Privacy Policy

CoreCounsel Pty Ltd ("CoreCounsel", "we", "us", or "our") operates the CoreCounsel platform and website. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our services.

By using CoreCounsel, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information we collect

1.1 Information you provide

• Registration information including firm name, contact name, and email address
• Matter and client information you enter into the platform
• Documents and files you upload or create within the platform
• Communications you send to us

1.2 Information collected automatically

• Authentication information from Microsoft Azure AD when you sign in
• Platform usage data including features used, actions taken, and session duration
• Log data including IP address, browser type, and access timestamps

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the CoreCounsel platform
• Authenticate users and manage access to the platform
• Respond to support enquiries and communications
• Monitor platform security and detect misuse
• Meet our legal and regulatory obligations
• Send service-related communications including updates and security notices

We do not use your matter data, client information, or documents to train AI models. AI features within CoreCounsel process your data to deliver the feature to you, and that processing does not result in your data being used to improve models available to other customers or third parties.

3. How we share your information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers: We engage third-party service providers (such as cloud hosting and authentication services) who process data on our behalf under contractual obligations consistent with this policy.
• Legal requirements: We may disclose information if required to do so by law, court order, or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data security

We implement technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. These include encryption at rest and in transit, access controls, and audit logging. No system is completely secure, and we cannot guarantee absolute security.

5. Data retention

We retain your information for as long as your firm's account is active and for a reasonable period thereafter to meet our legal obligations. You may request deletion of your data by contacting us at the address below. We will fulfil deletion requests subject to any overriding legal obligations.

6. Your rights

Subject to applicable Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

7. Cookies and tracking

We use cookies and similar technologies to maintain your session and improve platform performance. We do not use third-party advertising cookies. You can configure your browser to block cookies, though this may affect platform functionality.

8. Third-party services

CoreCounsel integrates with Microsoft Azure AD, Microsoft 365 services, and optionally with accounting platforms and document management systems. Your use of those services is also governed by their respective privacy policies. We encourage you to review those policies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Continued use of the platform after notification constitutes acceptance of the updated policy.

10. Contact us

For privacy-related enquiries, to exercise your rights, or to lodge a complaint, contact us at: