Privacy Policy
This policy is written in plain English to fit Gumshoe's actual data flows. It is not legal advice and should be reviewed by an Australian privacy professional, particularly the sections on recorded calls and sole-trader PII.
1. Who we are
Gumshoe ("Gumshoe", "we", "us") operates the supplier-verification service at gumshoe.au. We are based in Australia and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you have a privacy question, contact us at privacy@gumshoe.au.
2. What we collect
Account information you give us: name, email address, password (stored hashed), and billing details if you purchase paid checks.
Search and verification data: the business identifiers you search (business names, ABNs, ACNs), and the results and reports generated, which we retain as a timestamped audit trail.
Supplier information from public registers: we draw on data from the Australian Business Register (ABR) and ASIC, and other public sources, to produce verification results. For sole traders, ABN records can contain personal names and addresses — we treat this as personal information.
Technical data: IP address, browser type, and usage logs, for security and to operate the service.
Premium-check data: where you run a paid Phone check, we place a recorded call to the supplier's published number; the recording and its transcript are stored as part of your report. The call includes an audible disclosure that it is recorded.
3. How we use it
To provide supplier-verification results and reports; to maintain your account and audit trail; to process payments for premium checks; to secure and improve the service; to send you service messages and, if you opt in, our newsletter; and to meet legal obligations.
We do not sell your personal information. We do not use your searches to advertise to you.
4. Disclosure
We share information only with: payment processors (to charge for premium checks); infrastructure and communications providers that run the service on our behalf under confidentiality obligations; and authorities where required by law. We do not disclose your search history to third parties for their own purposes.
5. Recorded calls (premium Phone check)
Where you initiate a Phone verification, we make an automated, recorded call to the supplier's publicly listed number to confirm details. The recipient is told at the start of the call that it is being recorded. Recordings and transcripts are kept as part of the verification report and are accessible to the account that ran the check. Recording and use of calls is subject to applicable Australian state/territory laws; you are responsible for using verification calls for legitimate due-diligence purposes only.
6. Data sourcing and attribution
Gumshoe contains data sourced from the Australian Business Register and ASIC, © Commonwealth of Australia, licensed under CC BY 3.0 AU. Gumshoe is not affiliated with or endorsed by the ABR or ASIC. We surface only information that is publicly available, and we rate-limit bulk exposure of sole-trader records.
7. Storage and security
Data is stored on servers we control, with access restricted and traffic encrypted in transit (HTTPS). Paid-lookup artifacts (e.g. call recordings, imagery) are cached with a retention period. No system is perfectly secure, but we take reasonable steps to protect your information.
8. Retention
We keep account and audit-trail data for as long as your account is active and as needed to meet legal, accounting and audit obligations, after which it is deleted or de-identified.
9. Your rights
You may request access to, or correction of, the personal information we hold about you, and you may close your account. To make a request, email privacy@gumshoe.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
10. Changes
We may update this policy; we'll post the new version here with a revised date and, for material changes, notify account holders.