Privacy Policy

Last updated: 5 June 2025

This Privacy Policy describes how InQuiry Letter Review ("we", "us", "our") collects, uses, and protects information when you use our Chrome extension and related services (collectively, the "Service").

We are committed to protecting your privacy and handling any personal or clinical information with care and in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

Account information: When you register, we collect your name and email address. This is used solely to authenticate you and manage your account.

Usage data: We record aggregate token counts (input, output, reasoning) for each AI review you perform. This is used for billing and to display your usage history. We do not record the content of individual letters.

Billing information: Credit top-up payments are processed by Stripe. We receive confirmation of successful payment and the email address used at checkout to credit your account. We do not store card numbers or full payment details — these are handled entirely by Stripe in accordance with PCI-DSS standards.

Letter content: When you click a review button, the text of the currently open letter is transmitted to our server and forwarded to an AI service for processing. We do not store letter content beyond the duration of the request. Letter content is not logged, indexed, or retained.

2. How We Use Information

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. AI Processing and Third-Party Services

Letter content you submit for review is processed by a third-party AI service. By using InQuiry Letter Review, you acknowledge that letter text is transmitted to this service for processing. The AI service is subject to its own data handling policies.

We strongly recommend that you review your obligations under Australian privacy legislation before submitting letters that contain identifying patient information. Where possible, remove or de-identify patient-specific details (name, date of birth, Medicare number) before performing a review.

4. Data Storage and Security

Account data and usage records are stored on servers in Australia. We use HTTPS/TLS encryption for all data in transit. Access to our servers is restricted to authorised personnel only.

Session tokens are stored locally in your browser using Chrome's secure extension storage. They are never transmitted to or accessible by the web pages you visit.

5. Data Retention

Account information and transaction records are retained for as long as your account remains active and for a reasonable period thereafter for billing and audit purposes. You may request deletion of your account and associated records at any time by contacting us.

Letter content is not retained beyond the duration of the AI processing request (typically under 60 seconds).

6. Your Rights

Under the Australian Privacy Act, you have the right to:

To exercise any of these rights, contact us at inquiryreviewai@gmail.com.

7. Cookies

The InQuiry Letter Review website (this page) does not use tracking cookies or third-party analytics. The Chrome extension uses Chrome's built-in secure local storage for session tokens — this is separate from browser cookies and not accessible to websites.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

9. Contact

For privacy-related enquiries or complaints, please contact:

InQuiry Letter Review
Email: inquiryreviewai@gmail.com

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.