Skip to main content

Privacy Policy

Last updated: 10 July 2026

This Privacy Policy explains how Peak State Global (we, us, our) handles personal information in connection with CSuite Plus (the Service). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

  • Account information — your name and email address, and the organisation(s) you belong to or advise.
  • Organisation & workspace data — organisation details, memberships, role lenses, and advisor relationships and engagements.
  • Content you create — strategic questions, hypotheses, issue trees, evidence, decision briefs, decisions, decks, value components, and similar working material.
  • Sources you add — web links you paste in and the title, publisher, date, quotations, and text extracted from them.
  • Technical data — log data, device and browser information, and IP address, collected automatically when you use the Service.
  • Cookies — we use only essential cookies needed to sign you in and keep your session secure. We do not use advertising or cross-site tracking cookies.

2. How we collect it

We collect personal information directly from you (when you sign in, create content, or add a source), automatically (technical data as you use the Service), and — where you authorise it — from sources you connect, using read-only access wherever the provider supports it.

3. How we use it

We use personal information to:

  • provide, operate, and secure the Service and your organisation's workspace;
  • generate the Service's analysis and outputs, including cited radar positions, impact maps, and decision briefs;
  • respond to your requests and provide support;
  • maintain security, prevent misuse, and enforce our terms;
  • meet our legal obligations.

We do not sell your personal information, and we do not use it for advertising.

4. AI processing

The Service uses third-party AI providers to generate analysis and drafts. To do this, the inputs relevant to your request — such as your strategic questions, the business context you provide, and the text of sources you add — are sent to those providers solely to produce the output you asked for. Our AI providers are not permitted to use your data to train their models or for any purpose other than returning the result to us.

5. Who we share it with

We share personal information only as needed to run the Service, and bind our providers to use it only to provide services to us. Categories of recipient are:

  • Cloud hosting — to run and serve the application;
  • Database & authentication — to store your data and manage sign-in, with tenant isolation enforced at the database layer;
  • Transactional email — to send sign-in links and service notices;
  • AI processing — as described in section 4.

We may also disclose information where required by law or legal process, and in connection with a genuine business transfer (such as a merger or acquisition), subject to this Policy.

6. Overseas disclosure

Some of our providers store or process data outside Australia — typically in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs (APP 8).

7. Security

We protect personal information with encryption in transit, access controls, database-level tenant isolation, and read-only source connections where supported. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. We are committed to the Notifiable Data Breaches scheme: if a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

8. Retention and deletion

We retain personal information while your account is active and as needed to provide the Service. You can ask us to delete your personal information; we will do so unless we are required or permitted by law to retain it. Note that disconnecting or removing a source stops further collection from it but does not, by itself, delete information already imported into your workspace.

9. Access, correction, and portability

You may request access to the personal information we hold about you, ask us to correct it if it is inaccurate, or request a copy in a usable format (APP 12 and APP 13). Contact us at contact@peakstate.global.

10. Complaints

If you have a privacy concern or complaint, please contact us first at contact@peakstate.global so we can try to resolve it. If you are not satisfied with our response, you can escalate to the OAIC at oaic.gov.au or by phone on 1300 363 992.

11. Children

The Service is intended for business and professional use and is not directed to anyone under 18. We do not knowingly collect personal information from children.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will change the “Last updated” date above and, for material changes, take reasonable steps to notify you.

13. Contact

Questions about your privacy or this Policy? Contact us at contact@peakstate.global. See also our Terms & Conditions.