This Privacy Policy explains how MatterWise collects, uses, stores and discloses personal information, and how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
MatterWise is operated by Lachlan McAlpine trading as Skew Strategies (ABN 71 450 463 160), based in New South Wales, Australia (“we”, “us”, “our”). We are the entity responsible for personal information handled through MatterWise as described in this Policy. You can reach our privacy contact at admin@matterwise.com.au.
Depending on how you use MatterWise, we may collect:
We do not intentionally collect sensitive information (as defined in the Privacy Act) except to the extent you choose to include it in free-text notes or documents. Please avoid entering sensitive information unless it is necessary.
MatterWise applies a privacy-by-design approach. Your employees’ real names are held locally in your browser and are mapped to codenames (aliases). Before information is sent to our servers or to any AI service used to generate assessments or documents, real names are replaced with those codenames. As a result, our servers and the AI generally process codenames rather than real identities. Real names may appear in documents you generate and view on your own device.
This reduces, but does not by itself eliminate, the personal information involved — free-text you enter may still identify a person. You should take care about what you type into notes and documents.
We collect personal information directly from you when you create an account, use features, upload or enter information, connect an integration, or contact us. We collect complaint content from the people who choose to submit it through a link you share. We collect limited technical information automatically when you use MatterWise.
We use personal information to:
We do not sell your personal information, and we do not use it for third-party advertising.
We share personal information only as needed to run MatterWise, and with providers who are bound to protect it. Our main service providers (sub-processors) are:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and file storage |
| Anthropic (Claude) | AI processing of assessments and document generation (on codenamed data) |
| Railway | Backend application hosting |
| Netlify | Frontend website hosting |
| Sending transactional email; optional Google Calendar integration you choose to connect | |
| Twilio | Optional SMS reminders, if you enable them |
| Stripe | Payment processing, if and when paid plans apply |
We may also disclose personal information where required or authorised by law, to protect our rights, users or others, or in connection with a sale or restructure of our business (in which case we will require the recipient to protect the information consistently with this Policy).
Some of our service providers, or their infrastructure, may be located or store data outside Australia (for example, in the United States). Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. By using MatterWise, you acknowledge that your information may be processed overseas by the providers listed above.
When you enter information about your employees or other individuals, you are responsible for having the authority to do so and for meeting your own obligations under the Privacy Act and other laws — including, where required, telling those individuals how their personal information is collected, used and disclosed (which may include being handled through MatterWise). For that information, you are generally the entity that decides how it is handled, and we act on your behalf as a provider. If an individual asks us about information you entered, we will generally refer them to you.
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include the data-minimisation approach in section 3, encryption of integration tokens at rest, access controls that scope data to your organisation, transport encryption, and rate-limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme under the Privacy Act.
MatterWise uses your browser’s local storage and session storage for functional purposes only — to keep you signed in and to remember application state, including the local mapping of employee names to codenames described in section 3. We do not use third-party advertising cookies or third-party analytics tracking. Because this storage is strictly necessary to provide the service you have asked for, no cookie-consent banner is used.
We keep personal information for as long as needed to provide MatterWise to you, and afterwards only as long as reasonably necessary for legitimate business or legal purposes. When you close your account or ask us to delete your data, we will delete or de-identify it within a reasonable period, unless we are required to keep it by law. Some information may remain in backups for a limited time before being overwritten.
You may ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Contact us at admin@matterwise.com.au. We will respond within a reasonable period. There is generally no charge, though we may recover reasonable costs in some cases. If we decline access or correction, we will explain why, where required to.
If you think we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first at admin@matterwise.com.au so we can investigate and try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We may update this Privacy Policy from time to time. We will post the updated version here and update the “last updated” date, and, where the change is material, take reasonable steps to notify you.
For any privacy question or request, contact us at admin@matterwise.com.au, or by post at 109 Rothschild Avenue, Rosebery NSW 2018, Australia.