Privacy Policy

This policy explains how Cassandra Research Pty Ltd (we, us, our) handles personal information in Cassandra ASIC Agent OS. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We collect:

• Account information — your name, work email, firm details and billing contact, provided when your firm registers.
• Client-company records — information your firm enters or imports to do its compliance work, such as company details, officeholder and member names, addresses and shareholdings.
• Messages — anything you send us through the contact page, together with the details you include in it.
• Usage and security records — sign-in events and an audit history of changes, kept so firms can prove who changed what, and when.

We use personal information to provide and improve the service: preparing documents and forms, tracking lodgements, sending reminders your firm has asked for, providing support, processing payments, and keeping the service secure. We do not sell personal information, and we do not use your firm's client records for advertising.

We share personal information only where needed to run the service:

• Service providers — hosting, payment processing, email delivery and digital-signature services, each engaged to help us operate the service.
• Government registries — when your firm chooses to lodge a form, the information in that form goes to ASIC and related government registers, as your firm directs.
• Where the law requires it — such as in response to a lawful request by a regulator or court.

Each firm's data is isolated from every other firm's. Access is role-based, connections are encrypted, sensitive credentials are stored encrypted, and every change is recorded in an audit history that cannot be edited or deleted. We host the service with reputable cloud providers and prefer Australian regions where available.

We keep personal information while your firm has an account, and for a reasonable period afterwards to meet legal and audit obligations. If your firm closes its account, we give you a reasonable opportunity to export your data before deletion.

The website uses only the cookies needed to keep you signed in and keep the service secure. We do not use advertising or cross-site tracking cookies.

You can ask to see or correct the personal information we hold about you through our contact page. If you believe we have mishandled your information, contact us first and we will respond within a reasonable time. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If we change this policy we will update the date at the top of this page and, for material changes, let account holders know in the app.