DATAV3

Privacy Policy

How DATAV3 collects, uses, stores, and protects information.

Effective date: 9 August 2026
Last updated: 10 August 2026

This Privacy Policy explains how Diligence Research Pty Ltd (ABN 11 625 635 305, ACN 625 635 305) (Diligence Research, DATAV3, we, us or our) collects, holds, uses and discloses personal information.

It applies to the DATAV3 website, accounts, subscriptions, emails, reports, support, APIs, Model Context Protocol (MCP) services, AI-assisted features and related business activities. It should be read with the DATAV3 General Terms and Support Policy.

We handle personal information in accordance with privacy laws that apply to us, including applicable requirements of the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Key privacy points

  • DATAV3’s principal application and database infrastructure is hosted on servers in Australia.
  • DATAV3 indexes publicly available Australian government, court, tribunal, regulatory and related official-source material. Some records refer to individuals. The legal classification of particular material depends on its content, context and applicable law.
  • The DATAV3 plugin and MCP tools receive task-specific tool input, not your full connected-service conversation.
  • We collect account, payment, service, usage, support and public-source information as described below.
  • We may disclose limited information to service providers and connected services where needed to provide DATAV3.
  • We do not sell account information, search activity or user content or use user content to train a general-purpose generative AI model.
  • DATAV3 is a general-audience research service. Account holders must be 18 or older.
  • You can request access, correction, account deletion, a review of a public-source record, or make a privacy complaint by contacting contact@diligenceresearch.com.au.

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true or recorded in material form.

3. Personal information we collect

The information we collect depends on how you use DATAV3.

3.1 Account and identity information

We may collect:

  • your name, email address and account identifier;
  • your organisation, role and authorised plan or seat;
  • account creation, verification and status information;
  • authentication-provider identifiers and sign-in events;
  • preferences, newsletter choice and logging-privacy setting; and
  • information needed to respond to an account recovery or security request.

Authentication may be provided by a third-party authentication provider.

3.2 Subscription and payment information

A third-party payment provider processes online payments. We may receive and retain:

  • a customer, subscription, checkout or payment reference;
  • plan, price, billing cycle, payment status and transaction amount;
  • billing email, invoice and refund information; and
  • limited fraud, dispute or payment-status information.

DATAV3 does not receive or store your complete payment-card number or card security code. The payment provider independently handles payment-card information under its own privacy policy and legal obligations.

3.3 Information you provide when using DATAV3

Depending on the feature, we may collect:

  • website search terms, filters, viewed records and pagination activity;
  • saved searches, lookup lists, monitored terms, tracked records and alerts;
  • report selections, report instructions and generated reports;
  • prompts or questions submitted to a DATAV3 AI-assisted feature;
  • files or text you deliberately provide where a feature permits it;
  • feedback, support messages, correction or suppression notices, and attachments; and
  • preferences and actions required to deliver a requested feature.

DATAV3’s plugin tool schemas do not solicit payment-card information, health information, government identification numbers, passwords, API keys, authentication secrets or full conversation histories. Do not place those categories, or other unnecessary confidential or sensitive information, into search boxes, prompts, filters, notes or support emails.

3.4 Website, device and security information

We may collect IP address, browser and device information, authentication and security events, service errors, and account-linked or aggregated usage information needed to operate, secure and administer DATAV3.

We may collect website account activity, including search terms and actions, where needed to provide, secure and administer the service. Available account-level logging controls may reduce identifiable activity logging, while aggregate plan usage may still be retained for plan administration.

3.5 MCP and plugin information

When you connect DATAV3 to a supported MCP client, we may collect account, entitlement, task-specific tool input, connection and limited operational and usage information needed to provide and administer the service.

For company plans, limited usage history may remain associated with the company plan after a member is removed for plan administration. Company plan administrators may receive appropriate aggregate usage information.

3.6 Publicly sourced information

DATAV3 collects and indexes information from publicly accessible Australian government, court, tribunal, regulator and related official sources. This may include names and other information about individuals mentioned in official records.

Official-source material may include court and tribunal information about allegations, charges, hearings, orders, findings and other procedural outcomes.

DATAV3 collects this material to provide a source-based research and retrieval service.

4. How we collect information

We collect personal information:

  • directly from you when you register, subscribe, search, save, generate a report, connect a service, contact us or provide feedback;
  • from your organisation or plan administrator when they invite or manage you;
  • from authentication, payment, email and other providers involved in delivering your requested service;
  • from a connected AI or MCP client when it sends a task-specific tool request;
  • automatically through necessary cookies, application activity and security systems; and
  • from publicly accessible official websites and records.

5. Why we collect, use and disclose information

We use personal information where reasonably necessary for our functions and activities, including to:

  • create, authenticate, administer and secure accounts;
  • provide search, saved-record, monitoring, alert, report, MCP, API and AI-assisted features;
  • apply plan entitlements, limits and organisation access controls;
  • process payments, invoices, cancellation and refunds;
  • deliver account, report, alert and service emails;
  • respond to support, access, correction, suppression, complaint and security requests;
  • maintain source quality, diagnose faults and improve relevance and usability;
  • prevent, detect and investigate fraud, abuse, security incidents and unlawful conduct;
  • produce de-identified or aggregated service and usage statistics;
  • establish, exercise or defend legal claims and enforce our terms; and
  • comply with laws, court orders and lawful regulatory requests.

