Skip to content

Privacy policy

How we collect, hold, use, and disclose personal information. Last updated 18 May 2026.

1. About this policy

Delta IQ Technology Pty Ltd (ABN 74 691 398 311) - referred to in this policy as "DeltaIQ", "we", "us", or "our" - operates the DeltaIQ platform. This privacy policy describes how we collect, hold, use, and disclose personal information in connection with that platform.

This policy is governed by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Last updated: 18 May 2026.

2. What information we collect

  • Account information: name, email, organisation, role, and credentials - from people who sign up to use DeltaIQ or are invited by their organisation's administrator.
  • Customer content: information that customer organisations upload or generate through DeltaIQ, including participant records, progress notes, behaviour support plans, incident reports, roster information, and AI-generated summaries derived from those inputs.
  • Telemetry: application logs, error reports, and basic usage metrics necessary to operate the service.

3. How we collect it

  • Directly when you sign up or use the platform.
  • From your organisation if it administers your account on your behalf.
  • Automatically as you use the platform (request logs, error reports).

4. How we use it

  • To deliver and operate the DeltaIQ platform.
  • To perform AI analysis on customer content per the customer organisation's instructions.
  • To provide support and service communications.
  • To detect and prevent security incidents and misuse.
  • To comply with legal obligations.

5. Who we share it with

  • Subprocessors listed at deltaiq.com.au/security#subprocessors. These parties process information on our behalf and are bound by contractual terms equivalent to our own.
  • Service providers acting on our instructions (for example, professional advisors).
  • Law enforcement or regulators if required by law.
  • A successor entity in the event of a merger, acquisition, or asset sale (any successor is bound by the protections in this policy).

6. International transfers

Customer content is primarily stored and processed in Australia (AWS and Supabase, Sydney). Some processing involves overseas providers - currently Anthropic (LLM, United States), WorkOS (authentication, United States), and Sentry (error monitoring, United States). All overseas providers are bound to protect personal information consistently with the Australian Privacy Principles, either under contractual data-processing terms or under equivalent privacy frameworks in their home jurisdictions.

7. Data retention

  • We retain customer content for the duration of the customer organisation's contract with DeltaIQ.
  • Following termination, customer content is deleted from production systems within 30 days. Backups containing customer content are deleted in accordance with our standard backup retention cycle.
  • Account information for individual users is retained for as long as the account is active and for a reasonable period after deactivation.

8. Your rights

Under the Australian Privacy Act you have the right to access personal information we hold about you, request correction of inaccurate information, and make a privacy complaint.

To exercise these rights, email privacy@deltaiq.com.au. We respond to access and correction requests in accordance with the timelines required by the Australian Privacy Act (within 30 days).

If you are dissatisfied with our response, you may complain to the Office of the Australian Information Commissioner: www.oaic.gov.au.

9. Security

We describe our security practices on our security page.

10. Cookies and tracking

The DeltaIQ marketing site (deltaiq.com.au) does not use cookies. We measure site traffic with Plausible Analytics, a privacy-focused service that uses no cookies and collects no personal information — no persistent identifiers, and no tracking across sites or devices. It records only aggregate statistics such as page views, referrer, browser and device type, and country. Details of what Plausible collects are in the Plausible data policy.

The DeltaIQ application uses essential session cookies required for authentication.

11. Children's privacy

DeltaIQ is a B2B service for NDIS providers and is not intended for direct use by individuals under 18. We do not knowingly collect personal information from individuals under 18 except in the form of participant records uploaded by NDIS providers in the course of delivering services to their participants - this processing is governed by the contract between DeltaIQ and the provider.

12. Contact and complaints

13. Changes to this policy

We may update this policy from time to time. Material changes will be notified to customer organisation administrators via email at least 30 days before taking effect.