We are committed to protecting your personal information with the highest standards of care under Australian privacy law.
ATARISE Pty Ltd (ABN 85 693 045 948 | ACN 693 045 948) ("ATARISE", "we", "us", or "our") is committed to protecting the privacy of our users, including students, parents, teachers, tutors, and school administrators. This Privacy Policy describes how we collect, use, store, and share your personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using the ATARISE platform, including our website at atarise.com.au, mobile applications, and related services (collectively, the "Platform"), you consent to the collection, use, and disclosure of your personal information as described in this Policy.
This is version 2.0 of this Privacy Policy, effective 7 October 2026. Our Privacy Officer reviews it at least once a year and whenever our handling of personal information changes.
If you do not provide the information we ask for when you register, such as your name, email address or year level, we may not be able to create your account or provide some features, such as exam results and ATAR predictions. Some fields are optional and can be left blank.
If we receive personal information that we did not ask for and do not need, we destroy or de-identify it as soon as practicable where it is lawful and reasonable to do so. For example, when a school uploads a spreadsheet to invite staff, or imports calendar events, columns that ATARISE does not use are discarded during the import and are not stored.
We use the information we collect to:
Provide and improve our services
Deliver personalised study plans, mock exams, ATAR predictions, and analytics.
Create and manage your account
Authenticate your identity, manage your profile, and process subscriptions.
Communicate with you
Send transactional emails, respond to support requests, and provide important service updates.
Enhance platform security
Detect and prevent fraud, abuse, and violations of our Terms of Service.
Analyse usage patterns
Understand how users interact with the Platform to improve functionality and user experience.
Legal compliance
Meet our legal obligations under Australian law.
Some features of the Platform use artificial intelligence (AI) services from other companies:
We do not send your name, email address or account details with these requests (the study chat includes a scrambled identifier that does not reveal who you are). However, anything you type into an answer or a chat message is sent as written, so please do not include personal details.
Users under the age of 16 require verifiable parental or guardian consent before creating an account on ATARISE. Our process:
During registration, users under 16 are prompted to provide a parent/guardian's email address.
We send a consent request to the parent/guardian, explaining the information we collect and how it will be used.
The account remains restricted until the parent/guardian confirms consent by clicking a verification link and providing their own identity verification.
Parents/guardians can withdraw consent at any time, which will result in the deletion of the child's account and associated data.
We share your personal information only with the following trusted third parties, and only to the extent necessary to provide our services:
| Provider | Organisation | Contact | Purpose | Data types | Lawful basis / APP purpose | Countries |
|---|---|---|---|---|---|---|
| Supabase | Supabase, Inc. | supabase.com/privacy | Database, sign-in, file storage and server functions | Account and profile data, school records, exam answers and results, messages, uploaded files | Necessary to provide the service (APP 6.1 primary purpose) | Australia (Sydney); some server functions may run in other regions |
| Vercel | Vercel Inc. | vercel.com/legal/privacy-policy | Website and application hosting | IP address, request data, session cookies | Necessary to provide the service (APP 6.1 primary purpose) | Australia (Sydney) for application functions; global network |
| Vercel Speed Insights | Vercel Inc. | vercel.com/legal/privacy-policy | Measuring page loading performance | Page address, performance measurements, device and browser type | Maintaining and improving the service (APP 6.1 primary purpose) | Global network |
| Anthropic | Anthropic, PBC | anthropic.com/legal/privacy | AI marking of written, mathematics and drawing answers | Answer text or images, question and marking guide (no name or email) | Necessary to provide the service (APP 6.1 primary purpose) | United States; processing may occur in other countries |
| OpenAI | OpenAI OpCo, LLC | openai.com/policies/privacy-policy | AI study chat, study plans and flashcards; checking chat messages for harmful content | Study chat: your message, earlier messages in the same conversation, year level, subjects, focus areas and a scrambled account identifier. Study plans: subjects, topic mastery and weakness levels, preferred study times, study style, focus areas, upcoming exams and target study hours. Flashcards: subject and chosen topics | Necessary to provide the service (APP 6.1 primary purpose) | United States |
