Privacy Policy

1. Introduction

Superhive Pty Ltd trading as Superadjust (ABN 58 683 676 584) ("Superadjust", "we", "us", "our") is committed to protecting the privacy of students, teachers, coordinators and school staff who use our platform.

This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, how we store it, and what rights you have.

This policy applies to superadjust.com, the Superadjust platform at app.superadjust.com, and any other Superadjust application or service. It is governed by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

This policy should be read alongside the Website Privacy Collection Notice and Cookie Policy, the Acceptable Use Policy and the AI Use and Output Disclaimer.

2. Information We Collect

We collect the minimum information reasonably necessary to deliver the Superadjust service. The categories of information we collect depend on how you interact with us.

• Account information: your name, work email address, role (such as teacher, NCCD coordinator or school leader) and school or organisation name.
• Evidence and support content: notes, adjustments, consultations and monitoring records that you create within the platform in the course of supporting students.
• Student information: limited information entered by your school for NCCD purposes. This includes NCCD category, a diagnostic label where relevant, and a short educational impact summary. Students do not log in and do not submit information to Superadjust directly.
• Usage and analytics data: how features are used, to help us understand what is working and to improve the product.
• Device and technical data: browser type, IP address, operating system and timestamps, used for security, performance and troubleshooting.
• Form submissions: information you submit when joining the waitlist, requesting a demo or contacting us through our website.

3. Sensitive Information

Some information we hold is sensitive information under the Privacy Act 1988 (Cth), including information about a student's disability or health condition. We collect sensitive information only where it is reasonably necessary for the NCCD or student support purpose, and only where the school or user has authority to enter it.

Our Acceptable Use Policy sets out what types of sensitive information may and may not be entered into the platform. Users must not upload full clinical, diagnostic, legal or court records. A short diagnostic label and educational impact summary may be recorded.

4. How We Use Information

We use the information we hold to:

• Provide the Superadjust platform and all features and services within it.
• Support your use of the platform, including troubleshooting, account recovery and customer support.
• Operate and improve the product, including testing features, monitoring performance and developing new functionality.
• Communicate with you about the service, including product updates, security notices and transactional communications.
• Process payments and manage billing and subscriptions via Stripe, where you are on a paid plan.
• Operate our waitlist and marketing communications, where you have opted in.
• Meet our legal and regulatory obligations, including under the Privacy Act 1988 (Cth) and Australian taxation law.
• Protect the security and integrity of the platform and respond to security incidents.

5. AI-Assisted Features

When you use AI-assisted features inside Superadjust, the information you enter into those features may be sent to a third-party AI service provider hosted in Microsoft Azure infrastructure in the Australia East region for processing.

We do not use customer data to train AI models and we do not intentionally permit customer data to be used to train AI models. We do not store raw AI prompts as a separate persistent record. Operational logs that may contain prompt content are retained only for the period necessary for security and service operation, generally up to 30 days.

Every AI output must be reviewed by a qualified educator before being saved, exported, shared or relied on. Once an AI output is saved by a user, the saved record is the user's content and the user is responsible for it.

AI outputs that are saved by a user inside the platform are stored alongside other user-saved content and are governed by this Privacy Policy and the Data Retention and Deletion Schedule.

For full details of how AI features operate, what they may and may not be used for, and the prohibited uses of AI outputs, see the AI Use and Output Disclaimer.

6. Sharing Information

We do not sell personal information. We share information only in the following circumstances:

• Service providers: we share information with third-party service providers who help us operate and deliver the platform, including hosting (Microsoft Azure, Australia East), authentication (Supabase, Australia Southeast), email (Amazon SES), waitlist and marketing (Loops), payment processing (Stripe), and website hosting and analytics (Vercel). These providers are listed in our Subprocessor List, available on request to procurement and IT teams.
• AI processing: where a user uses AI features, limited input content is shared with our AI service provider hosted in Microsoft Azure in the Australia East region, as described in section 5.
• Professional advisers: lawyers, accountants and insurers, where reasonably necessary for our business.
• Regulators and law enforcement: where required or permitted by law, including under the Privacy Act 1988 (Cth), taxation legislation or a court order.
• Business transfers: where we undergo a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to confidentiality obligations.

7. Overseas Disclosure

Student and evidence data is hosted in Australia using Microsoft Azure infrastructure in the Australia East region. Authentication data is held by Supabase in the Australia Southeast region.

Some of our service providers may process limited information outside Australia, including in the United States (for example, Stripe for payment processing and Loops for waitlist and marketing communications). Before disclosing information to an overseas recipient, we take reasonable steps to ensure the overseas recipient handles the information consistently with the Australian Privacy Principles.

By using Superadjust, you consent to your information being handled as described in this section, to the extent permitted by law.

8. Data Sovereignty

We recognise the importance of data sovereignty for Australian schools. Our core platform (including student records, evidence content and account data) is hosted in Australian data centres (Microsoft Azure, Australia East). The Website does not display identifiable student information and marketing technologies are not installed on application pages.

9. Children's Privacy

Superadjust is designed to be used by school staff. Children do not log in to the platform and children do not submit information directly to Superadjust.

Where student information is entered into the platform by a school, the school is responsible for ensuring it has the appropriate authority, consent and notice in place under its own privacy obligations. Superadjust supports schools by operating consistently with the National Principles for Child Safe Organisations and by restricting what types of student information may be entered (see the Acceptable Use Policy and the Child Safe Commitment Statement).

The Website at superadjust.com is not directed at children. We do not knowingly collect personal information from children through the Website.

10. Security

We use industry-standard security controls to protect personal information, including:

• Encryption in transit (TLS) and encryption at rest for stored data.
• Role-based access controls so that users can only access information relevant to their role.
• Audit logging of authentication and access events.
• Secure password hashing and session management.
• Regular security reviews and monitoring.

No security system is perfectly secure. Where we become aware of a security incident that affects personal information and that triggers notification obligations under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth), we will notify affected individuals and the Office of the Australian Information Commissioner as required.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required by law. Our Data Retention and Deletion Schedule describes in detail how long we hold each category of information and what happens to information when an account is cancelled.

In summary: customer content is accessible for 90 days after account cancellation (read-only export window), followed by a 14-day deletion warning, with final deletion at approximately day 104. Billing and tax records are retained for at least 7 years from the end of the financial year to which the record relates, as required by Australian law.

Requests for earlier deletion can be sent to privacy@superadjust.com.

12. Your Rights

Under the Privacy Act 1988 (Cth), you have the right to:

• Access the personal information we hold about you.
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.
• Make a complaint about how we have handled your personal information.
• Request deletion of personal information that we no longer need, subject to legal retention requirements.

To exercise any of these rights, contact privacy@superadjust.com. We will respond to access and correction requests within a reasonable period (generally no later than 30 days) and may ask you to verify your identity before responding.

13. Complaints

If you have a concern about how we have handled your personal information, please contact us first at privacy@superadjust.com so we can try to resolve the matter.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Updates to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the platform or by email to relevant account contacts. The effective date shown on this page will reflect the latest version. Your continued use of Superadjust after a material change is notified means you accept the updated policy.

15. Contact

Privacy enquiries, access and correction requests, deletion requests and complaints can be sent to:

Email: privacy@superadjust.com

Entity: Superhive Pty Ltd trading as Superadjust (ABN 58 683 676 584)