specific knowledge trees that remain completely private to your account—no cross-client data sharing.
• Rising Tide = Anonymized Insights: The "rising tide" learns from patterns like "businesses in retail sector benefit from seasonal forecasting" without ever knowing whose data revealed this pattern.
• Zero Cross-Contamination: Client A's financial statements never touch Client B's analysis. Only abstract, anonymized industry knowledge flows through the system.
• Opt-Out Available: You can request to opt out of even anonymized pattern contribution by contacting us at [email protected]

4.2 What We Mean by "Local Knowledge"

4.3 AI Decision-Making

Our AI agents provide recommendations and insights, but human review is always recommended for critical business and financial decisions. We do not make automated decisions that significantly affect you without human oversight options.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Cloud hosting services (AWS, Azure)
• Payment processing (Stripe)
• Email delivery services
• Analytics providers

These providers have access to your information only to perform specific tasks and are obligated to protect your data.

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests (court orders, subpoenas)
• Government or regulatory inquiries
• Situations involving potential threats to safety or security

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Compliance: Regular security audits and compliance certifications (SOC 2, ISO 27001)
• Data Isolation: Client data is logically isolated and cannot be accessed by other users
• Backup and Recovery: Regular encrypted backups with disaster recovery procedures

Note: While we implement industry-leading security measures, no system is completely secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our Services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain AI model training quality (using anonymized data)

When you close your account, we will delete or anonymize your personal information within 90 days, unless retention is required by law or for legitimate business purposes.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

8.1 Australian Privacy Principles (APPs)

Under Australian privacy law, you have the right to:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

8.2 GDPR Rights (EU/UK Users)

If you are in the EU or UK, you have additional rights under GDPR:

• Right to Access: Obtain confirmation of whether we process your data and access to it
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restriction: Restrict processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (without affecting lawfulness of prior processing)

8.3 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• Phone: +61 2 8338 8900
• Mail: Local Knowledge, Level 3 Suite 310, 247 Coward Street, Mascot NSW 2020, Australia

We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Australia. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Privacy Shield frameworks (where applicable)

10. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending you an email notification (for significant changes)
• Providing in-app notifications

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

14. Complaints and Disputes

If you have a complaint about how we handle your personal information, please contact us first at [email protected]. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with:

• Australian users: Office of the Australian Information Commissioner (OAIC)
  Website: www.oaic.gov.au
  Phone: 1300 363 992
• EU/UK users: Your local data protection authority