Legal

Privacy Policy

Last updated September 2026

Draft — pending legal review. This document is a working draft for review with counsel and is not yet a binding agreement. Bracketed items [like this] are placeholders to be confirmed.

This Privacy Policy explains how Rule Five Ventures Pty Ltd (ABN [ABN]), trading as TillerHQ (“TillerHQ”, “we”, “us”), handles personal information in connection with the TillerHQ platform at tillerhq.io. We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Information we collect

Account and identity details you provide (name, email, firm/business details) via our authentication provider.
Financial and bookkeeping data you connect or upload (e.g. transactions, invoices and documents from Xero or a connected bank feed).
Usage and device information generated as you use the platform.

How we use it

We use personal information to provide and operate the platform, run the agentic bookkeeping workflow, support you, meet legal and compliance obligations, and improve the service. We do not sell personal information.

Ledgers and connected services

Where you connect Xero, the connected ledger remains the source of truth. We read from it and propose changes; we do not write back to your ledger without a recorded approval. We use sub-processors to deliver the service, including Clerk (authentication), Supabase (database and document storage), Vercel (hosting and compute), Anthropic (AI-assisted categorisation — see below) and Resend (email delivery). We require each sub-processor to protect your information consistently with this policy.

AI processing

TillerHQ uses artificial intelligence to categorise transactions and assist the bookkeeping workflow. To do this, relevant transaction data is sent to our AI sub-processor, Anthropic, for real-time analysis (inference) on a zero-retention basis: Anthropic does not retain that data or use it to train its models. We do not use your data to train, fine-tune, adapt or enhance any AI model. A person reviews and is accountable for outcomes before they affect your books, and nothing is written back to a connected ledger without a recorded approval.

Storage and location

Platform compute is hosted in Australia (Sydney). Some sub-processors may store or process data in other locations; where they do, we take reasonable steps to ensure appropriate protections consistent with the APPs.

Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access. Every agent action, exception, review and approval is recorded in an audit trail.

Access, correction and complaints

You may request access to, or correction of, your personal information, or make a privacy complaint, by contacting us at success@tillerhq.io. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

Contact

Rule Five Ventures Pty Ltd — success@tillerhq.io.