This Privacy Policy explains how MatterWise collects, uses, stores and discloses personal information, and how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
MatterWise is operated by Lachlan McAlpine trading as Skew Strategies (ABN 71 450 463 160), based in New South Wales, Australia (“we”, “us”, “our”). We are the entity responsible for personal information handled through MatterWise as described in this Policy. You can reach our privacy contact at admin@matterwise.com.au.
Depending on how you use MatterWise, we may collect:
We do not intentionally collect sensitive information (as defined in the Privacy Act) except to the extent you choose to include it in free-text notes or documents. Please avoid entering sensitive information unless it is necessary.
MatterWise applies a privacy-by-design approach. Your employees’ real names are stored on our servers in a single field and are encrypted at rest. When information is sent to an AI provider to generate assessments or documents, real names are first replaced with codenames (aliases), so the AI generally processes codenames rather than real identities.
Where this replacement does not apply: if you upload a photo or scan of a document (for example a payslip, letter or certificate), the image is sent to our AI provider in its original form so its contents can be read — it is not de-identified before it is sent. Please take care about which document images you upload. Text you type into notes and documents may also still identify a person even after names are replaced. This approach reduces, but does not by itself eliminate, the personal information involved.
We collect personal information directly from you when you create an account, use features, upload or enter information, connect an integration, or contact us. We collect complaint content from the people who choose to submit it through a link you share. We collect limited technical information automatically when you use MatterWise.
We use personal information to:
We do not sell your personal information, and we do not use it for third-party advertising.
We share personal information only as needed to run MatterWise, and with providers who are bound to protect it. Our main service providers (sub-processors) are:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and file storage |
| Anthropic (Claude) | AI processing of assessments and document generation. Text is codenamed before it is sent; uploaded document images are sent in their original form so their contents can be read (see section 3) |
| Railway | Backend application hosting |
| Netlify | Frontend website hosting |
| Sending transactional email; optional Google Calendar integration you choose to connect | |
| Twilio | Optional SMS reminders, if you enable them (message text is codenamed) |
| Stripe | Payment processing, if and when paid plans apply (receives only your organisation identifier, no names) |
| GoHighLevel | Optional intake integration, where you choose to connect it, to receive enquiry and credential details you have collected |
| DeepSeek | AI processing of public tribunal and pay-guide text only — no employee, complaint or matter data is sent to this provider |
We may also disclose personal information where required or authorised by law, to protect our rights, users or others, or in connection with a sale or restructure of our business (in which case we will require the recipient to protect the information consistently with this Policy).
Some of our service providers, or their infrastructure, may be located or store data outside Australia (for example, in the United States). Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. By using MatterWise, you acknowledge that your information may be processed overseas by the providers listed above.
When you enter information about your employees or other individuals, you are responsible for having the authority to do so and for meeting your own obligations under the Privacy Act and other laws — including, where required, telling those individuals how their personal information is collected, used and disclosed (which may include being handled through MatterWise). For that information, you are generally the entity that decides how it is handled, and we act on your behalf as a provider. If an individual asks us about information you entered, we will generally refer them to you.
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include the data-minimisation approach in section 3, field-level encryption at rest of sensitive identifiers (such as employee names, emails and phone numbers) and integration tokens, access controls that scope data to your organisation, transport encryption (HTTPS with HSTS), rate-limiting, and tamper-evident audit logging of administrative and security events. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme under the Privacy Act.
MatterWise uses your browser’s local storage and session storage for functional purposes only — to keep you signed in and to remember application state and display preferences. We do not use third-party advertising cookies or third-party analytics tracking. Because this storage is strictly necessary to provide the service you have asked for, no cookie-consent banner is used.
We keep personal information for as long as needed to provide MatterWise to you, and afterwards only as long as reasonably necessary for legitimate business or legal purposes. When you request deletion of your account and confirm it, we remove your organisation’s personal data across our systems, including uploaded documents. A limited set of security and audit records (for example, logs of administrative actions and security events) is retained for a limited period where necessary for security, fraud-prevention and legal-compliance purposes, and information may also remain in backups for a limited time before being overwritten. Where we are required by law to keep certain information, we will retain it for that period.
You may ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Contact us at admin@matterwise.com.au. We will respond within a reasonable period. There is generally no charge, though we may recover reasonable costs in some cases. If we decline access or correction, we will explain why, where required to.
If you think we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first at admin@matterwise.com.au so we can investigate and try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
If you choose to connect your Google account, MatterWise uses specific Google API scopes to provide two optional, user-facing features. We request only the narrow scopes those features need, and you can disconnect at any time from your settings, which revokes our access.
Your Google connection tokens are encrypted at rest, and we do not store the contents of your mailbox. Google user data is used solely to provide the features above at your request. We do not use Google user data for advertising, and we do not use it to develop, improve or train generalised artificial-intelligence or machine-learning models.
Limited Use. MatterWise’s use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We may update this Privacy Policy from time to time. We will post the updated version here and update the “last updated” date, and, where the change is material, take reasonable steps to notify you.
For any privacy question or request, contact us at admin@matterwise.com.au, or by post at 109 Rothschild Avenue, Rosebery NSW 2018, Australia.