Privacy Policy - Fileright.com.au

FileRight.com.au Privacy Policy

Effective Date: September 02, 2026
Last Updated: September 02, 2026

This Privacy Policy explains how File Right Inc., its parents, subsidiaries, affiliates, successors, and assigns (“FileRight,” “Company,” “we,” “us,” or “our”) collects, uses, discloses, stores, protects, transfers, analyzes, and otherwise handles personal information in connection with www.fileright.com.au and any related website, application, software, account, form-preparation workflow, artificial intelligence feature, automation, customer service function, document-preparation service, electronic delivery service, communication, or other service operated by FileRight (collectively, the “Services”).

This Privacy Policy is intended to comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (“APPs”), to the extent they apply to FileRight.

This Privacy Policy should be read together with our Terms of Use.

By accessing or using the Services, creating an account, purchasing a Service, contacting us, submitting information, or otherwise interacting with FileRight, you acknowledge that we may handle your personal information as described in this Privacy Policy and as permitted by applicable law.

If you do not agree with this Privacy Policy, do not access or use the Services.

1. Important Notices

FileRight is a private company.

FileRight is not the Australian Department of Home Affairs, the Administrative Review Tribunal, the Australian Border Force, the Australian Government, any state or territory government, or any other government agency.

FileRight is not a law firm, Australian legal practitioner, registered migration agent, or provider of immigration assistance.

FileRight does not provide legal advice, immigration advice, migration advice, immigration assistance, citizenship advice, case strategy, eligibility determinations, document sufficiency review, or representation before any government authority.

Because the Services help users prepare immigration, visa, citizenship, sponsorship, travel, status, or other government-related materials, the personal information we collect may include detailed, sensitive, immigration-related, identity-related, family-related, financial, travel, health, character, criminal history, or government-related information.

We use this information to provide, operate, support, improve, market, secure, analyze, and develop the Services, including through customer service, automation, analytics, artificial intelligence, fraud prevention, product development, and marketing activities, as described in this Privacy Policy.

2. Personal Information We Collect

“Personal information” has the meaning given in the Privacy Act 1988 (Cth). In general, it means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether it is recorded in a material form or not.

The types of personal information we may collect include:

Name;
Email address;
Phone number;
Mailing address;
Residential address;
Billing address;
Date of birth;
Gender or sex, where required for a form or provided by you;
Country of birth;
Nationality or citizenship information;
Passport, visa, permit, travel document, or identity document information;
Visa, migration, immigration, citizenship, sponsorship, or travel history;
Employment, education, income, and financial information;
Family, household, marital, relationship, dependent, and sponsorship information;
Health, character, criminal history, police check, or biometric-related information where required for a form or Service;
Government account, portal, ImmiAccount, case, receipt, reference, or application information you provide;
Application answers, questionnaire responses, and form responses;
Supporting document information;
Documents, files, images, or records you upload, submit, or provide;
Customer service communications, support requests, chat transcripts, emails, call recordings, notes, survey responses, complaints, and feedback;
Account login, authentication, password reset, and security information;
Transaction, billing, and payment-related information;
Device, browser, IP address, cookie, pixel, analytics, advertising, and usage information;
Approximate location derived from IP address or information you provide;
Marketing preferences, consent records, unsubscribe records, and communication history;
Information you provide in response to promotions, surveys, forms, advertisements, emails, SMS messages, calls, or customer service interactions;
Inferences, segments, analytics, risk indicators, fraud indicators, and derived information generated from your use of the Services;
Any other information you provide to us or that is generated through your use of the Services.

We may also collect information that is not personal information, including de-identified, aggregated, statistical, inferred, or derived data. Where such information does not identify you and cannot reasonably be used to identify you, we may use and disclose it for lawful business purposes as described in this Privacy Policy.

3. Sensitive Information

Some information you provide may be “sensitive information” under Australian privacy law.

Sensitive information may include information or an opinion about racial or ethnic origin, health, genetic or biometric information, religious beliefs, political opinions, criminal record, union membership, sexual orientation or practices, or other sensitive categories.

Because immigration, visa, citizenship, sponsorship, and government forms may ask questions about health, character, criminal history, nationality, family relationships, biometric requirements, religion, political history, travel history, or similar matters, the Services may involve collection of sensitive information where you choose to provide it or where it is necessary for the Service you request.

We collect sensitive information only where permitted by law, including where:

You consent to the collection;
The information is reasonably necessary for one or more of our functions or activities;
The information is necessary to provide the Services you request;
The collection is required or authorised by law;
Another exception applies under applicable law.

