DATASETS FRONTIER
Privacy policy
Corrected on 8 November 2026 (flagged until 10 December 2026): see Changes to this policy.
This is the privacy policy of Datasets Frontier Pty Ltd (ABN 82 703 817 234), the operator of this website and the Datasets Frontier services. Datasets Frontier is based in New South Wales; privacy requests go by email, as set out on the Privacy contact page. The policy starts on 7 November 2026. It explains what personal information we collect, why we collect it, where it is kept, who processes it, and how you can see or correct it. It follows the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles, the APPs. This service is for business use and is not directed at children.
Who we are
This site and the services on it are run by Datasets Frontier Pty Ltd (ABN 82 703 817 234).
Privacy contact details are on the Privacy contact page.
APP 1 — open and transparent management
We manage personal information openly. This policy is public, our internal privacy procedures are written down, and we review them when the site or the services change. Each procedure names the person responsible, the steps, and the time limits.
Kinds of information we hold: your name, work email, organisation and message (enquiries); the text of your chats, the files you upload and the drafts you request (app use); and your network (IP) address and browser details, which Cloudflare, our website host, processes when you open a page. Uploaded files may contain other people's names or images that appear in site documents or photographs.
APP 2 — anonymity and pseudonyms
You can read the public pages without telling us who you are. You need to share personal details only if you email us, send the enquiry form when it is open, or use the chat features.
APP 3 — what we collect
When you email us, we receive your email address, your name if you include it, and your message. When the pilot enquiry form on our home page is open, it asks for your name, your work email address, your organisation, and what you would like to improve. Only the email address is required. We also record the date and time your enquiry arrived.
If you use the app features, we store what you type into the chat, the files you upload, and the requests you draft, so that the site can answer you and so the work can be reviewed later.
We collect information from you. Uploaded documents may also contain information about other people. You must be allowed to share it (see the Terms), and we use it only to provide the service to you. We collect only what we reasonably need for the purposes below.
APP 4 — information we receive without asking
If we receive personal information we did not ask for, we check whether we could have collected it under APP 3. If not, we delete or de-identify it as soon as practicable.
APP 5 — telling you when we collect
When you email us, the line beside our address links to this page; when the enquiry form is open, the notice next to it covers the APP 5 matters, with a link back to this page. If you do not give us an email address, we cannot reply to you.
APP 6 — how we use and share information
We use the details you send by email or with the enquiry form only to reply to your enquiry and to discuss a possible pilot with you. We may email you about your enquiry and the pilot. We do not add you to a mailing list, and we do not sell or share your details for someone else's purposes.
Content you put into the app is used to operate the service for you: answering chats, processing uploaded files and drafting the outputs you ask for. We do not use it for anything else unless the law requires or you agree.
APP 7 — marketing
We do not use or share personal information for direct marketing, and we run no marketing lists. If that ever changes, we will only market to you with consent and every message will carry a working unsubscribe, as the Spam Act 2003 (Cth) requires.
APP 8 — sending information overseas
Email sent to our address passes through Cloudflare Email Routing, which forwards it to our business mailbox at our email provider; both may process it on servers outside Australia. When the enquiry form is open, it is received by Cloudflare, which hosts this website, and checked by Cloudflare Turnstile, which processes your IP address and browser details to tell people from automated traffic; the enquiry is then sent by email to the same mailbox. We do not send enquiries to any AI service.
Some third parties process site or app data in, or partly in, other countries: Anthropic and GitHub in the United States; Cloudflare across its global network. Anthropic processes a chat or an uploaded file when the Claude-based coach features run, including on the private claude.ai coach artifact; GitHub keeps the delivery records for sends; Cloudflare hosts this website, forwards email sent to our address and receives the enquiry form when it is open; our email provider holds our business mailbox. Before personal information is sent overseas we take reasonable steps to make sure the recipient handles it in line with the APPs.
APP 9 — government identifiers
We do not collect, use or share government-related identifiers such as tax file numbers or Medicare numbers.
APP 10 — accuracy
We take reasonable steps to keep the personal information we hold accurate, up to date and complete for the purposes we use it for. The best fix is to tell us directly; see APP 13.
APP 11 — security
Enquiries are kept as set out under APP 8, by the providers named there. Records on the private coach artifact are held in the account with the provider named under APP 8. The AI features cannot read enquiries.
When information is no longer needed for any purpose we use it for, and no law requires us to keep it, we delete it or de-identify it. Automatic deletion applies to short-lived security data such as rate-limit counters, which are held in memory only; enquiries, however they arrive, are deleted from our mailbox by hand.
APP 12 — seeing your information
You can ask what personal information we hold about you, and we will give you access within 30 days, free of charge for the request itself. If we ever had to refuse, we would tell you in writing why, and how you can complain about the refusal; the grounds are set out in our privacy request procedure.
APP 13 — correcting your information
You can ask us to correct or delete what we hold about you at any time. We will correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will delete information on request unless we need to keep it by law or for a legal claim, or cannot remove it from a provider's systems; we will tell you which. When we correct or delete, we confirm back to you.
Write to: The Director, Datasets Frontier Pty Ltd · [email protected]
Cookies
The public website sets no cookies. The site has no analytics and no advertising. If you turn on Reading mode with the Reading mode switch at the top of each page, your browser remembers that choice in its own local storage (named df-reading); it is never sent to us. The Cookies page lists exact names and lifetimes.
When the enquiry form is open, to stop it being sent over and over, the server counts how many enquiries arrive from each network address. It keeps that count in its working memory for up to one hour. The count is not written to disk and is gone when the server restarts.
How long we keep information
We keep each enquiry sent through the enquiry form for 12 months from the day it arrives. Enquiries, whether sent through the form or to our email address, are kept in our business mailbox and deleted from it by hand each month once they are 12 months old.
Other records have their own periods, mirrored in our retention schedule:
- chat conversations on the app: deleted by hand within 12 months of the last message
- uploaded files and drafted requests: deleted by hand within 12 months of upload
- records left from the cloud review deployment, now shut down: deleted by hand within 90 days after the review ended
- example material on the private coach artifact: replaced or removed by hand within 12 months
- operator logs: 90 days
- relay-map records of connected systems: for the engagement, then 7 years with our business records
- other short-lived technical records, such as rate-limit counters: up to one hour, held in working memory only
Automated decisions and AI use
AI features on this site help draft and review text; they do not make decisions about people. The detail, including which providers run the models, is on the AI use page.
From 10 December 2026 the Privacy Act will require APP entities that have arranged for a computer program to make, or do a thing that is substantially and directly related to making, a decision that could reasonably be expected to significantly affect a person's rights or interests, using personal information about them, to describe this in their privacy policy. Our AI features do not make such decisions. If that ever changes, we will describe here what kinds of personal information the feature uses and what kinds of decisions it makes, or does things substantially and directly related to making, before the feature runs.
Health information (New South Wales)
We are not a health service provider and do not ask for health information. Please do not include it in an enquiry or upload. If you do, tell us and we will handle it with care. The Health Records and Information Privacy Act 2002 (NSW) may also apply to health information; you can complain to the NSW Privacy Commissioner.
Complaints
If you think we have mishandled your personal information, please complain to us first using the privacy contact. We acknowledge a complaint within 5 working days and answer within 30 days, in writing, with what we found and what we will do. If you are not satisfied with the response, you can complain to the Office of the Australian Information Commissioner through its privacy complaints process .
Changes to this policy
If what we collect or how we keep it changes, we will update this page before the change takes effect. Material changes are flagged on the page for 30 days after they take effect.
Corrections on 8 November 2026. We corrected this page to match how the site works and the words of the law. Nothing we collect, or how we keep it, has changed. The corrections: the kinds of information now include your network address as our website host processes it, and the user id on the cloud review deployment; APP 5 says how emailing us is covered and what happens if you give no email address; APP 11 no longer says that only we can read enquiries (the providers named under APP 8 hold them), and says where the cloud records are held; APP 12 says a refusal tells you how to complain; the 12-month retention line covers the enquiry form; the automated-decisions paragraph uses the Act's own description, and says we would describe the kinds of decisions; and complaints are acknowledged within 5 working days. This notice stays until 10 December 2026.
Change on 8 November 2026. The separate cloud review deployment has been shut down. OpenAI no longer hosts any part of the service, and the user id that deployment passed with each request is no longer collected. Records left from it are deleted as the retention list above says. The business location is now given as the state, New South Wales, not a suburb. The private workspace link, the site owner's sign-in page, the encrypted connection to a computer we control and the two cookies that came with them were retired on 8 November 2026, so this page no longer describes them, and enquiries are no longer deleted automatically: they are kept in our business mailbox and deleted by hand once they are 12 months old. This notice stays until 8 December 2026.
Last updated: 7 November 2026