We do not sell your account information, search activity, prompts, support content or personal profile. We do not disclose it to third parties for their independent marketing.

6. DATAV3 search, public records and accuracy

DATAV3 may hold personal information contained in public-source material or created through extraction and indexing. If you believe DATAV3 has indexed a source inaccurately, you may request a review under section 15. The original publisher may need to correct the underlying official record.

We may restrict or remove a record if we become aware that it is subject to a suppression or non-publication order.

7. AI-assisted features

DATAV3 may use AI-assisted systems for search relevance, classification, extraction, matching, reports, research workflows, testing and quality control.

For those features, we may disclose task-specific prompts, source text, record metadata or search results to AI service providers where reasonably necessary.

AI service providers process information under their commercial service terms. Inputs and outputs may be retained for up to 30 days unless a shorter setting applies, subject to any longer period required for security or legal reasons. We do not opt in to provider training with user content.

8. Cookies

We use cookies and similar technologies that are necessary for sessions, authentication, security, essential preferences and external checkout.

Authentication and payment providers may set necessary cookies on their domains.

Blocking necessary cookies may prevent sign-in, account access or payment from working.

9. Who we disclose information to

We may disclose personal information to the following recipient categories only where reasonably necessary for the purposes in this Policy:

  • Australian hosting, network, database, backup and security providers;
  • authentication and identity providers;
  • payment, subscription, invoice, fraud and dispute providers;
  • email delivery providers;
  • AI service providers for the features described above;
  • a connected service such as ChatGPT or Claude when you direct the services to exchange a request and response;
  • professional advisers, insurers, auditors and contractors who owe confidentiality obligations;
  • your organisation or plan administrator for seat, entitlement, security and appropriate aggregate-usage administration;
  • a person you authorise us to deal with; and
  • courts, regulators, law-enforcement bodies or government agencies where authorised or required by law.

Personal information may be disclosed or transferred in connection with a proposed or completed sale, merger, restructure or change of control, subject to applicable law.

10. Overseas processing

DATAV3’s principal application and database infrastructure is hosted in Australia. Some specialist providers and their subprocessors may access or process limited information overseas.

Likely overseas locations include the United States, the United Kingdom, countries in the European Economic Area and Singapore. Locations may vary according to a provider’s current operations and subprocessor arrangements.

11. Direct marketing and email

We may send necessary service communications about account verification, security, billing, cancellation, reports, alerts, support and material service changes. These are not marketing messages.

If we send commercial electronic messages, we will do so as permitted by law and provide a functional unsubscribe method.

12. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

No online system is completely secure.

We will notify affected individuals and regulators where required by applicable law.

13. Retention and deletion

We retain information for as long as reasonably needed to provide, administer and secure DATAV3, comply with law, keep required business records and deal with disputes. Account and user-controlled information is generally retained while the account remains active. Limited operational records are generally retained for up to 30 days, and company-plan aggregate usage may be retained for up to 3 years. Other retention periods depend on the purpose and applicable legal requirements.

Following a verified account deletion request, we delete or de-identify account information that is no longer required, subject to applicable legal, billing, fraud, security, dispute and backup requirements. Account closure does not require deletion of public-source information or company-plan aggregate usage retained for legitimate plan administration. A public-source record may be raised for review under section 15.

14. Age eligibility

DATAV3 is a general-audience research service. You must be 18 or older to create or hold a DATAV3 account.

15. Access, correction, source review and deletion

You may contact us to:

  • give you access to personal information we hold about you;
  • correct inaccurate, out-of-date, incomplete, irrelevant or misleading personal information;
  • review a public-source record or DATAV3 extraction;
  • report a record that may be subject to a suppression or non-publication order;
  • delete your DATAV3 account and associated user-controlled data; or
  • provide information about available account and connected-service controls.

Send a request to contact@diligenceresearch.com.au.

We will respond within a reasonable period and otherwise as required by applicable law.

We may require reasonable verification of your identity or authority before acting.

We may charge for access where permitted by law. We may refuse or limit a request where authorised by law and will provide reasons or complaint options where required.

For a public-source review, identify the record and the issue. We may direct you to the original publisher for correction of the underlying official record.

16. Privacy complaints

Send a privacy complaint to:

Privacy Officer
Diligence Research Pty Ltd
Email: contact@diligenceresearch.com.au

We will respond within a reasonable period and otherwise as required by applicable law.

If you are not satisfied, you may complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au. The OAIC generally expects you to raise the matter with us first and allow a reasonable time to respond.

17. Changes to this Policy

We may update this Policy when our services, providers or legal obligations change. We will publish the current version and update the date above.

18. Contact

Diligence Research Pty Ltd
ABN 11 625 635 305 | ACN 625 635 305
Privacy Officer: contact@diligenceresearch.com.au
Website: https://data.diligenceresearch.com.au