Public document
Privacy policy
How OSKA currently collects and uses information, with unresolved legal wording made visible.
This operational description requires owner and Australian privacy-law review. It must not be represented as an approved Privacy Act or APP compliance statement.
1. Information handled by OSKA
Depending on the services used, OSKA handles account and contact details, team membership, project and support records, service and billing records, files supplied by users, authentication events, security logs and service-reliability evidence.
If a person chooses an AI feature, the specific text, files or audio selected for that feature and the resulting output may also be processed. The assistant presents its provider and processing disclosure before optional cross-border processing is enabled.
2. Operational purposes
The application uses this information to provide the requested workspace and services, authenticate users, enforce permissions, coordinate delivery and support, administer billing, investigate incidents, keep audit evidence and monitor service reliability.
3. Hosting and service providers
The current architecture is designed to keep primary application data in Australia. The owner must verify the production hosting, backup, email, payment, monitoring and other provider schedule before approving this policy.
An optional integration may send selected information to its disclosed provider. OSKA must not imply that all processing stays in Australia when a user has enabled a disclosed cross-border feature.
4. Security, retention and deletion
OSKA applies role-based access, audit logging, encryption controls, backups and incident-response procedures described in the production controls. These controls reduce risk but are not a promise that a security event cannot occur.
Information is retained under configured business, security, accounting and legal-evidence schedules. Exact periods, legal-hold exceptions and deletion wording remain a counsel and owner approval gate.
5. Questions and requests
Account users can raise a request through Support or their existing Aussie Websites service contact. The final policy must identify the accountable entity, public privacy contact, complaint path, access and correction process, cross-border disclosures and any legally required response timeframes.