Privacy Policy

1. Introduction & Entity Information

Finder Technologies is the trading name of Findertech Australia Pty Ltd (ABN 42 631 675 673, ACN 631 675 673), based in Sydney, New South Wales, Australia (“we”, “us”, “our”).

We provide fractional systems architecture, workflow automation, and artificial intelligence (AI) advisory services to mid-market Australian businesses. We take your privacy and the security of your business records seriously. This policy describes how we collect, store, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We only collect personal information that is reasonably necessary to deliver our advisory services and communicate with you (APP 3):

• Contact details: Name, professional email address, telephone number, company name, job title, and physical address.
• Discovery & Consultation Information: Operational notes, software stack details, and business priorities shared during discovery audits or consultation sessions.
• Client System Data: When engaged on a retainer or advisory project, data accessed or processed through your integrated systems (e.g. CRM, accounting, telematics, field apps) is processed strictly under your authorization and direction.

We do not collect sensitive information (such as health records or biometric data) unless strictly required for a specific engagement and with your explicit prior consent.

3. How We Collect Personal Information

We collect information primarily from you directly when you:

• Book a discovery call through our website (via Calendly embed);
• Communicate with us via email, phone, or LinkedIn;
• Engage us for advisory, systems architecture, or development services;
• Provide feedback or submit client reviews.

4. Use and Disclosure of Information

We use and disclose personal information only for the primary purpose for which it was provided (APP 6):

• Scheduling and conducting discovery audits and architecture reviews;
• Designing, deploying, and maintaining automated workflows and integrations;
• Providing technical support, system oversight, and account administration;
• Invoicing, payments, and statutory record-keeping.

We do not sell, rent, or trade your personal information to third parties. We do not use your proprietary data to train generalized AI models.

5. Artificial Intelligence & Data Sovereignty

Our AI automation pipelines adhere to strict data-protection and engineering standards (APP 11 and Australia's AI Ethics Framework):

• Human Oversight (HITL): Automated AI tasks operate under a human-in-the-loop gate. No commercial, contractual, or financial action is executed without explicit human authorization.
• Data Minimization: Personal information is redacted or minimized before processing through any language model API.
• Australian Data Residency: Where available, data pipelines, databases, and compute infrastructure are provisioned in Australian cloud regions (e.g. AWS ap-southeast-2 Sydney).
• No Model Training: Any AI vendor APIs utilized (e.g. Anthropic, OpenAI) are accessed under commercial API terms that explicitly prohibit using API inputs or outputs for public model training.

6. Cross-Border Disclosures (APP 8)

Certain third-party service providers (e.g., enterprise AI API providers or scheduling tools such as Calendly) may process data on infrastructure located outside Australia. In such instances, we take reasonable steps to ensure the recipient adheres to security and confidentiality obligations comparable to the Australian Privacy Principles.

7. Data Security and Retention (APP 11)

We maintain appropriate technical, physical, and administrative safeguards to protect personal information from misuse, interference, loss, unauthorized access, modification, or disclosure:

• Encrypted data transmission (TLS 1.3) and encryption at rest;
• Role-based, least-privilege access controls;
• Regular automated testing and security audits;
• Secure destruction or de-identification of data once it is no longer required for business or regulatory compliance.

8. Access and Correction Rights (APPs 12 & 13)

You have the right to request access to the personal information we hold about you and to request that any inaccurate, outdated, or incomplete information be corrected. We will respond to your request within 30 days without charge.

9. Complaints & Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint regarding our handling of your personal information, please contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.