Privacy Policy

This policy applies to 01Mind and everything we offer: our website, the services we sell to businesses (the AI Search Visibility Audit and the SN Assay APP 1.8 report), our software (SN Probity and the other SN products), our agent tool catalogue, and any product we release in future.

Who we are

01Mind is a registered business name of Ian Charles Heffernan, a sole trader in Australia. There is no company behind 01Mind. Where this policy says "we", it means one person and the systems he runs.

A business this small sits under the turnover threshold in the Privacy Act 1988, which means the Australian Privacy Principles do not legally bind us. We comply with them anyway, and we say so here deliberately: once it is written on this page it is a commitment you can hold us to, not a courtesy we can withdraw. If you are handing your data to a one-person business, you are entitled to know it is held to the same standard a large one would be.

That includes APP 1.8, which from 10 December 2026 asks a business to say when computer programs make, or substantially help make, decisions about people that could significantly affect them. We do not use computer programs that way: no decision that could significantly affect you is made by a program, or substantially supported by one.

What we collect and hold

If you visit our website. Our server records which page was requested, what software requested it, and when, along with where you arrived from if that was passed to us. These records contain no name, no email address, no account identifier, and we do not attempt to link them to a person. We keep them indefinitely, because studying the traffic arriving at our own door is how we tell real visitors from the automated noise, and that is part of how our products improve.

Automated software visiting us. For requests that do not come from a person's web browser (agents, crawlers and other software), we also keep, for 30 days, how many requests each piece of software made on each day and how many distinct sources they came from. A source is a scrambled code made fresh each day from the connection's network address. We never store the address itself, and the code cannot be turned back into one.

If you contact us through our website. Your name, your email address, the subject you give and your message are sent to our business email so we can reply.

If you ask about one of our services or our software. The forms on our service and software pages send us what you enter: your name, email address and, depending on the form, your business or organisation, its website, your role, the type of organisation, a phone number and any message you add. It goes to our business email so we can reply, and is used for nothing else. Our software trial and partnership forms ask for your work email address, because those are arranged with organisations rather than individuals.

If you use a free check. The SN Assay check of whether APP 1.8 applies to your business is worked out entirely in your browser, and none of your answers are sent to us. When a check finishes, your browser tells us only its result (applies, might apply or doesn't apply), which we keep as a count for the day, with no record of who ran it. If you then ask for a report, we receive your contact details and which of your answers made APP 1.8 apply, and nothing else from the check. The AI Search Visibility Audit's free preliminary report needs only your website and an email address to send it to.

If your charity uses our free charity software. To register, a charity gives us its name, its ABN, and the name and email address of a contact person. We check the ABN against the ACNC Register of Australian Charities. The contact's details are held on our servers only until we collect them, and from then on our own computer; they are used only to confirm the registration and to manage the charity's access. Our servers keep the ABN, the charity's registered name and a scrambled form of its password, never the password itself. Signing in sets one cookie, which keeps you signed in for up to eight hours and does nothing else. The software runs in your browser: nothing you type into it is sent to us. We delete a charity's details on request, and straight away if we decline its registration. If a signed-in charity sends us a suggestion for other software, we receive it by email with the charity's name and ABN.

If you buy an SN Assay report. Once you have paid, we send you a questionnaire about the software your business uses and the kinds of decisions it makes. It asks about tools and decisions, never about any individual, and we ask you not to include anyone's personal details. Your answers are held on our servers only until we collect them, at which point that copy is deleted; from then they are held on our own computer as part of your engagement. We destroy your answers, and anything else you sent us for the report, within 14 days of sending you the report. We keep the report itself and our findings for 7 years after we deliver it, so we can show what a finding rested on if it is ever questioned.

If you buy an AI Search Visibility Audit. We ask AI assistants the questions a customer might ask about businesses like yours, and read your public website the way they do. That work is about your business, not about any person, and we keep the report and the record of the work.

If you use our software. SN Probity and our other software run on equipment you control and keep their data there. We never receive your submissions, scans, datasets, findings or reports. An installation sends us a short check-in once a week, and immediately if something goes wrong, containing only: the software version, the licence type and band, what triggered the check-in, a short description of any fault, a few yes-or-no start-up checks, and how long it has been running. The console shows you exactly what it sends. For a trial or a licence we also hold your organisation's name, the contact details of the people we deal with, and the licence itself.

