Privacy Policy

Last updated: June 2025  ·  Acquihire Tech Pty Ltd

1. Overview

Acquihire Tech Pty Ltd ("Company", "we", "our") is committed to protecting the privacy of all individuals who use the GEAR Matrix platform. This Privacy Policy explains what information we collect, how we use it, and the steps we take to keep it secure. By using this Service, you consent to the practices described in this Policy.

2. Information We Collect

We collect the following categories of information:

  • Account information: Name, email address, and hashed password when you register or are invited to the platform.
  • Assessment data: Responses to diagnostic questionnaires, company names, scores, findings, and recommendations entered or generated during assessments.
  • Usage data: Log data including IP address, browser type, pages visited, and timestamps for security and operational purposes.
  • Authentication data: OAuth tokens if you sign in via Google, managed securely and never stored in plaintext.

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the GEAR Matrix platform
  • Authenticate users and maintain account security
  • Generate diagnostic scores, reports, and AI-assisted narratives
  • Monitor for unauthorised access or misuse
  • Improve the platform and diagnostic methodology
  • Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Assessment Data & Client Confidentiality

Assessment data — including company names, diagnostic scores, and reports — is treated as strictly confidential. It is accessible only to authorised Acquihire Tech consultants and the specific user account that created the assessment. We do not share client assessment data with any other client, third party, or the public under any circumstances.

5. AI Processing

When AI narrative generation is used, anonymised assessment data (scores, pillar ratings, and structured metrics) is transmitted to a third-party AI provider (xAI / Grok) via encrypted API calls solely for the purpose of generating diagnostic narrative text. No personally identifiable information is included in these transmissions. The AI provider does not store or train on your data beyond the immediate request.

6. Data Storage & Security

All data is stored in a secured PostgreSQL database hosted on Neon (AWS Singapore region). Data is encrypted at rest and in transit using industry-standard TLS encryption. Passwords are hashed using bcrypt and never stored in plaintext. We implement access controls to ensure only authorised personnel can access production systems.

7. Data Retention

We retain your account and assessment data for as long as your account is active or as required to provide the Service. If you request account deletion, we will permanently delete your personal data within 30 days, except where retention is required by law or legitimate business purposes (such as invoicing records).

8. Third-Party Services

We use the following third-party services to operate the platform:

  • Neon (database): Secure cloud PostgreSQL hosting
  • Google OAuth: Optional single sign-on authentication
  • xAI / Grok: AI narrative generation (anonymised data only)

Each provider operates under their own privacy and security policies. We select providers that meet our security standards and process data only as instructed by us.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate personal data
  • Request deletion of your account and associated data
  • Object to processing of your data in certain circumstances
  • Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at privacy@acquihiretech.com. We will respond within 30 days.

10. Cookies

This platform uses session cookies strictly necessary for authentication and maintaining your logged-in state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You may disable cookies in your browser, but this will prevent you from using the platform.

11. Children's Privacy

This Service is intended for business professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the revised Policy.

13. Governing Law

This Privacy Policy is governed by the laws of Australia, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

14. Contact Us

For any privacy concerns or data requests, contact our Privacy Officer at: privacy@acquihiretech.com
Acquihire Tech Pty Ltd, Australia