Privacy Policy

This tool is operated by Cordelle Reid. This Privacy Policy explains what information the TISFD Gap Analysis tool collects, how it is used, and how long it is kept. The tool is designed to be usable without an account, and to keep your data under your control. Where this policy says "we", it means Cordelle Reid.

You can complete an entire assessment without creating an account. When you use the tool as a guest, your assessment — including your scores, evidence, gaps and notes — is stored only in your own web browser (in your browser's local storage). Your assessment is not stored on our servers. If you use AI Recommendations, the text of that criterion is sent to our AI provider to generate the response and is not stored by us.

Because guest data lives only in your browser, clearing your browser data, using private browsing, or switching to a different device or browser will remove or hide that assessment.

When you create an account, we store the information needed to provide the service: your name and email address, a securely hashed password, and the content of the assessments you save (organisation name, scores, evidence, gaps, notes and any generated action items and reports).

Creating an account also lets you move an assessment you started as a guest into your account so it is saved across devices.

When you use the AI Recommendations feature, the text of the criterion you are working on is sent to our AI provider, Abacus.AI, and processed by the gpt-5.4-mini model to generate guidance. Your input is used only to produce your response.

Abacus.AI states in its published privacy policy that customer data is not used to train its AI models. You can read that policy at https://abacus.ai/privacy-policy.

Accounts and saved assessments are stored in a database hosted on Abacus.AI's cloud infrastructure in the United States. When you use the AI Recommendations feature, those requests are also processed by Abacus.AI in the United States. If you access the tool from outside the United States, your data will be transferred to and processed there.

Guest assessments are stored only in your browser and are never sent to our servers unless you create an account. Once you create an account, your assessments are retained until you delete them or delete your account, after which they are removed from our systems.

To request deletion, access or correction of your data, use the form below. Signed-in users can also delete assessments and their account in Account settings. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).