Privacy Policy

Last updated: September 19, 2026

DIRHAND PTY LTD ("DIRHAND," "RedactGuru," "we," "us," or "our") provides the RedactGuru redaction software and related services (the "Service"). This policy explains what personal data we collect, how we use it, and the choices and rights you have.

DIRHAND PTY LTD is a company registered in Australia (ACN 659 390 306, ABN 64 659 390 306), based in Surry Hills, NSW 2010, Australia. If you're in the European Economic Area, the UK, or Switzerland, DIRHAND PTY LTD acts as the data controller for your personal data under this policy.

1. Definitions

Personal Data means any information that relates to an identified or identifiable individual. Document Content means the files, images, and text you upload to the Service to be redacted, which may itself contain personal data about third parties (e.g. names or account numbers in a contract). Usage Data means information collected automatically through your use of the Service, such as IP address, browser type, and pages visited.

2. Information we collect

We collect information in three ways:

• Account data you provide — name, email address, password (hashed by our authentication provider, Clerk), company name, and billing details when you subscribe to a paid plan.
• Document Content you upload — the files and images you submit for redaction, and the redaction decisions you or your team make on them.
• Usage Data collected automatically — IP address, device and browser information, pages visited, and timestamps, collected via cookies and similar technologies and via analytics tools (e.g. Google Analytics).

3. How we use your information

We use the information above to:

• Provide, operate, and maintain the Service, including performing redaction on the Document Content you upload;
• Create and manage your account, and process payments for paid plans;
• Respond to support requests sent to support@redactguru.com;
• Send service-related communications (e.g. security alerts, billing notices) and, where you've opted in, product updates;
• Monitor usage to improve the Service and diagnose technical issues; and
• Comply with legal obligations and enforce our Terms of Service.

4. Document Content is not used to train shared models

Document Content you upload is used solely to provide the redaction you requested. We do not use customer Document Content to train models shared across customers, and we do not sell Document Content or Personal Data to third parties.

5. Legal bases for processing (EEA/UK users)

If you're in the EEA, UK, or Switzerland, we rely on the following legal bases:

• Contract — to provide the Service you've signed up for;
• Legitimate interests — to secure and improve the Service, and for fraud prevention;
• Consent — for optional marketing communications, which you can withdraw at any time; and
• Legal obligation — where processing is required by law.

6. Retention

We retain account data for as long as your account is active. Document Content is retained only as long as needed to provide the Service, and you can delete uploaded documents from your account at any time. After account closure, we delete or anonymize your data within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations.

7. International transfers

We and our service providers (including our hosting and authentication providers) may process data outside your country of residence, including in the United States and Australia. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Disclosure of your information

We share information only in these circumstances:

• Service providers who process data on our behalf (e.g. cloud hosting, authentication, analytics, payment processing), bound by confidentiality obligations;
• Business transfers — if DIRHAND PTY LTD is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction;
• Legal requirements — if required to do so by law, or in response to valid requests by public authorities; and
• With your consent — for any other purpose disclosed to you at the time we collect the data.

9. Security

We use technical and organizational measures — including encryption in transit and at rest, and access controls limiting who can view Document Content — designed to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. See our Security page for more detail.

10. Your rights (EEA/UK)

If you're in the EEA, UK, or Switzerland, you have the right to access, correct, delete, or export your personal data, restrict or object to certain processing, and withdraw consent at any time. To exercise these rights, contact us at hi@redactguru.com. You also have the right to lodge a complaint with your local data protection authority.

11. California privacy rights (CCPA/CPRA)

If you're a California resident, you have the right to know what personal information we collect, request deletion of that information, correct inaccurate information, and opt out of any "sale" or "sharing" of personal information, as those terms are defined under the CCPA. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, email hi@redactguru.com.

12. Other U.S. state privacy rights

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, and others as they take effect) have similar rights to access, correct, delete, and port their personal data, and to opt out of targeted advertising and certain profiling. Contact us at hi@redactguru.com to exercise these rights; we will verify your request before acting on it.

13. Australian privacy rights

As an Australian-registered company, DIRHAND PTY LTD handles personal data in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth), where applicable. You may request access to or correction of your personal data, or raise a privacy complaint, by contacting hi@redactguru.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

14. Canadian privacy rights

If you're in Canada, you have the right to access and request correction of your personal information, and to withdraw consent to our collection, use, or disclosure of it, subject to legal and contractual restrictions, in accordance with applicable Canadian privacy law (including PIPEDA).

15. Children's privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do, and for material changes we'll provide more prominent notice (e.g. email or an in-app notice).

17. Contact us

DIRHAND PTY LTD — Privacy questions or requests: hi@redactguru.com
General support: support@redactguru.com