By providing sensitive information through the Services, you consent to our collection, use, disclosure, storage, transfer, analysis, and handling of that information as described in this Privacy Policy and as permitted by applicable law.

4. How We Collect Personal Information

We may collect personal information directly from you when you:

Visit or use the Website;
Create an account;
Purchase a Service;
Complete questionnaires, workflows, forms, or application-preparation steps;
Upload, submit, or provide documents;
Ask us to prepare, generate, print, download, deliver, file, upload, or support application materials;
Contact customer service or technical support;
Use chat, chatbot, AI-assisted, automated, or self-service support features;
Participate in surveys, promotions, feedback requests, or reviews;
Subscribe to, opt in to, or interact with marketing communications;
Communicate with us by email, phone, SMS, chat, web form, mail, or other channels;
Otherwise provide information to us.

We may also collect personal information automatically when you use the Services, including through cookies, pixels, web beacons, log files, analytics tools, advertising technologies, session recording technologies, device identifiers, and similar technologies.

We may collect personal information from third parties where permitted by law, including:

Payment processors;
Identity, fraud prevention, security, analytics, marketing, advertising, attribution, or technology providers;
Customer service, CRM, email, SMS, chat, phone, and support platforms;
Hosting, cloud, infrastructure, and data storage providers;
Delivery, courier, print, mail, translation, or professional service providers;
Affiliate, parent, subsidiary, or related companies;
Government websites or portals, where you authorise or direct us to access or use information;
Referral partners, advertising partners, and business partners;
Publicly available sources;
Other third parties where you have consented or where collection is permitted by law.

Where reasonable and practicable, we collect personal information directly from you.

5. Why We Collect, Use, and Disclose Personal Information

Subject to applicable law, we may collect, use, disclose, retain, transfer, analyze, combine, and otherwise handle personal information for purposes including:

Providing, operating, maintaining, and securing the Services;
Creating and administering your account;
Verifying your identity, account, transaction, or support request;
Preparing, generating, storing, printing, downloading, delivering, filing, uploading, or supporting application materials;
Providing administrative and technical support related to application materials;
Providing customer service and technical support;
Responding to your questions, requests, complaints, refund requests, and support needs;
Processing payments, refunds, credits, chargebacks, disputes, and billing matters;
Preventing payment fraud and account misuse;
Delivering purchased products or Services;
Sending account, transactional, operational, legal, security, product, support, and service-related communications;
Sending marketing, promotional, educational, reminder, cross-sell, upsell, re-engagement, product-related, and commercial communications where permitted by law;
Personalising or improving your experience;
Measuring marketing performance, attribution, conversion, engagement, retention, and campaign effectiveness;
Creating audiences, segments, models, analytics, and inferences where permitted by law;
Improving existing Services and developing new products, services, features, workflows, automation, and content;
Testing, training, supporting, and improving AI-assisted, automated, machine-learning, rules-based, chatbot, and analytics systems;
Conducting research, reporting, forecasting, business intelligence, and internal analytics;
Detecting, preventing, investigating, and responding to fraud, abuse, chargeback abuse, security risks, technical issues, unlawful activity, or violations of our Terms of Use;
Complying with laws, regulations, court orders, subpoenas, government requests, legal processes, regulatory obligations, and recordkeeping requirements;
Enforcing our Terms of Use and other policies;
Protecting our rights, property, systems, users, employees, contractors, service providers, and business;
Auditing, legal defence, insurance, recordkeeping, compliance, risk management, and corporate governance;
Facilitating a merger, acquisition, financing, restructuring, sale of assets, corporate transaction, insolvency process, or business transfer;
Any other purpose disclosed to you at the time of collection or permitted by law.

6. Customer Service, Support Access, and Communications

If you contact customer service or technical support, we may collect, use, disclose, retain, and analyze information relating to that interaction, including:

Your name, contact information, and account information;
Support tickets;
Emails, chats, chatbot interactions, SMS messages, call recordings, transcripts, notes, and related metadata;
Screenshots, documents, forms, or application materials you provide;
Device, browser, system, and troubleshooting information;
Feedback, ratings, complaints, or survey responses.

If you ask us to help access, generate, troubleshoot, review formatting, print, download, deliver, file, upload, or support your application materials, you authorise FileRight personnel, contractors, and service providers to access your account and view information reasonably necessary to provide the requested support.

If you request remote support, screen-sharing support, or similar technical assistance, we may be able to view your device, screen, browser, account, application data, or related information for the limited purpose of providing the support you request. You are responsible for closing unrelated documents, tabs, files, accounts, or windows before starting remote support.