If you hold an account with 01Mind or purchase a product or service. We hold what is needed to invoice you and to know what you are entitled to: the name of your organisation, the name, role and email address of the people we deal with, and a phone number and postal address where you have given them. We hold your billing email, your purchase order number where you use one, your VAT or tax number where the law requires it on an invoice, your declared time zone, and the details of what you bought — the product, tier, licence period and renewal date. We also keep our own notes about the account.

How long we keep it. An invoice and its payment record are kept for five years, counted from the later of the transaction completing or the lodgment of the tax return that relied on it. That is a legal obligation on any Australian business, not a preference, and it is why a request to delete everything cannot remove an invoice. Everything else — contact details, notes, configuration — we delete on request.

We do not take card payments yet. Our services are paid by bank transfer into a business account held with Wise, using a payment link or the details on your tax invoice. We never see card details.

If you use our agent tool catalogue. An API key we issue you, a record of what was purchased, and — where payment was made in cryptocurrency — the wallet address that paid is stored in our records. Wallet addresses are public information on the blockchain by design.

Against that API key we also count how it uses the catalogue: how many times it has visited, which free trials it ran, which purchases it began and which it completed. We do this to tell whether anyone is actually finding the catalogue useful, which for a business this size is the only way to know. An API key is issued on request with no name, email address or identity attached to it, so those counts describe a key, not a person.

If you ask a legal research question or send an email through us. We keep a record of the question and the start of its answer, or of the email's recipient and subject, so we can handle disputes and misuse. We do not keep the body of an email you send, and we do not keep a copy of a document we render for you.

If we decline a request. Where our protective measures decline a request, we keep the part of it that caused the decision for up to 72 hours, so we can check the decision was right.

Our Terms of Sale describe these records too.

If you have been contacted by us

We approach some businesses directly about the AI Search Visibility Audit. If we have contacted you, we found your business's email address on its own published website, and our email says so. Reply and tell us, and we will not contact you again.

Sending information overseas

01Mind is an Australian business, and some of what we use is not.

• Singapore — our servers and stored records, hosted for us by Render.
• Australia — your SN Assay answers once we have collected them, held on 01Mind's own computer until they are destroyed.
• United States — Anthropic, whose Claude models power our AI agents, and Tavily, which we use to search the public web. In an AI Search Visibility Audit we also put questions to OpenAI's ChatGPT, Google's Gemini and Anthropic's Claude; those questions are about a business and its market, not about any person.
• Microsoft — our business email. If you write to us, your message is held in a Microsoft mailbox.
• Coinbase — the wallet and payment infrastructure behind cryptocurrency purchases, and Wise, which provides the bank accounts an invoice is paid into.
• Neynar and Telegram — used where we reach other software agents, and for our own presence in developer communities.

We do not load fonts, analytics, advertising or tracking scripts from anyone else's servers. Every page you see is served from ours, so visiting this site does not hand your IP address to a third party.

Getting access, correction, or deletion of your information

If you would like to update, get access to, or delete information we have about you, please email 01mind@01mind.net and tell us what you would like changed or updated. We will respond to your request within 30 days.

Two honest limits on that. An invoice and its payment record are kept for the five years described above, because the law requires it — everything else about you goes. And our products that run on your own equipment hold their data on your equipment, not ours; we cannot reach into an installation you control to delete anything, and that is by design.

If you are in the European Union or the United Kingdom

The GDPR applies to us where we handle the personal data of people in the EU, regardless of how small we are, and we treat UK requests the same way. Alongside access, correction and deletion you have the right to ask for a copy of your data in a portable form, to object to or restrict how we use it, and to withdraw consent where our use rests on consent. Ask through the same address above.

Our lawful basis is straightforward: we use your details to perform the contract you have with us, and to meet the record-keeping obligations described above. We do not profile you and we make no automated decisions about you.

Australia does not hold an EU adequacy decision, so where a contract with an EU client involves us handling personal data on their behalf, we enter the European Commission's Standard Contractual Clauses. Ask and we will put them in place.

One thing stated plainly rather than left for you to discover: we have not appointed an Article 27 representative in the EU. If that matters to your own compliance, tell us and we will deal with it rather than argue about whether we need one.

Privacy Complaints

Please email 01mind@01mind.net with "Privacy complaint" in the subject headline. Please advise in detail what your complaint is and how you would like it rectified. We will respond to your complaint within 30 days.

If you are not satisfied with your complaint response, you may refer the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

Last updated: 22 October 2026