Uncapt Platform Privacy Policy

4.1 Clients and End Users

We process information as instructed by our users, which may include:

• Personal Details: Name, age, contact information.
• Service-Related Information: Sensitive data depending on the sector (e.g., health information, occupational details, or legal data).

4.2 Professionals and API Consumers

• Identity Data: Full name, date of birth, and professional credentials.
• Contact Data: Email address, phone number, mailing address.
• Technical API Data: API keys, request headers, IP addresses, request timestamps, and usage metadata.

4.3 Anonymity and Pseudonymity

Where lawful and practicable, you have the option of not identifying yourself or using a pseudonym when interacting with our website or making general inquiries. However, for Professionals and API Consumers, we require full identification to provide secure services, verify credentials, and maintain account security.

5.1 Direct and Indirect Collection

We collect information directly from Professionals and API Consumers during registration. We collect End User information indirectly when it is uploaded to our platform or sent via our API.

5.2 Unsolicited Personal Information

If we receive personal information that we did not solicit, we will, within a reasonable period, determine whether we could have lawfully collected that information. If not, we will destroy or de-identify that information as soon as practicable, provided it is lawful to do so.

6.1 For API Consumers

We collect data to:

• Authenticate API requests and monitor system health.
• Provide technical support and documentation updates.
• Enforce rate limits and prevent platform abuse.

6.2 Government Related Identifiers

We do not use government-related identifiers (such as Medicare numbers or Tax File Numbers) as our own internal identifier for any individual. We only process such identifiers if provided by a Professional or API Consumer as part of a service-related record, and only as permitted by law.

Localisation and Sovereignty

We offer localised deployment to ensure data sovereignty.

Australian Customers

All personal information and End User data is stored within Australian jurisdiction. Furthermore, all data processing, including Large Language Model (LLM) inferences, is performed on infrastructure located within Australia.

US Customers

All personal information and End User data is stored within US jurisdiction, with all data processing and LLM inferences performed on infrastructure located within the United States.

Third-Party Providers

We may use third-party service providers to assist in providing our services. Where we do so, we ensure that these providers are contractually obligated to maintain data processing and storage within the same jurisdiction as the customer (e.g., Australian data remains with third-party infrastructure located in Australia).

Service Providers

We ensure that data processing agreements are in place with our cloud providers to maintain these residency requirements and meet all applicable data protection standards.

11.1 Access and Correction

You may request access to or correction of your personal information by contacting info@uncapt.com.

11.2 Complaints Process

If you believe we have breached the Australian Privacy Principles:

• Submit in Writing: Contact our Privacy Officer at info@uncapt.com.
• Investigation: We will acknowledge your complaint within 7 days and aim to provide a formal response within 30 days.
• Escalation: If you are unsatisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.