Privacy Policy

This policy explains how Tsubasa Technologies handles personal information in connection with Anchorix — the website (anchorix.ai) and the platform (app.anchorix.ai). We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

• Enquiries: if you use the contact form we collect your name, work email, organisation and message, so we can respond.
• Accounts: for platform users — name, work email, role and workspace membership, provisioned by your organisation.
• Customer content: documents and connector data your organisation chooses to bring into its workspace. Your organisation controls this content; we process it only to provide the service.
• Service records: audit events (who did what, when), usage and diagnostic logs needed to run the service securely.
• Public-site analytics: Google Analytics records public-page visits and associated device, browser, referrer and approximate-location information. We do not use it inside customer workspaces.

We do not collect payment card details through the website.

All persistent customer data — documents, analyses, decisions, audit records — is stored in Australia (Sydney region infrastructure). Workspaces are isolated from one another at the database layer using row-level security.

Some processing is performed by contracted service providers. AI model processing is transient: content is sent for the duration of a request and is not used to train models. Our current subprocessors:

• Anthropic — AI model processing (analysis drafting, chat, market-scan search). No training on customer data; minimal-retention options are applied where available.
• Voyage AI — text embeddings for search, where enabled, under zero-data-retention settings.
• Twilio SendGrid — transactional email (invitations, notifications).
• DigitalOcean — cloud hosting (Sydney).
• Google Analytics — usage measurement on the public anchorix.ai website only. Advertising, Google Signals and ad-personalisation features are disabled.

A full, current data-flow and subprocessor disclosure is available to customers and prospective customers on request.

• to provide, secure and support the service;
• to respond to enquiries you send us;
• to understand and improve the public website;
• to meet legal obligations.

We do not sell personal information, run advertising, or use customer content for marketing.

Customer content is retained while your organisation’s workspace is active and deleted after termination in accordance with our agreement with your organisation. Trial workspace data is deleted when a trial ends unless agreed otherwise. Enquiry records are kept only as long as needed to handle the enquiry and follow-up.

Analytics cookies are configured with a 90-day expiry and may be refreshed when the site is used. You can turn analytics off through Cookie settings in the footer. That preference stays in your browser and removes the first-party analytics cookies available to the site.

Tenant isolation is enforced in the database itself (Postgres row-level security), connector credentials are encrypted at the application layer, transport is encrypted with TLS, and every material action in the platform is recorded in an append-only audit trail.

You may request access to, or correction of, personal information we hold about you. Platform users should contact their workspace administrator first, since your organisation controls its workspace; for anything else, contact us directly.

Privacy questions or complaints: use the contact form and address your message to the privacy officer. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).