We may use customer service communications, chat transcripts, call recordings, support tickets, feedback, and related interaction data for quality assurance, training, fraud prevention, security, analytics, service improvement, AI-assisted support improvement, and other lawful business purposes, subject to applicable law.

Customer service representatives do not provide legal advice, immigration advice, migration advice, immigration assistance, citizenship advice, case strategy, eligibility determinations, document sufficiency review, or representation before any government authority.

7. AI, Automation, Analytics, and Automated Outputs

Subject to applicable law and this Privacy Policy, FileRight may use artificial intelligence, machine learning, automation, rules-based systems, algorithms, large language models, chatbots, automated workflows, analytics systems, and similar technologies to provide, support, secure, analyze, test, improve, and develop the Services.

These technologies may be used to:

Guide users through form-preparation workflows;
Identify potentially incomplete answers or missing information;
Generate informational prompts, reminders, explanations, or support responses;
Provide automated or AI-assisted customer service;
Improve customer service and technical support;
Support fraud prevention, risk management, quality control, security, analytics, testing, and product development;
Improve automated tools, workflows, models, and user experience;
Generate inferred, derived, aggregated, statistical, or de-identified data;
Support marketing measurement, segmentation, attribution, personalisation, and audience development, where permitted by law.

Outputs from AI, automation, software tools, or rules-based systems may be probabilistic, automated, incomplete, inaccurate, or generated without human review.

AI-generated, automated, or rules-based outputs do not constitute legal advice, immigration advice, migration advice, immigration assistance, citizenship advice, authorised representation, legal opinions, eligibility determinations, case strategy, document sufficiency review, or guarantees of any government outcome.

You are responsible for reviewing all outputs before relying on them, signing them, filing them, mailing them, uploading them, submitting them, or using them in any government process.

We do not represent that any AI, automation, or software output will be accurate, complete, current, suitable for your circumstances, or accepted by any government authority.

8. Automated Decision-Making Transparency

We may use automated or semi-automated systems to assist with Service delivery, support, security, fraud prevention, product recommendations, workflow routing, application-preparation prompts, customer service prioritisation, marketing segmentation, personalisation, and account or product experience.

These systems may use personal information such as:

Account information;
Contact information;
Form answers;
Application workflow responses;
Product selections;
Purchase history;
Support history;
Device, browser, cookie, and usage data;
Marketing interaction data;
Risk, fraud, payment, or security signals;
Inferred, derived, segment, or analytical information.

These systems may help us make or support decisions such as:

Which workflow, product, prompt, message, reminder, explanation, or offer to show you;
Whether information appears incomplete, inconsistent, or missing;
Whether to route you to customer service, technical support, or another workflow;
Whether to restrict, suspend, or review activity for fraud, security, compliance, payment, risk-management, or abuse concerns;
Whether and how to personalise marketing, reminders, support, or service communications;
How to improve, test, or optimise the Services.

Automated systems are not used to make government decisions. Government agencies make their own decisions independently. FileRight does not control, influence, or guarantee any government outcome.

Where required by applicable law, including APP 1 requirements relating to automated decision-making, we will provide information in this Privacy Policy or through other notices about the types of personal information used and the types of decisions made or supported by automated systems.

9. De-Identified, Aggregated, Inferred, and Derived Data

Subject to applicable law, FileRight may create, use, retain, analyze, disclose, and commercialise de-identified, aggregated, statistical, inferred, or derived data for lawful business purposes, including:

Analytics;
Reporting;
Product development;
Automation;
Quality control;
Fraud prevention;
Security;
Marketing measurement;
Attribution;
Audience development;
Service optimisation;
Model, workflow, and system improvement;
Business intelligence;
Forecasting.

We may combine information collected through the Services with other online or offline information we lawfully collect or receive.

Where information has been de-identified and is no longer personal information under applicable law, we may use and disclose it for lawful business purposes without further notice to you.

We will take reasonable steps designed to avoid re-identifying de-identified information except where permitted by law, including for testing, security, validation, legal compliance, or to confirm that de-identification is effective.

10. Cookies, Pixels, Web Beacons, Analytics, and Tracking Technologies

We and our service providers may use cookies, pixels, web beacons, tags, log files, SDKs, session replay tools, analytics tools, advertising technologies, and similar technologies to collect information about your device, browser, usage, interactions, and preferences.

