SagePolicy Privacy Policy

1. About this policy

SagePolicy is a compliance management portal operated by Hearpreneur Solutions ABN 37 621 270 498. This policy explains what information we hold about your practice when you use SagePolicy, how we store and protect it, and your rights in relation to it. We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. What we collect

SagePolicy holds information you and your practice provide, including:

• Business details — your practice name, trading name, ABN, contractor codes, contact details, address, and sites.
• Staff records — names, roles, email addresses, and policy acknowledgment history (which policy version was acknowledged, and when).
• Compliance records — register entries and any documents you upload, such as insurance and credential certificates, equipment calibration certificates, and compliance event records.
• Account information — login identity and access role.
• Usage information — basic technical logs needed to operate and secure the portal.

3. How we use it

We use this information only to:

• Provide the compliance portal and its features to your practice
• Populate your policies and audit-ready documentation with your practice details
• Track policy acknowledgments and send compliance reminders
• Provide support and respond to your requests
• Maintain the security and integrity of the service

We do not sell your information, and we do not use it for advertising.

4. Storage & security

• All data is stored in Australia, on Supabase infrastructure in Sydney
• Data is encrypted in transit (TLS) and at rest (AES-256)
• Each practice's data is isolated and not shared with other practices
• Uploaded documents are held in access-controlled storage
• Access is restricted to authorised members of your practice, and to Hearpreneur Solutions staff where needed to operate the service or provide support

5. Use of artificial intelligence

• AI may assist with drafting, formatting, or summarising policy content
• AI-assisted content is reviewed by Hearpreneur Solutions before publication
• Your practice data is not used to train AI models — all AI providers are configured to prevent this
• AI processing is subject to enterprise data processing agreements with each provider

6. Disclosure & service providers

We disclose your information only to the service providers we rely on to run SagePolicy (such as our hosting and email providers), and only as needed to deliver the service. We may also disclose information where required by law. We do not otherwise share your practice's information with third parties.

7. Your rights

Practice owners can request access to, correction of, export of, or deletion of their practice's data at any time by contacting us at support@sagepolicy.com.au.

8. Retention

We keep your information for as long as your practice uses SagePolicy and for any period required to meet legal or compliance obligations. On request, we will delete or de-identify data that we are no longer required to retain.

9. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you through the portal.

Contact

For any privacy question or request, contact us at support@sagepolicy.com.au.