ClassifyIQ Privacy Policy

This Privacy Policy explains how ClassifyIQ ("we", "us", "our") collects, uses, shares, and protects information when you use classifyiq.net and the ClassifyIQ platform (the "Service"). We operate from Sydney, Australia, and serve customers worldwide — primarily US-based customs brokers and freight forwarders.

This Policy is designed to comply with the Australian Privacy Principles ("APPs") under the Privacy Act 1988 (Cth) and to reasonably accommodate US state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the CPRA, and comparable laws in Virginia, Colorado, Connecticut, Utah, and other states.

1. Who We Are

ClassifyIQ is operated by Deepak Ragupathy, ABN 55 337 098 927, based in Sydney, New South Wales, Australia. We are the entity responsible for the personal information described in this Policy. For privacy enquiries, contact us at info@classifyiq.net.

2. Information We Collect

We collect the following categories of information:

• Account information — name, email address, company name, job role, and profile details you provide.
• Billing information — billing name and address, tax ID where applicable, and payment-card details. Card numbers are handled directly by Stripe and are not stored on our servers.
• Classification inputs — product descriptions, technical specifications, materials, component breakdowns, end-use information, supplier and origin details, and any other content you submit for classification.
• Uploaded documents — commercial invoices, bills of lading, packing lists, datasheets, photographs, spec sheets, and other files you upload.
• Classification history — past queries, generated classifications, your decisions on outputs, and saved notes.
• Usage logs — pages and features accessed, queries made, timestamps, and session duration.
• Device and network data — IP address, browser type, operating system, device identifiers, language, and approximate location derived from IP.
• Cookies and similar technologies — see Section 12.
• Communications — support tickets, emails, feedback, and survey responses.

If you choose not to provide information we reasonably need (for example, a valid email or payment details for a paid plan), we may be unable to provide the Service or certain features.

3. Your Commercially Sensitive Data

We recognise that the data you submit — product descriptions, supplier and sourcing details, pricing where included, classification history, and uploaded commercial documents — is commercially sensitive. It may identify your clients, reveal sourcing relationships, or expose competitive information.

We treat this data as confidential. Access within ClassifyIQ is restricted to staff and contractors who need it to operate, support, or improve the Service, and is subject to written confidentiality obligations.

We do not disclose customer shipment data, uploaded documents, supplier information, or classification history to other customers or third parties except as required to operate the Service, comply with law, or protect the rights, safety, and security of ClassifyIQ and its users.

4. How We Use Your Information

We use your information to:

• Provide, operate, and support the Service, including generating classification suggestions and Alerts;
• Process payments and manage subscriptions;
• Authenticate users and secure accounts;
• Communicate with you about your account, support requests, product updates, and (where you have not opted out) occasional product news;
• Improve the Service, including diagnosing errors and measuring feature usage at an aggregate level;
• Detect, prevent, and respond to fraud, misuse, and security incidents;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

5. AI Processing Disclosure

To generate classification suggestions and other AI-assisted outputs, the Service sends your inputs — including product descriptions, document text, and related context — to third-party AI providers for processing. The current AI providers are:

• Anthropic (Claude models)
• OpenAI (GPT models)

These providers process your inputs on their infrastructure (primarily located in the United States) and return outputs to us, which we then deliver back to you. By using the Service, you authorise this processing.

We may add, replace, or remove AI providers from time to time. The current list of subprocessors, including AI providers, is in Section 7 and will be updated as it changes.

6. We Do Not Train Public AI Models on Your Data

We do not use customer shipment data, product descriptions, uploaded commercial documents, or classification reports to train public AI models. ClassifyIQ currently uses API configurations from Anthropic and OpenAI that are designed not to use customer API data for public model training by default.

This is a material commitment. If we ever propose to change it — for example, to offer an opt-in mechanism for customers who want to contribute data to model improvement — we will give clear advance notice and obtain explicit consent.

We may use aggregated, de-identified data (data that cannot reasonably be linked back to you, your account, or your clients) for internal analytics, product improvement, and operational reporting.

