Privacy policy

How Atuny handles your information

Effective 25 October 2026 · Echelon One Pty Ltd · privacy@atuny.com

The short version

We collect what the answer needs.Your email, your question, the facts and documents you give us, and payment and security records.
The AI sees your matter, not your identity.Names, addresses, contact details and ID numbers are replaced with placeholders on our own server before anything reaches an AI model, and put back in your opinion. Those providers are mainly in the United States, and we only use ones that do not collect or store your data under their published policies.
Files are read, never stored.Your opinions and chats stay in your account until you delete them. You can delete any of them, or your whole account, yourself.
We do not sell your information.No advertising, no data brokers, no marketing lists. Questions go to privacy@atuny.com.

1. Who we are

Atuny is a product of Echelon One Pty Ltd (ABN 78 618 159 354), a company based in Adelaide, South Australia. In this policy, “we” and “us” mean Echelon One. We are responsible for the personal information collected through atuny.com.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. For anything about your privacy, email privacy@atuny.com or use the request form at the end of this page.

2. What we collect

We collect information directly from you when you use Atuny, and a small amount automatically from your device.

InformationWhen we collect it
Your email addressWhen you sign in or buy something.
Your name (optional)If you give it to us, or if Google shares it when you sign in with Google.
Your questions, the facts and context you add, follow-up questions and chat messagesWhen you type or dictate them.
Documents you uploadWhen you add them to an opinion. We read them on our own server to write the opinion and do not keep the file (see section 7). Photos and scanned pages are read by text-recognition software on our server, not by an AI model. We keep the file names with the opinion.
The answers and opinions we write for you, and the sources they citeWhen we write them.
Your IP address and browser details (user agent)Automatically, for security, to keep you signed in, and to apply rate limits.
Stripe customer and payment reference numbers, and what you boughtWhen you pay. Your card details are entered with Stripe and held by Stripe, not by us.
Branding you add on Atuny Pro: your firm or business name, logo, colour, contact line and any “prepared by” nameWhen you save it on your account page. It is printed on your opinions and kept until you remove it or close your account.
Usage and cost records, such as how many opinions you have used this month and what each one cost us to produceAutomatically, as you use Atuny.

You do not have to give us anything you do not want to. If you leave out facts, the answer may be less useful, or wrong. Without an email address we cannot create an account, sell you an opinion or save your answers.

You can ask a short question without an account. If you do, we still record the question, and your IP address and browser details, for security and rate limiting.

Dictation. If you use the dictate button, your browser’s own speech recognition turns your voice into text. Audio does not come to us, but your browser may send it to its maker to transcribe (Google, in Chrome; Apple, in Safari) under that company’s privacy terms. If you would rather it did not, type instead.

3. Sensitive information and information about other people

Legal problems are personal. Your question may include sensitive information, for example about your health, a criminal record, your religion, your sexual orientation, your family or a dispute. The law gives this information extra protection.

Sensitive information about you. We only use sensitive information you choose to give us, and only to answer your question. Each form that sends a question tells you that what you write goes to AI providers to produce your answer, and that by sending it you agree to us using any sensitive information about yourself that you include, only for that purpose. If you would rather not, leave it out or describe it in general terms. You can delete it later (section 12).

Information about other people. Your question may mention other people, such as a landlord, an employer or a family member, and sometimes sensitive information about them. Please include only what the answer needs and, where you can, use roles (“my landlord”) rather than names. We collect and use information about other people only because it is reasonably necessary to give you information about the legal claim or dispute you describe, and for no other purpose.

If someone has mentioned you. If you think you have been named in another person’s question and want to know what we hold about you, or want it corrected, contact us. We will help where we can identify the information, subject to the other person’s privacy and the law.

4. Why we use it

We use your information to:

  • answer your questions, and write, check and deliver your opinions, follow-ups and chat answers;
  • run your account, sign you in, and keep your opinions available to you;
  • take payment and keep the financial records the law requires;
  • apply fair-use and rate limits, and protect Atuny and its users from fraud, abuse and attack;
  • deal with support requests, citation reports, refund requests and complaints;
  • understand how Atuny is used and what it costs to run, so we can improve it; and
  • comply with the law, including responding to a valid legal demand.

