Privacy Policy

Last updated: 1 September 2026

Clarius Online Pty Ltd ("Clarius", "we", "us", "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, and disclose personal information through the Clarius platform at clariusonline.com.

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, role, and organisation details provided at registration
• Company data: financial year, industry, emissions data, and other information you enter into the compliance workflow
• Usage data: pages visited, gate actions taken, session timestamps, and feature usage patterns
• Technical data: IP address, browser type, device type, and log data
• Uploaded documents: files you upload as evidence or supporting documents within the platform

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Clarius platform and its AI-powered compliance workflow
• Authenticate your identity and manage your account
• Generate compliance outputs and maintain your audit trail
• Send transactional communications (account notices, gate updates)
• Monitor platform security and prevent fraud or misuse
• Comply with our legal obligations

3. AI Processing and Sub-processors

Clarius uses third-party AI and cloud services to deliver its functionality. Your data may be processed by the following sub-processors:

• Anthropic (Claude API): used to generate compliance analysis and draft report content. Data is processed under Anthropic's enterprise data terms; Anthropic does not use your data to train its models under our agreement.
• Voyage AI: used to generate semantic embeddings for our regulatory knowledge base retrieval. Your company data is not embedded or stored by Voyage AI.
• Microsoft Azure (Australia East): our primary cloud infrastructure provider. All data is stored in Australia East region. Azure is certified to ISO 27001 and SOC 2.

For full details of how AI is used in the platform, see our Data Use Policy.

4. Data Storage and Security

Your data is stored in Microsoft Azure infrastructure located in the Australia East region (Sydney). We implement appropriate technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and audit logging. See our Security page for details.

5. Disclosure of Information

We do not sell your personal information. We may disclose your information to:

• Sub-processors listed above, to the extent necessary to deliver the service
• Law enforcement or regulatory authorities where required by law
• Professional advisers (legal, financial) under confidentiality obligations
• A successor entity in the event of a business transfer, subject to equivalent privacy protections

6. Notifiable Data Breaches

We comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth). In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

7. Your Rights

You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at hello@clariusonline.com. We will respond within 30 days.

8. Cookies

The Clarius platform uses session cookies for authentication and functional purposes only. We do not use advertising or tracking cookies. We use Microsoft Clarity for anonymised heatmap and session analytics on our marketing pages.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or via the platform. Continued use of the platform after notification constitutes acceptance of the updated policy.

10. Contact and Complaints

For privacy enquiries or complaints, contact us at hello@clariusonline.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.