| Stripe | Stripe, LLC and its affiliates | stripe.com/privacy | Payments, subscriptions and tutor payouts | Name, email, billing details, transaction history; card details are held by Stripe only | Necessary to provide the service (APP 6.1 primary purpose); legal obligations (tax, fraud prevention) | United States and other countries where Stripe operates |
| Resend | Plus Five Five, Inc. (Resend) | resend.com/legal/privacy-policy | Sending service emails and, if you opt in, newsletters | Name, email address, email content | Necessary to provide the service (APP 6.1 primary purpose); consent for newsletters | United States |
| Sentry | Functional Software, Inc. (Sentry) | sentry.io/privacy | Error monitoring and reliability | Server error details and stack traces, the page or API address requested and browser type; no account identifier is attached and user IP addresses are not sent | Keeping the service secure and working (APP 6.1 primary purpose; APP 11) | United States or Germany (depending on account region) |
| PostHog | PostHog, Inc. | posthog.com/privacy | Product analytics, only if you accept analytics cookies | Page views and page exits, product events, page performance measurements, session recordings of public website pages with typed text masked, a random browser identifier, device and browser information, and the IP address of your device as received by PostHog | Consent (analytics cookies); you can withdraw it at any time | United States |
| Google Workspace | Google LLC | policies.google.com/privacy | ATARISE email and documents, including emails you send to our support, security and privacy addresses | Name, email address, content of your email | Responding to your enquiry (APP 6.1 primary purpose) | United States and other countries where Google operates |
| Google Cloud | Google LLC | cloud.google.com/terms/cloud-privacy-notice | Encrypted off-site backups | Encrypted copies of platform data; Google cannot read the contents | Security and disaster recovery (APP 11) | Australia (Sydney) |
We choose providers that offer data processing terms or equivalent contractual commitments where available, and we give each provider only the information it needs for its function.
Our main database and file storage are in Sydney, Australia. Some of the providers above store or process personal information outside Australia, as shown in the Countries column: mainly the United States, and Germany for error monitoring if our account uses the EU region. Parts of Vercel's network operate globally. We take reasonable steps to make sure these providers handle your information consistently with the Australian Privacy Principles.
Under the Australian Privacy Principles, you have the right to:
Access your personal information held by us.
Correct inaccurate or outdated personal information.
Delete your personal information (subject to legal obligations to retain certain records).
Request a copy of your data in a portable format.
Withdraw consent for analytics and marketing communications at any time.
Complain to the OAIC if you believe your privacy has been breached.
To exercise any of these rights, contact our Privacy Officer at privacy@atarise.com.au.
We only send marketing emails, such as our newsletter, to people who have chosen to receive them. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time by emailing privacy@atarise.com.au. Service messages that you need in order to use your account, such as sign-in and security emails, are not marketing and are still sent.
If you are concerned about how we have handled your personal information, please tell us. Our process is:
Contact our Privacy Officer at privacy@atarise.com.au or by post at PO Box 2055, Grovedale East VIC 3216, Australia, describing your concern.
We acknowledge your complaint within 5 business days.
We investigate and give you a written response within 30 days. If we need more time, we will tell you why and when to expect a response.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC). Contact details are at the end of this policy.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Duration of account + 2 years after deletion | Legal compliance, dispute resolution |
| Academic records | Duration of account + 7 years | Educational record obligations |
| Payment records | 7 years after transaction | Tax and financial compliance |
| Support tickets | 3 years after resolution | Service quality and auditing |
| Analytics data | 24 months from collection | Product improvement |
| Server logs | 90 days | Security and troubleshooting |
We use cookies and similar technologies to enhance your experience on our Platform. For detailed information about the cookies we use, how to manage your preferences, and your choices regarding cookies, please refer to our Cookie Policy.
We may update this Privacy Policy from time to time. When we make material changes, we will:
If you have questions or concerns about this Privacy Policy, or wish to exercise your privacy rights, please contact our Privacy Officer:
Post: Privacy Officer, ATARISE Pty Ltd, PO Box 2055, Grovedale East VIC 3216, Australia
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
