Privacy notice

RedactTFN (removetfn.com.au) is a document redaction tool that detects and removes Australian tax file numbers and other identifiers from files you upload. This notice explains how we handle personal information, consistent with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Account information: your email address, authentication identifiers (including Google sign-in identifiers where used), your plan and your billing status.

Activity metadata: timestamps, file type, the number of identifiers redacted, API key usage, and administrative actions taken in the platform.

Document content: only transiently, while your file is being scanned and redacted.

Technical data: standard request information such as IP address and user agent, used for security, rate limiting and abuse prevention.

To provide the redaction service and return your redacted file.

To authenticate you, manage your subscription and issue receipts and account notices.

To keep the service secure, detect abuse and maintain an audit trail.

We do not use your documents or the personal information within them for analytics, marketing, profiling or model training.

Uploaded documents are not retained. They are processed in memory and discarded once your redacted file is produced; we hold no copy, archive or backup of them.

Account data is retained while your account is active and for a limited period afterwards to meet tax, accounting and dispute-resolution obligations, then deleted or de-identified.

Activity metadata is retained as an audit record. It never contains document contents or the identifiers that were redacted.

We do not sell, rent or trade personal information.

We use a managed cloud database and application host to run the service, Stripe to process payments, and an email provider to deliver transactional email. These providers act on our instructions and only receive what they need to perform their function.

Card details are entered directly into Stripe's checkout and are never received or stored by us.

We may disclose information where required by law, or to protect the safety, rights or property of users or the public.

TFNs are handled with the highest level of care on the platform. They are never stored in our database, never written to logs, and never disclosed to anyone other than the user processing the document. Our sole purpose in processing a TFN is to remove it from your document.

Traffic is encrypted in transit with TLS, account records are protected by row-level access rules, staff access is role-based, and API keys are stored hashed and can be revoked at any time. Full detail is on our security page.

You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. You may also request a copy of your activity log.

To make a request, or to complain about how we have handled your personal information, email us and we will respond within a reasonable period. If you are not satisfied with our response you may escalate the matter to the Office of the Australian Information Commissioner.

Australian data centre hosting is being arranged. We will state the hosting region on this page and on our security page once it is confirmed. If data residency is a requirement for your firm, contact us before uploading client material.

We may update this notice as the service changes. Material changes will be reflected here, and we will notify account holders by email where the change affects how their information is handled.