Privacy Policy

Krummel Pty Ltd (trading as LicenseDesk) ("LicenseDesk", "we", "us", "our")

Last updated: March 2026

1. Introduction

1.1 LicenseDesk provides an AI-powered Microsoft licensing research platform at licensedesk.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1.2 By using LicenseDesk, you consent to the practices described in this policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

2.1 Account Information. When you create an account via Microsoft Entra External ID, we receive:

(a) your name and email address;

(b) Microsoft account identifier; and

2.2 Usage Data. We collect information about how you use the platform, including:

(a) queries submitted to the AI assistant;

(b) conversation history and saved projects;

(d) feedback provided on AI responses;

(e) expert review requests and responses; and

(f) pages visited and features used.

2.3 Subscription and Payment Data. If you subscribe to a paid plan, we process subscription tier and billing period information. Payment processing is handled entirely by a PCI-compliant third-party payment processor. We do not store your credit card number, CVV, or full card details. We receive only a customer identifier and subscription status.

2.4 Technical Data. We automatically collect:

(a) IP address and approximate geolocation;

(b) browser type and version;

(d) referral source.

2.5 Uploaded Documents. If you upload documents for analysis:

(a) documents are processed in-session for the purpose of answering your query;

(b) uploaded documents are not retained after your session ends; and

3. How We Use Your Information

3.1 We use collected information to:

(a) provide the service, including processing your licensing queries, maintaining conversation history, and managing your account;

(b) improve accuracy by analysing query patterns and feedback to improve AI response quality and citation accuracy;

(d) process subscription payments and manage your plan;

(e) send service-related notifications such as query responses, expert review updates, and account alerts;

(f) detect and prevent fraud, abuse, and unauthorised access; and

(g) generate aggregated, anonymised usage statistics to improve the platform.

4. AI-Generated Content

4.1 LicenseDesk uses large language models (LLMs) to generate responses to your queries.

4.2 Your queries are processed by third-party AI service providers. Queries are sent to these providers for processing but are not used by them to train their models.

4.3 AI responses are for research purposes only and do not constitute legal, financial, or compliance advice.

4.4 Citations are provided to Microsoft source documentation so you can verify all claims independently.

4.5 We do not guarantee accuracy. While we employ citation auditing, confidence scoring, and expert review processes, AI-generated content may contain errors.

5. Data Sharing and Disclosure

5.1 We do not sell your personal information.

5.2 We may share data with the following categories of third parties:

(a) AI service providers, for processing your queries;

(b) search infrastructure providers, for retrieving relevant source documents;

(d) Microsoft Entra External ID, for authentication and identity management;

(e) as required by law, regulation, or legal process; and

(f) in connection with a merger, acquisition, or sale of assets.

5.3 All third-party processors are bound by data processing agreements.

6. Data Retention

6.1 Account data is retained while your account is active and for 90 days after deletion.

6.2 Conversation history is retained while your account is active. You can delete individual conversations at any time.

6.3 Payment records are retained for 7 years as required by tax and financial regulations.

6.4 Anonymised analytics are retained indefinitely in aggregated form.

7. Data Security

7.1 We implement appropriate technical and organisational measures to protect your data, including:

(a) encryption of all data in transit (TLS 1.2+) and at rest (AES-256);

(b) authentication via industry-standard protocols;

(d) restricted and audited access to production systems; and

(e) regular security reviews of application code and dependencies.

8. Your Rights

8.1 Depending on your jurisdiction, you may have the right to:

(a) access and request a copy of the personal data we hold about you;

(b) request correction of inaccurate personal data;

(d) request your data in a structured, machine-readable format;

(e) object to processing of your personal data for certain purposes; and

(f) request restriction of processing in certain circumstances.

8.2 To exercise any of these rights, contact us at privacy@licensedesk.ai.

9. International Data Transfers

9.1 LicenseDesk is operated from Australia. Your data may be processed in:

(a) Australia (primary hosting); and

(b) the United States (AI service processing).

9.2 Where data is transferred internationally, we rely on appropriate safeguards including data processing agreements and standard contractual clauses.

10. Children's Privacy

10.1 LicenseDesk is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Cookies and Tracking

11.1 LicenseDesk uses essential cookies for authentication session tokens, which are required for the service to function.

11.2 We do not use advertising or third-party tracking cookies.

11.3 We use server-side analytics only.

12. Changes to This Policy

12.1 We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

12.2 Your continued use of LicenseDesk after changes constitutes acceptance of the revised policy.

13. Contact Us

13.1 If you have questions about this Privacy Policy or our data practices, you may contact us at:

(a) privacy@licensedesk.ai for privacy enquiries;

(b) support@licensedesk.ai for general enquiries; or