Privacy policy

What we hold about you

The name and email address of each person with an account, your organisation's name and RTO code, the units and packs you build, and billing details held by Stripe.

Information about your students

We hold none. VET Creator has no class lists, no student names or IDs, no dates of birth, no USIs and no results. It builds the training and assessment material; your students' records and results stay in your own student management system.

The documents you print carry blank lines for a student's name, signature and outcome. Those are filled in by hand on paper and never come back to us.

Some of what you type is sent to Claude to write your material (see below), so please do not type a student's name or details into any box in VET Creator.

Where it lives

In a database hosted in Sydney, Australia, and the application that reads it runs in Sydney too. Your organisation's rows are isolated at the database level, so another organisation cannot read them even if the application were wrong about who is asking.

Who else sees it, and where they are

Only the services that make the tool work:

• · Supabase — the database, file storage and logins. Data stored in Sydney; the company is United States.
• · Vercel — hosting. Runs in the Sydney region; the company is United States.
• · Stripe — payments. Card details go to Stripe and never to us. United States and Ireland.
• · Anthropic — when you run a deep analysis, the unit text, and any instructions you type for a rewrite, are sent to Claude to write the content. We hold no student information to send. Anthropic does not train models on it. United States.
• · Firecrawl and YouTube — only the search terms built from a unit, when you press Find sources. United States.

We do not sell your data, and we do not use your packs to train anything.

How long we keep it

For as long as your organisation exists with us. You can delete an organisation yourself from the Licence page, and doing so removes its units, packs, assessments and uploaded files — the files out of storage as well, not only the records pointing at them. It cannot be undone, so export anything you want to keep first.

After a deletion, copies can survive for a short time in routine database backups and in our providers' logs. Those expire on their own and are not searched or used for anything.

Your record-keeping obligations are yours, not ours. An RTO must keep assessment records for its own retention period, and deleting your organisation here does not satisfy that. Export before you delete.

If something goes wrong

If we become aware of unauthorised access to your data, we will tell you what happened, what was affected and what we have done, without waiting to be asked. Where the law requires it we will also notify the Office of the Australian Information Commissioner.

Your data, your call

Ask and we will tell you what we hold, or correct it. If you believe we have handled your information badly, tell us first and we will answer; you can also complain to the Office of the Australian Information Commissioner.

Cookies

One, to keep you signed in. No advertising or tracking cookies.