Privacy policy

1. Scope

This policy describes how Veela AI Pty Ltd handles personal information collected through the Veela platform, including officer and member details drawn from your company register, account information for your users, and content you send to Ask Veela or the drafting agents.

2. What we collect

• Account details: name, email address, role, and the company or companies you act for.
• Register-derived data: officer, member and holding information (name, address, entity type, security class, units held, vesting) mirrored from your company's share and option registers.
• Usage data: drafts requested, questions asked of Ask Veela, and the resulting agent runs and approvals, kept as part of the immutable minute-book record.
• Payment and billing information, processed by our payment provider.

3. How we use it

We use this information to provide the company secretarial, drafting and register-keeping services you sign up for, to route AI drafting requests to the underlying model providers, to maintain your minute book and compliance calendar, and to communicate with you about your account.

4. AI processing

Drafting and Ask Veela requests are sent to third-party AI model providers under contracts configured for zero data retention on model calls, and your data is never used to train third-party models. Every AI-prepared output is logged against the request that produced it as part of the audit trail retained in your minute book.

5. Data residency and security

Register-derived personal information is hosted with Australian data residency. Access is role-based (client, reviewer, CoSec desk), field-level activity is audited, and data is encrypted at rest and in transit. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

6. Sharing

We share information with the registered agent or company secretary you engage through Veela, with e-signature and register providers you connect (such as Tokeniser), and with partner legal/accounting firms only where you have consented to a referral. We do not sell personal information.

7. Retention

Minute book and register records are retained per Corporations Act record-keeping obligations (including the seven-year records posture for company records), with legal-hold support where required.

8. Your rights

You can request access to, or correction of, personal information we hold about you by contacting us. Where information forms part of a statutory company register or minute book, correction may require a passed resolution or equivalent register movement rather than a direct edit.

9. Contact

Privacy questions or requests can be sent to support@tokeniser.com.