7. Third-Party Processors

We use the following service providers ("subprocessors") to operate the Service. Each is bound by contractual obligations regarding confidentiality and security.

We may update this list from time to time. Material changes will be reflected in this Policy and, where appropriate, notified to users.

8. International Transfers

Because our subprocessors are located primarily in the United States and the European Union, your personal information will be transferred to, stored in, and processed in those jurisdictions, and potentially in other countries where our subprocessors operate.

For users in Australia, we take reasonable steps to ensure that overseas recipients handle your personal information consistently with the Australian Privacy Principles, including through contractual safeguards. You acknowledge that, where you consent to disclosure to an overseas recipient under APP 8.2(b), we will not be accountable under APP 8.1 for that recipient's handling of your information.

For users in the European Economic Area, United Kingdom, or Switzerland (to the extent applicable), transfers rely on Standard Contractual Clauses or equivalent mechanisms.

9. Data Retention

We retain account information, billing records, classification history, and uploaded documents while your subscription is active.

If you cancel your subscription, we retain your account and classification data for a limited grace period (typically 90 days) to allow for reactivation, then either delete it or transition it to a long-term archive in line with our internal retention schedule.

You may request that we retain, export, or delete your classification history at any time through your account settings or by contacting us.

We retain billing and tax records for the period required by Australian and applicable foreign law (generally seven years).

You are responsible for maintaining your own copies of reports, classifications, and uploaded documents. We do not guarantee permanent storage or recovery of deleted data.

10. Your Rights

You have the following rights regarding your personal information. To exercise any of them, contact us at info@classifyiq.net. We will respond within 30 days, or sooner where required by law.

• Access. You may request a copy of the personal information we hold about you.
• Correction. You may ask us to correct information that is inaccurate, out of date, or incomplete.
• Deletion. You may request that we delete your account and all associated data, including classification history and uploaded documents. We will honour deletion requests except where we are required by law to retain certain records (such as tax and billing records) or where data is reasonably required for fraud prevention or to resolve disputes.
• Portability. You may request export of your classification history and account data in a structured, machine-readable format.
• Opt-out of marketing. You may unsubscribe from product news and marketing emails at any time. We will still send transactional messages (billing, security, service notices).

California, Virginia, Colorado, Connecticut, Utah, and other US state residents have additional rights under their state privacy laws, including the right to know, the right to delete, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information, and we do not share it for cross-context behavioural advertising. To exercise state-law rights, contact us at the address above.

Complaints. If you are unhappy with how we have handled your information, please contact us first. If we cannot resolve the matter, Australian users may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Security

We protect your information with measures that include:

• Encryption in transit using TLS for all connections between your browser and our servers, and between our servers and our subprocessors;
• Encryption at rest for our application database and backups;
• Least-privilege access controls — staff and contractors only have access to the data they need to do their job, with access logged and reviewed;
• Authentication safeguards including support for strong passwords and multi-factor authentication;
• Operational measures including secure development practices, monitoring, and incident response procedures.

No security system is perfect. If we become aware of a data breach that is likely to result in serious harm, we will notify affected users and relevant regulators (including the OAIC) in accordance with the Notifiable Data Breaches scheme and applicable foreign law.

12. Cookies and Analytics

We use a small number of cookies and similar technologies for:

• Essential functions such as keeping you signed in and remembering preferences;
• Basic web analytics to understand which features are used and diagnose problems.

We do not use third-party advertising pixels. We do not allow advertising networks to track you across other sites via our Service.

You can disable cookies in your browser, but the Service may not function correctly without essential cookies.

13. Children

The Service is not directed at, designed for, or marketed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date indicates when it was most recently changed. Material changes will be notified by email or through the Service. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

15. Contact

For privacy enquiries, access requests, deletion requests, or complaints, contact us at info@classifyiq.net.

ClassifyIQ is operated by Deepak Ragupathy, ABN 55 337 098 927, based in Sydney, New South Wales, Australia.