Privacy Policy.

This policy is given by Dumaguete Pty Ltd ABN 47 637 375 298, trading as PACT (“PACT”, “we”). It explains what personal information PACT collects, how we use and store it, and your rights under the Australian Privacy Principles (APPs). It reflects how the platform actually operates today.

What we collect

The information you provide during intake: the names, addresses, and email addresses of the parties; the details of the loan (amounts, purpose, property, repayment terms); and your answers to the circumstance questions. We also record the intake conversation, the assembled document, signatures and execution details, and payment records (never card numbers).

Information about others

When you create a matter, you give us personal information about the other parties. We use it only to assemble the document and invite them to review and sign. When we first contact them, we show them this policy and our collection notice, and they have the same rights of access and correction.

Where it is stored

Personal information is stored in Australian-region infrastructure (Sydney). Evidence records — documents, signatures, ledger and audit entries — are hashed and held append-only.

Third parties who process it

We use a small set of service providers, each processing data only to provide its part of the service: an AI provider that runs the guided intake conversation (your intake messages are processed in the United States for this purpose), a payment processor, an email delivery provider, and an Australian address-validation provider. Aside from intake processing, personal information is held in Australia.

Cookies and analytics

We use only the essential cookies required to keep you signed in. We use no advertising cookies and no third-party analytics.

How we use it

To assemble your document, run the signing and evidence process, take payment, and maintain your matter and repayment ledger. We do not sell your personal information, and we do not use it for advertising.

How long we keep it

Unfinished intake records (an email address and progress stage) are deleted after 30 days. Executed matters and evidence records are retained for the life of the agreement plus 7 years, because they exist to be evidence.

Your rights

Under the APPs you may request access to the personal information we hold about you, and ask us to correct it. You can request deletion of your account and intake data. Executed evidence records are different — their purpose is permanence — so instead of altering them we export the complete bundle to you and cease using it for anything except responding to legal process. Requests can be sent to hello@pactseal.com.au.

Complaints

If you think we've mishandled your information, email hello@pactseal.com.au and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Collection notice

A short notice is shown at the start of intake summarising this policy — see our collection notice.