Who at Echelon One can see it. A small number of authorised people at Echelon One can see the content of questions and opinions. They look at it only when that is needed to fix a fault, investigate misuse, respond to you (for example when you report a citation), or check the quality of answers, and they must keep it confidential.

We do not use your questions, documents or opinions to train AI models, and we do not sell your information or share it for anyone’s marketing.

5. Who we share it with

What the AI models receive. Before your question, facts, documents, follow-ups or chat messages go to an AI model, our own server replaces names, street addresses, email addresses, phone numbers and identity and account numbers with placeholders such as “[Person A]” or “[Address 1]”. Dates, amounts, suburbs, states and roles stay, because the legal answer depends on them. When the answer comes back, our server puts your details back in. A photo with little readable text is not sent to any AI model at all. This is done automatically by software, so it can occasionally miss a detail; if something is especially sensitive, describe it in general terms.

We use a small number of service providers to run Atuny. They handle your information on our behalf, and only to provide their service to us.

ProviderWhat they doWhat they receiveWhere
OpenRouterRoutes our requests to AI model providersYour question, facts, the text of your documents, follow-ups and chat messages, with names, addresses, contact details and ID numbers replaced by placeholdersUnited States
AI model providers: Anthropic, OpenAI and Google, including their models run on cloud platforms such as Amazon Web ServicesWrite, argue and check answers and opinionsThe same, as passed on by OpenRouterMainly the United States, and other countries
SupabaseOur databaseYour account, questions, opinions, follow-ups, chats, usage records and payment referencesSydney, Australia
Fly.ioHosts the Atuny application, including the search that finds the law relevant to your question, the reading of your documents and the replacement of your details with placeholdersEverything, as it passes through the applicationSydney, Australia
CloudflareDelivers the website, protects it from attack and applies rate limitsYour IP address, browser details and the traffic between you and AtunyGlobal network, including the United States
StripePaymentsYour email, card details (entered directly with Stripe) and what you boughtUnited States and other countries where Stripe operates
ResendSends sign-in links, opinion notices and replies to privacy requestsYour email address and the content of those emailsUnited States
Google (only if you choose Google sign-in)Sign-inGoogle confirms your email and name to us. We do not receive your Google passwordUnited States and other countries

We set every AI request so it is only routed to providers that do not collect or store your data under their published policies.

We may also disclose information where the law requires or authorises it (for example a court order or subpoena), to our professional advisers under confidentiality, or to a business that takes over Atuny, which would have to handle it under this policy.

6. Information sent overseas

Some of your information is sent outside Australia, mainly to the United States, where OpenRouter, the AI model providers, Resend, and parts of Stripe, Cloudflare and Google operate. Some AI providers and Cloudflare’s network operate in other countries too, so information may pass through them.

Before we send information overseas, we take reasonable steps to make sure the recipient handles it in a way consistent with the Australian Privacy Principles, including through their contractual data protection terms. Under Australian law we remain accountable for how these providers handle your information. We do not ask you to give up that protection.

7. How long we keep it

InformationHow long
Uploaded filesNot stored. We read the file on our server to write your opinion, and any temporary copy is deleted straight away. The file name, and anything the opinion quotes from your document, stay with the opinion.
The list matching placeholders to your detailsKept with the opinion or chat it belongs to, so follow-ups use the same placeholders, and deleted with it.
Questions, opinions, follow-ups and chats in your accountUntil you delete them, or close your account. Follow-ups on an opinion close after 30 days, but the opinion itself stays.
Short questions and their answers in our usage logsThe text is removed after 90 days.
IP address and browser detailsRemoved from usage logs after 90 days. Sign-in links are deleted about 8 days after they are sent, and expired sign-in sessions 30 days after they end.
Usage and cost recordsLinked to your account while it is open, with any question text removed after 90 days. When you close your account, they keep nothing that identifies you and remain only as anonymous cost records.
Monthly usage counts (for fair use)13 months.
Payment recordsStripe keeps payment records under its own legal obligations, and we keep the financial records that tax law requires (generally five years), even after you close your account.
Hosting and network logsKept for a short period by Fly.io and Cloudflare for operations and security. Sign-in log lines can include your email address.

