Privacy Policy

Effective Date: 18 March 2026

This Privacy Policy describes how Anthrolytic Pty Ltd (ABN: 62 696 306 484) (“we”, “us”, “our”) collects, uses, discloses, and protects personal information through the Anthrolytic platform (“Platform”). This policy is drafted in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

1. Information We Collect

1.1 Information from Clients

  • Business contact details: name, email address, phone number, job title, company name.
  • Billing and payment information processed through our third-party payment provider.
  • Communications with our team, including support requests.

1.2 Information from Candidates

  • Identifying information: name, email address, phone number.
  • Assessment data: audio and video recordings, written responses, and other inputs provided during pre-screening and behavioural assessments.
  • AI-generated outputs: behavioural scores, personality assessments, competency ratings, and related analytics.

1.3 Automatically Collected Information

  • Device and browser information (e.g. IP address, device type, operating system, browser type).
  • Usage data (e.g. pages viewed, features used, session duration, timestamps).
  • Cookies and similar tracking technologies (see our Cookie Policy for details).

2. How We Use Your Information

We collect and use personal information for the following purposes:

  • To provide, operate, and maintain the Platform and Services.
  • To process subscriptions, payments, and invoicing for Clients.
  • To facilitate AI-powered pre-screening, behavioural assessments, and scoring.
  • To communicate with you about your account, support requests, and service updates.
  • To improve, personalise, and develop new features for the Platform.
  • To generate anonymised and aggregated analytics and insights.
  • To comply with legal obligations, including tax, employment, and privacy laws.
  • To detect, prevent, and address fraud, security issues, or technical problems.

3. Legal Basis for Processing

Under the Privacy Act 1988 (Cth), we collect personal information that is reasonably necessary for our functions and activities. Where applicable, we rely on:

  • Consent: Where you have provided express or implied consent, particularly for the collection of assessment data from Candidates.
  • Contractual necessity: Where processing is necessary to perform our obligations under a subscription agreement.
  • Legal obligation: Where we are required to retain or disclose information by law.
  • Legitimate interest: Where processing is necessary for the legitimate purposes described in this policy, provided this does not override your privacy rights.

4. Disclosure of Information

We may share personal information with:

  • Clients: Candidate assessment results and AI-generated scores are shared with the Client that initiated the assessment.
  • Service providers: Third-party vendors that assist us in operating the Platform, including cloud hosting, payment processing, analytics, and AI infrastructure providers.
  • Professional advisors: Lawyers, accountants, auditors, and insurers as reasonably necessary.
  • Law enforcement and regulators: Where required or permitted by law, including the Australian Information Commissioner.

We do not sell personal information to third parties.

5. Overseas Disclosure

Some of our service providers and infrastructure are located outside of Australia. Personal information may be stored or processed in jurisdictions including, but not limited to, the United States and the European Union.

Before disclosing personal information overseas, we take reasonable steps to ensure that the overseas recipient handles the information in a manner consistent with the APPs, as required by APP 8. This may include contractual obligations, security assessments, or reliance on equivalent data protection frameworks.

6. Data Retention

We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected, or as required by law. Specifically:

  • Client account data: Retained for the duration of the subscription plus 12 months following termination.
  • Candidate assessment data: Retained for a period specified by the Client or for 24 months from the date of the assessment, whichever is shorter, unless a longer period is required by law.
  • Billing records: Retained for 7 years as required by Australian tax law.
  • De-identified and aggregated data: May be retained indefinitely for research and analytics.

7. Data Security

We implement technical and organisational security measures to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These measures include:

  • Encryption of data in transit (TLS) and at rest.
  • Access controls and role-based permissions.
  • Regular security assessments and vulnerability testing.
  • Incident response and data breach notification procedures in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Under the APPs, you have the right to:

  • Access: Request access to the personal information we hold about you (APP 12).
  • Correction: Request correction of inaccurate, incomplete, out-of-date, or misleading personal information (APP 13).
  • Complaint: Lodge a complaint about our handling of your personal information.

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days. If we refuse a request, we will provide written reasons.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9. Sensitive Information

We do not intentionally collect sensitive information (as defined in the Privacy Act 1988 (Cth)), such as information about racial or ethnic origin, political opinions, religious beliefs, health, or biometric data, unless it is reasonably necessary and you have consented.

If behavioural assessments inadvertently capture information that could be considered sensitive, we will handle it in accordance with APP 3.3 and applicable law.

10. Children's Privacy

The Platform is not directed at children under 15 years of age. We do not knowingly collect personal information from children under 15. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The updated policy will be effective from the date of posting.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact us: