Last updated: August 2026 · Version: 3.1 (Cloud Launch)
This Privacy Policy explains how the operator ("we", "us", or "our") of the "Find and Seek" cloud Software-as-a-Service (SaaS) platform, website, and control plane (collectively, the "Service") collects, uses, and discloses your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Spam Act 2003 (Cth).
1. Cloud SaaS Architecture & Ephemeral Pass-Through ("We Don't Keep Anything")
The Service operates as a cloud-hosted SaaS platform providing large language model (LLM) inference, document summarisation, optical character recognition (OCR), and multi-provider AI model routing across cloud endpoints.
Ephemeral Cloud Pass-Through: When you submit prompts or documents ("Payloads") to the Service, Payloads are transmitted over encrypted channels solely for immediate execution.
We do not keep anything: Find and Seek does not store, retain, aggregate, or train on your customer document content or query Payloads on Find and Seek infrastructure. Data passes through our control plane strictly as an ephemeral conduit to designated execution endpoints and is immediately discarded from our volatile memory upon completion of the request.
2. Information We Collect & Telemetry Controls
To provide and maintain the Service and manage B2B accounts, we collect minimal control plane information:
- Account & B2B Sign-Up Information: Your name, email address, organisation size, business role, and account credentials.
- Billing Information: Payment transactions processed securely via third-party providers (e.g., Stripe); we retain transaction identifiers and tier entitlements.
- Usage Metadata & Telemetry: Aggregated, privacy-filtered technical data regarding API request timestamps, token counts, error diagnostics, and feature usage to maintain platform availability. Telemetry payloads do not contain document text or file paths.
- Technical Data & Cookies: IP address, device type, browser headers, and standard analytics cookies when visiting our website.
Telemetry Controls: You can manage or opt out of diagnostic telemetry collection directly within your in-app account settings.
3. APP 8 Disclosure & Express Overseas Transfer Consent
3.1 Overseas Disclosure: In order to provide the Service, request Payloads and technical data are routed to vetted third-party model providers and cloud infrastructure located outside of Australia (predominantly in the United States, Singapore, and global edge networks).
3.2 Express Consent Under APP 8.1(a): By accessing or using the Service, you expressly consent to the disclosure of your personal information (including Payload snippets) to overseas recipients as described in this Policy. You expressly acknowledge and agree that:
- Find and Seek takes reasonable steps to contractually ensure overseas recipients handle data securely and strictly for request execution;
- if an overseas recipient breaches the APPs or experiences a security incident, Find and Seek will not be liable for that breach solely by virtue of having disclosed data to that overseas recipient; and
- you explicitly waive any vicarious liability that might otherwise arise under Section 16C of the Privacy Act 1988 (Cth) in respect of acts or practices of overseas recipients.
4. Third-Party Processors & Sub-Processors
We engage the following third-party sub-processors to deliver the Service:
- OpenRouter (USA): Cloud model API routing (0-day payload retention; up to 30-day security logs).
- OpenAI (USA): LLM inference (0-day payload retention; up to 30-day security logs; zero model training).
- Anthropic (USA): LLM inference (0-day payload retention; up to 30-day security logs; zero model training).
- DeepSeek & Qwen / Alibaba Cloud (USA / Singapore): LLM inference (0-day payload retention; up to 30-day security logs; zero model training).
- Vercel (USA / Global Edge): Control plane hosting, CDN, edge routing, and analytics.
- Stripe (USA / Australia): Payment processing and subscription billing.
- PostHog (USA): Product telemetry and application performance diagnostics.
- Google Analytics (USA): Website telemetry and traffic aggregation.
- Resend (USA): Transactional email notifications and system alerts.
5. Zero Model Training Warranty
We do not use, retain, aggregate, or sell your customer Payload data to train, fine-tune, or improve any AI models. We maintain strict contractual commitments with our third-party LLM providers enforcing the exact same zero-training restriction on customer API calls.
6. 28-Day Data Deletion Schedule Upon Account Cancellation
You may cancel your account or subscription at any time directly within the application settings. Upon account cancellation or deletion request:
- All personal account records, profile details, and control plane telemetry tied to your account are queued for permanent purge and deleted within twenty-eight (28) days.
- Statutory Retention Exception: Tax invoices, transaction records, and financial ledger items are retained exclusively for the statutory period required by applicable tax laws (e.g. ATO 5-year retention under Australian tax legislation).
7. Commercial Communications (Spam Act 2003)
We will only send you commercial electronic messages (such as product updates or account notifications) in accordance with the Spam Act 2003 (Cth). Every commercial message includes a functional, one-click unsubscribe link. We do not sell your contact details to third parties.
8. Security & Access Rights
We implement physical and technical safeguards, including TLS encryption in transit and access controls (APP 11). Under APPs 12 and 13, you have the right to request access to or correction of personal information held in our control plane by emailing support@findandseek.app.
Note: Because Payload content is discarded ephemerally after execution, we do not store or hold past prompt or document histories on our servers.
9. Contact and Complaints
If you have questions or wish to lodge a privacy complaint under the APPs, contact us at support@findandseek.app. If you are unsatisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner (OAIC).