When you delete an item or close your account, we delete it from our live systems. Copies may remain in encrypted database backups for a limited period, until those backups are replaced.

8. How we protect it

We take reasonable technical and organisational steps to protect your information from misuse, interference, loss and unauthorised access. They include encryption in transit and at rest, access controls on our database, read-only access for anyone who does not need to change data, sign-in without passwords (by emailed link or Google), and limiting who on our team can see account data. No system is perfectly secure.

If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the law requires.

9. Emails we send

We send only the emails you need to use Atuny: sign-in links, notices that your opinion is ready, replies to your requests, and notices of important changes to your account, our prices or our terms. Stripe may also send you a payment receipt.

We do not send marketing emails. If that ever changes, we will ask for your agreement first, and every marketing email will identify us and include a working unsubscribe link.

10. Automated processing

Atuny’s answers and opinions are written by computer programs (AI models) using the information you give us. They are information for you to consider. They are not decisions about you.

Our systems also automatically apply rate limits and monthly fair-use limits, using your usage records and IP address. When a limit is reached, further questions are paused for a time, or until the next month, and a purchased opinion still works. Stripe may automatically screen payments for fraud. We do not suspend or close accounts automatically. Any decision to do that is made by a person.

11. Cookies and browser storage

We use two cookies, both needed for Atuny to work: one keeps you signed in (for up to 14 days of inactivity), and one protects Google sign-in for the 30 minutes it takes. We do not use analytics or advertising cookies, and there are no third-party trackers on Atuny.

Atuny also stores a few things in your own browser: your region, your homepage choice between individual and business, a random anonymous identifier for free questions, and a draft of your question so it survives signing in or paying. These stay on your device. You can clear them in your browser settings at any time.

12. Your choices and rights

You can see your questions, opinions and chats in your account at any time, and delete any of them there. You can close your account, and delete everything in it, from your account page. Closing your account also cancels any monthly plan.

You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@atuny.com or using the request form below. We will need to confirm it is you, usually by asking you to reply from the email address on your account. We will respond within 30 days and we do not charge for requests. If we cannot do what you ask, we will tell you why in writing and how to complain.

13. Questions and complaints

If you have a question or a complaint about how we handle your information, email privacy@atuny.com or use the request form. We will acknowledge it within 5 business days, look into it, and give you a written answer within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

14. The United Kingdom

Atuny is not currently offered to people in the United Kingdom, the Isle of Man, Jersey or Guernsey. Visitors from those places can read about Atuny, but cannot ask questions, open an account or buy an opinion. If we offer Atuny there in future, we will update this policy first, including the details UK data protection law requires.

If you are in the UK and have used Atuny, or think we hold information about you, contact privacy@atuny.com or use the request form. We will handle your request under this policy, and you can also complain to the UK regulator, the Information Commission, at ico.org.uk.

15. Other countries

Atuny is also used in New Zealand, Singapore, Canada, the British Virgin Islands, the Cayman Islands and the Abu Dhabi Global Market. We apply this policy to everyone, wherever they are. If the law where you live gives you further rights, you can use them by contacting us, and you can complain to your local privacy regulator.

16. Children

Atuny is for people aged 18 or over. We do not knowingly collect information from children. If you think a child has used Atuny, contact us and we will delete their information.

17. Changes to this policy

We will update this policy when the way we handle information changes. The date at the top shows the current version. If a change is significant, we will email account holders before it takes effect. You can ask for a copy of this policy in another form by emailing us.

Make a privacy request

Ask for a copy of your information, a correction or a deletion, raise a complaint, or ask a question. It goes to privacy@atuny.com, and you will get an emailed acknowledgement with a reference number.