This Privacy Policy explains what eCapital Mentor records about you and how it is handled. It is written to meet the Privacy Act 1988 (Cth) and the Australian Privacy Principles. eCapital Mentor is operated from New South Wales, Australia.
1. What is recorded. Account identity (email address and display name), role and organisation assignments, the answers and information you enter, the documents you generate, your questions to the Mentor, and an append-only record of actions that change stored data. Please do not record sensitive information, or another person's personal information, unless it is necessary for your work on the platform and you are entitled to record it.
2. Why it is recorded. To provide the registered capability of the platform to you, to place your work against your account, to enforce access rules, to respond to your support requests, and to maintain an auditable record of platform activity. Your information is not used for any unrelated purpose, and it is not used for automated decision-making that produces a legal effect for you.
3. Access within the platform. Your records are readable by you. Platform administrators may access records where their registered role permits it; every such access decision is recorded.
4. Sharing. Your records are not sold. They are not shared with third parties for marketing. Information is disclosed to service providers only so far as they host, secure or operate the platform on the operator's behalf under an obligation of confidence, and otherwise only where you ask for it or the law requires it.
5. Overseas disclosure. Platform hosting and the operation of the Mentor may involve storage or processing outside Australia, including in the United States and the European Union. Where information is disclosed to an overseas recipient, the operator takes reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.
6. Retention and disposal. Records are retained while the account is active and for the periods the operator is required to keep them: financial and audit records for seven years (Corporations Act 2001 (Cth) s 286), tax-relevant records for five years (Income Tax Assessment Act 1936 (Cth) s 262A), and legal acceptance and learning records for seven years. Mentor conversations and operational logs are retained for two years. No record is disposed of automatically: a record that reaches its period is listed for review and disposed of only by a deliberate, audited act. Personal information no longer needed for any permitted purpose is destroyed or de-identified (APP 11.2). Audit records are append-only and are not altered.
7. Access and correction. You may request access to, or correction of, the personal information held about you, and deletion of your account records where the operator is not required to keep them. Requests are made through Help and Support and are answered within 30 days.
8. Security and data breaches. Access is controlled at the data layer so that a request can only reach records the account holder is permitted to see. If a data breach occurs that is likely to result in serious harm, the operator will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).
9. Complaints. A privacy complaint is made through Help and Support and is acknowledged and answered in writing. If you are not satisfied with the response, you may refer the complaint to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).
10. Changes. Where this policy changes, a new version is published and acceptance is requested again.
STATUS: Version 1.0. Reviewed and approved by the platform owner on 8 August 2026 against Australian and New South Wales law.