These technologies may be used to:

Operate and secure the Website;
Keep you logged in;
Remember preferences;
Diagnose technical problems;
Understand how users use the Services;
Measure performance and conversion;
Support advertising, retargeting, attribution, audience development, and marketing analytics;
Personalise content, prompts, offers, reminders, or user experience;
Detect fraud, abuse, chargeback abuse, or security risks;
Improve products, workflows, and Services.

Information collected may include:

IP address;
Device identifiers;
Browser type;
Operating system;
Referring and exit pages;
Pages viewed;
Clicks, scrolls, keystrokes, and interactions;
Date and time stamps;
Session information;
Approximate location derived from IP address;
Advertising identifiers;
Cookie identifiers;
Other usage and analytics data.

You can control cookies through your browser settings. If you block or delete cookies, some parts of the Services may not function properly.

Where required by applicable law, we will obtain consent for certain cookies, tracking technologies, or marketing technologies.

11. Direct Marketing, Email, SMS, Calls, and Advertising

Subject to applicable law, we may use and disclose personal information for direct marketing, promotional, educational, reminder, cross-sell, upsell, re-engagement, product-related, and commercial communications about FileRight services and related offerings.

We may contact you by:

Email;
SMS or text message;
Phone;
Direct mail;
In-app or account messages;
Push notifications, where applicable;
Online advertising and retargeting;
Other electronic or digital channels.

Where required, we will rely on your consent, your request, your inquiry, your transaction, your account activity, an existing business relationship, or another lawful basis.

Commercial electronic messages will include required sender identification and an unsubscribe mechanism where required by the Spam Act 2003 (Cth) and other applicable laws.

You may opt out of marketing communications by using the unsubscribe link or instructions in the message, replying “STOP” where applicable, changing your preferences where available, or contacting us.

Opting out of marketing communications will not stop non-marketing transactional, operational, legal, security, account, purchase, customer service, policy, or service-related communications.

We may use advertising partners and platforms to deliver, measure, personalise, or improve advertising. These partners may use cookies, pixels, device identifiers, hashed contact information, or similar technologies, subject to their own privacy practices and applicable law.

If we use or disclose sensitive information for direct marketing, we will do so only with consent or where otherwise permitted by law.

12. When We Disclose Personal Information

Subject to applicable law, we may disclose personal information to:

Our parents, subsidiaries, affiliates, and related companies;
Employees, contractors, and personnel who need access to perform their duties;
Customer service and technical support providers;
Hosting, cloud, data storage, infrastructure, and security providers;
Payment processors and billing providers;
Fraud prevention, risk, identity, payment, and compliance providers;
Analytics, advertising, marketing, attribution, retargeting, and audience development providers;
Email, SMS, phone, chat, CRM, and communication providers;
Print, mail, courier, delivery, translation, or document-preparation providers;
AI, automation, machine-learning, chatbot, workflow, quality assurance, and product development providers;
Professional advisers, including lawyers, auditors, accountants, insurers, and consultants;
Government agencies, courts, tribunals, law enforcement, regulators, or other authorities where required or permitted by law;
Third-party professional providers, including Australian legal practitioners or registered migration agents, where you request or authorise such services;
Business partners, referral partners, or service providers where you request a product or service or where disclosure is permitted by law;
Buyers, investors, lenders, successors, or other parties in connection with a merger, acquisition, financing, restructuring, sale of assets, insolvency process, or business transfer;
Other third parties where you consent or where disclosure is permitted by law.

We do not sell personal information in the ordinary sense of exchanging personal information for money. However, we may disclose personal information to service providers, advertising partners, analytics providers, affiliates, and business partners for the purposes described in this Privacy Policy, including marketing, attribution, audience development, analytics, advertising, service delivery, service improvement, and product development, where permitted by law.

If personal information becomes part of a government filing, portal submission, court filing, public record, or government process, that information may be handled by the applicable government authority or third party under its own laws, rules, policies, and privacy practices.

13. Third-Party Services and Links

The Services may contain links to third-party websites, platforms, government websites, payment pages, social media features, advertising networks, or other services that we do not control.

This Privacy Policy does not apply to third-party websites, platforms, or services.

Your use of third-party services is governed by the applicable third party’s terms and privacy policy. We encourage you to review those policies before providing information to third parties.

14. Overseas Disclosure and Storage

FileRight may collect, process, store, access, transfer, and disclose personal information outside Australia.

Countries where personal information may be stored, processed, accessed, or disclosed include:

United States;
Canada;
United Kingdom;
European Economic Area;
Isle of Man;
India;
Philippines;
Australia;
Other countries where FileRight, its affiliates, service providers, contractors, technology providers, or business partners operate.

