As little of your data as possible.

This website

This site is a static page. It has no contact forms, no user accounts, no advertising, no analytics and no tracking cookies. Two things happen technically when you visit:

• Our hosting provider (Cloudflare) records standard server logs — IP address, pages requested, browser type — used for security and keeping the site up.
• Fonts load from Google Fonts, which means Google receives your IP address as part of serving the font files.

That's the lot. We don't add anything on top.

If you email us

Our contact links open your own email program. When you email hello@integrityubique.au, we receive whatever you choose to send — usually your name, email address and something about your business. We use it to reply and to do the work you've asked about. We don't add you to marketing lists, and we never sell or rent contact details to anyone.

If you become a client

Delivering business automation means handling some of your business information — staff names and emails for Microsoft 365 accounts, and bookkeeping records for the services you've engaged. Three commitments apply:

• Your data is yours. It's exportable in full whenever you ask, at no charge, and it leaves with you if you leave.
• Used only for the engagement. Your information is used to deliver the services in your agreement — never for anything else, and never disclosed except to the providers that deliver your services (for example Microsoft and Xero, under their own privacy terms) or where the law requires it.
• Kept safe. Credentials live in an encrypted vault, access is limited to the people delivering your work, and multi-factor authentication is standard on everything we set up.

Firmus

Firmus is deliberately local-first: your records are stored on your own device, not on our servers, and there are no accounts. We can't read your timeline, your evidence or your documents — that's the design. Optional features that do send data (community board posts, the opt-in usage statistics, or the AI assistant — which sends only the text you choose to Anthropic under its API privacy terms) are explained in the app before you use them, and the statistics contain counts only, never the content of your records. The full in-app statement lives under Get help → Privacy policy.

Custos

Custos, our record-keeper for veterans, follows the same local-first design: no accounts, and your record stays on your own device. Two optional features involve our infrastructure, and both are off until you turn them on:

• Cloud sync encrypts your record and documents on your device with a passphrase we never see, before upload. Our relay stores ciphertext and timestamps it cannot read — a breach of it, or a demand made of us, yields scrambled data. If you lose the passphrase the cloud copy is unrecoverable, by design. To have your cloud copy deleted, email help@integrityubique.au with your sync code.
• Cloud OCR, when available, sends a document you choose off your device to be read, only ever after an explicit consent screen; on-device reading is always tried first.

The AI assistant and opt-in statistics work exactly as described for Firmus above. The full in-app statement lives under Get help → Privacy policy.

Access, corrections and complaints

We handle personal information in line with the Australian Privacy Principles. To see what we hold about you, correct it, or have it deleted, email hello@integrityubique.au and we'll respond within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If this policy changes, the new version goes on this page with a new date. We won't quietly weaken it.