Privacy
Policy.

This Privacy Policy explains how Apter collects, uses, stores, shares, and deletes personal information. It covers the Apter website, course registrations and enquiries, award applications, our email communications, and the Apter learning platform at learn.apter.au, including its AI-assisted features.

Apter is operated by APTER PTY LTD, ABN 31 693 469 368. In this policy, “Apter”, “we”, “us”, and “our” refer to APTER PTY LTD.

This policy should be read together with our Terms of Service.

1. What we collect

What we hold depends on how you engage with us.

When you enquire or register for a course

• your name, organisation, role, and contact details;
• billing details, purchase order references, and invoice details;
• dietary requirements and accessibility needs, where you provide them;
• course preferences, delivery mode, and attendance;
• the content of your enquiries and our correspondence with you.

Where an organisation registers someone else, we receive that participant's details from the person making the booking.

When you apply for an award, scholarship, or funded place

• your application responses and supporting information;
• eligibility and assessment information;
• travel and accommodation details, where an award includes them.

When you use the learning platform

• your sign-in email address and the courses you hold a place on;
• your intake responses and the case you build during the course;
• activity responses, drafts, and the outputs you produce;
• documents you choose to upload;
• your conversations with the AI course assistant;
• progress information, such as which modules you have opened and whether a course is complete.

When you visit the website

• aggregate visit measurement through Vercel Web Analytics, which counts page visits without cookies and without tracking you across other websites;
• standard technical information handled by our hosting provider, such as IP address and browser type, for security and reliability;
• cookies set by our registration and payment providers when you go through their checkout or booking flow.

When we correspond by email

Our newsletter and campaign platform records whether an email was delivered, opened, or clicked, so we can tell whether our communications are working and stop sending to addresses that bounce.

2. AI-assisted learning

Where a course includes the learning platform, you may be able to work on a real workplace case, upload supporting documents, and use an AI-assisted course assistant. This section explains what happens to that material, because it is the part people most reasonably want to know about.

The assistant is AI, not a person. Your prompts, its responses, and any documents you upload are processed by Apter and by the AI and infrastructure providers we use to run the service.

We treat what you put into the platform as two different things.

• Working material — your conversations with the assistant, the documents you upload, and the text extracted from those documents. This is transient. We keep it only to support your work during the course.
• Your case record — the information you confirm into your case, including your problem, context, constraints, evidence, and the outputs you produce. This is the record of your learning. You can view it and correct it.

Apter's policy is that working material is deleted no later than 30 days after you claim your place on a course, and we are putting automatic deletion in place to enforce that. Until that automatic process is running, we delete working material on request and when a course closes. We will update this policy when automatic deletion is in operation.

Your material is private by default. It is used to deliver and support your own course experience. Apter personnel can access it only where required for delivery, support, safety, or troubleshooting, access to it requires a second authentication factor, and those accesses are recorded.

Unless you give separate, explicit permission, we do not use your material to train AI models, in marketing, in a shared case library, in published examples, or for research. Registering for a course is not that permission, and neither is using the assistant or uploading a document. We do not permit our AI provider to use your material to train their models.

Please do not upload:

• classified or security-restricted information;
• personal or sensitive information about other people, unless you are authorised to share it and it is necessary;
• employer-confidential or client-confidential information you are not permitted to share;
• passwords, access tokens, or other credentials.

The assistant can be incomplete or wrong. It supports your professional judgement and does not replace it.

3. How we use personal information

We use personal information to:

• manage registrations, places, invoices, and payments;
• deliver courses and provide the learning platform;
• communicate about logistics, changes, and administrative matters;
• assess award, scholarship, and funded place applications;
• issue certificates and record completion;
• respond to enquiries;
• meet our tax, accounting, and other legal obligations;
• understand which of our courses and communications are useful, using aggregate and de-identified information rather than the content of your case or conversations.

We do not use the content of your case, your uploads, or your conversations with the assistant to develop our products or our courses unless you have given permission for that specific use.

We do not sell personal information.

4. Who we share it with

We use established service providers to run Apter. They may handle personal information on our behalf, and only for the purpose we engaged them for.

• website hosting and visit measurement;
• course registration, ticketing, and the course booking flow;
• payment processing;
• invoicing and accounting;
• email, newsletters, and campaign delivery;
• the learning platform's database, authentication, and file storage;
• the AI service that powers the course assistant;
• venues, caterers, and travel providers, where a course or award requires it.

We may also disclose personal information where required by law, or where necessary to protect the safety of participants or staff.

We will tell you the specific providers we use if you ask. Contact details are in section 10.

5. Where information is held

The learning platform — your case, your uploads, and your conversations with the assistant — is hosted in Australia, in Sydney.

Some of our other providers, including payment, email, and AI services, operate overseas or store information outside Australia. Where that is the case, we choose providers with recognised security practices and contractual protections for the information they handle.

6. How long we keep it

• Working material in the learning platform — as described in section 2.
• Your case, outputs, and completion records — kept as the record of your learning and your professional development. We will define and publish a specific retention period for these before any long-term use beyond your course.
• Registration, invoicing, and accounting records — kept for the period required by Australian tax and corporations law, generally at least five years.
• Enquiries and correspondence — kept while there is an ongoing relationship, and then archived or deleted.
• Newsletter and marketing contacts — kept until you unsubscribe or ask us to remove you.

7. Marketing and how to opt out

You can opt out of marketing communications at any time using the unsubscribe link in any campaign email, or by contacting us. We may still send administrative or transactional messages about a course you are registered for, including confirmations, invoices, logistics, and policy updates.

8. Keeping information secure

We protect personal information by:

• encrypting information in transit and at rest;
• enforcing access rules in the database itself, so a participant's material is reachable only by that participant and by staff who are permitted to see it;
• requiring a second authentication factor for staff access to participant material;
• recording staff access to participant work;
• keeping credentials out of our source code;
• limiting who within Apter can see what, based on their role on a course.

No system is perfectly secure. If a data breach occurs that is likely to cause serious harm, we will act on it and notify the people affected and any regulator we are required to notify.

9. Accessing, correcting, and deleting your information

You can ask us to:

• tell you what personal information we hold about you;
• give you a copy of it;
• correct it if it is wrong or out of date;
• delete it, where we are not required to keep it.

Email admin@apter.au and we will respond within a reasonable period. We may need to verify who you are first. If we cannot do what you have asked — usually because a record has to be kept for tax or legal reasons — we will tell you why.

10. Questions and complaints

If you have a question about this policy, or you believe we have mishandled your personal information, contact us first so we can look into it:

admin@apter.au
APTER PTY LTD
ABN 31 693 469 368
Website: https://apter.au

If you are not satisfied with our response, you can raise the matter with the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes to this policy

We may update this policy, including when we change the services or providers we use. The updated version applies from the date it is published on this page. Where a change materially affects how we handle information you have already given us, we will take reasonable steps to tell you.