Some overseas recipients may not be subject to privacy laws that provide the same level of protection as Australian law.

Where required by applicable law, we will take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles or that another exception applies.

By using the Services or providing personal information, you acknowledge that your information may be transferred, stored, accessed, processed, or disclosed outside Australia as described in this Privacy Policy.

15. Security

We use administrative, technical, physical, and organisational safeguards designed to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

These safeguards may include:

Access controls;
Encryption in transit where appropriate;
Secure account authentication;
Monitoring and logging;
Vendor security review;
Personnel access restrictions;
Data backup and recovery processes;
Internal policies and training;
Fraud, abuse, and security detection tools.

No method of transmission, storage, website operation, or electronic communication is completely secure. We cannot guarantee that information will never be accessed, used, disclosed, altered, lost, or destroyed without authorisation.

You are responsible for keeping your login credentials confidential and for using secure devices, networks, and communication methods.

16. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

Provide and support the Services;
Maintain your account;
Prepare, store, and deliver application materials;
Provide customer service and technical support;
Comply with legal, tax, accounting, regulatory, and recordkeeping obligations;
Resolve disputes;
Enforce agreements;
Prevent fraud, abuse, chargeback abuse, and security incidents;
Defend legal claims;
Support business operations, analytics, product improvement, and reporting.

We may retain completed and finalised forms, application materials, account records, transaction records, support records, consent records, and related materials for a period reasonably necessary for business, legal, compliance, fraud prevention, dispute resolution, tax, accounting, audit, recordkeeping, service, or operational purposes, unless a longer or shorter period is required by applicable law.

We may de-identify, aggregate, archive, delete, or securely destroy personal information when it is no longer reasonably needed, subject to applicable law and legitimate business needs.

17. Accessing and Correcting Your Personal Information

You may request access to personal information we hold about you, subject to exceptions under applicable law.

You may also request that we correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

You may be able to update certain account information directly through your account.

To request access or correction, please contact us using the contact information provided at the end of this Privacy Policy.

We may need to verify your identity before responding to your request. We will respond within a reasonable period as required by applicable law.

In some circumstances, we may refuse access or correction where permitted by law. If we refuse your request, we will provide reasons where required by law.

18. Marketing Choices

You may opt out of marketing communications at any time by:

Using the unsubscribe link or instructions in an email;
Replying “STOP” to an SMS where applicable;
Updating your preferences where available;
Contacting us.

We will take reasonable steps to process opt-out requests as required by applicable law.

Even if you opt out of marketing communications, we may continue to send transactional, operational, legal, security, account, purchase, customer service, policy, or service-related communications.

If you have consented to receive marketing from a third party, or if your information has been disclosed to a third party in accordance with this Privacy Policy, you may need to contact that third party directly to manage your marketing preferences with them.

19. Children

The Services are intended for users who are at least 18 years old.

We do not knowingly collect personal information directly from individuals under 18 for the purpose of creating an account or purchasing Services.

If we become aware that we have collected personal information from a person under 18 without appropriate authorisation, we will take reasonable steps to delete it, unless retention is required or permitted by law.

If you provide information about a child, dependent, family member, beneficiary, sponsor, household member, or other person as part of an application or Service, you represent that you have authority to provide that information and consent to its handling as described in this Privacy Policy.

20. Quality of Personal Information

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up to date, complete, relevant, and not misleading, having regard to the purpose for which it is used or disclosed.

However, the Services rely heavily on information you provide. You are responsible for ensuring that the information you enter, upload, review, sign, file, mail, submit, or otherwise use is accurate, current, complete, and not misleading.

If you believe information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us or update your account information where available.

21. Privacy Complaints

If you believe we have breached this Privacy Policy, the Australian Privacy Principles, or applicable privacy law, you may contact us using the contact information below.

Please include your name, contact details, and a description of your concern.

We will review your complaint and respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner or another applicable regulator.

22. Changes to This Privacy Policy

We may modify, alter, or update this Privacy Policy from time to time by posting an updated version on the Website.

The updated Privacy Policy will become effective on the date stated in the updated policy, unless otherwise required by applicable law.

Your continued use of the Services after the updated Privacy Policy becomes effective means that you acknowledge the updated policy.

If we make material changes to how we handle personal information, we will provide notice where required by applicable law.

23. Contact Us

If you have questions about this Privacy Policy, want to request access or correction, wish to make a complaint, or want to exercise a privacy choice,
please contact us through the contact information provided on the Website.

Last Updated: September 02, 2026