01Mind

Privacy Policy

This policy applies to 01Mind and every product we make, including our agent tool catalogue, and any product we release in future.

The short version

We collect very little. Some of what we make is built so that your data cannot reach us even if we wanted it, and one thing we do works the other way round entirely. This policy explains both things.

We do not sell personal information. We do not trade it. We do not use it to advertise to you.

Our servers are in Singapore. Some processing happens in the United States. 01Mind operates from Australia. Our market is global.

Who we are

01Mind is a registered business name of Ian Charles Heffernan, a sole trader in Australia. There is no company behind 01Mind. Where this policy says "we", it means one person and the systems he runs.

A business this small sits under the turnover threshold in the Privacy Act 1988, which means the Australian Privacy Principles do not legally bind us. We comply with them anyway, and we say so here deliberately: once it is written on this page it is a commitment you can hold us to, not a courtesy we can withdraw. If you are handing your data to a one-person business, you are entitled to know it is held to the same standard a large one would be.

What we collect and hold

If you visit our website. Our server records which page was requested, what software requested it, and when, along with where you arrived from if that was passed to us. These records contain no name, no email address, no account identifier, and we do not attempt to link them to a person. We keep them indefinitely, because studying the traffic arriving at our own door is how we tell real visitors from the automated noise, and that is part of how our products improve.

If you contact us through our website. Your name, your email address, the subject you give and your message are sent to our business email so we can reply.

If you hold an account with 01Mind or purchase a product or service. We hold what is needed to invoice you and to know what you are entitled to: the name of your organisation, the name, role and email address of the people we deal with, and a phone number and postal address where you have given them. We hold your billing email, your purchase order number where you use one, your VAT or tax number where the law requires it on an invoice, your declared time zone, and the details of what you bought — the product, tier, licence period and renewal date. We also keep our own notes about the account.

How long we keep it. An invoice and its payment record are kept for five years, counted from the later of the transaction completing or the lodgment of the tax return that relied on it. That is a legal obligation on any Australian business, not a preference, and it is why a request to delete everything cannot remove an invoice. Everything else — contact details, notes, configuration — we delete on request.

We do not take card payments.

If you use our agent tool catalogue. An API key we issue you, a record of what was purchased, and — where payment was made in cryptocurrency — the wallet address that paid is stored in our records. Wallet addresses are public information on the blockchain by design.

Against that API key we also count how it uses the catalogue: how many times it has visited, which free trials it ran, which purchases it began and which it completed. We do this to tell whether anyone is actually finding the catalogue useful, which for a business this size is the only way to know. An API key is issued on request with no name, email address or identity attached to it, so those counts describe a key, not a person.

If you ask a legal research question or send an email through us. We keep a record of the question and the start of its answer, or of the email's recipient and subject, so we can handle disputes and misuse. We do not keep the body of an email you send, and we do not keep a copy of a document we render for you.

If we decline a request. Where our protective measures decline a request, we keep the part of it that caused the decision for up to 72 hours, so we can check the decision was right.

Our Terms of Sale describe these records too.

If you have been contacted by us

Please note: We have approached a small number of businesses directly. If we have contacted you, that approach information was obtained from public networks.

Sending information overseas

01Mind is an Australian business, and some of what we use is not.

We do not load fonts, analytics, advertising or tracking scripts from anyone else's servers. Every page you see is served from ours, so visiting this site does not hand your IP address to a third party.

Getting access, correction, or deletion of your information

If you would like to update, get access to, or delete information we have about you, please email 01mind@01mind.net and tell us what you would like changed or updated. We will respond to your request within 30 days.

Two honest limits on that. An invoice and its payment record are kept for the five years described above, because the law requires it — everything else about you goes. And our products that run on your own equipment hold their data on your equipment, not ours; we cannot reach into an installation you control to delete anything, and that is by design.

If you are in the European Union or the United Kingdom

The GDPR applies to us where we handle the personal data of people in the EU, regardless of how small we are, and we treat UK requests the same way. Alongside access, correction and deletion you have the right to ask for a copy of your data in a portable form, to object to or restrict how we use it, and to withdraw consent where our use rests on consent. Ask through the same address above.

Our lawful basis is straightforward: we use your details to perform the contract you have with us, and to meet the record-keeping obligations described above. We do not profile you and we make no automated decisions about you.

Australia does not hold an EU adequacy decision, so where a contract with an EU client involves us handling personal data on their behalf, we enter the European Commission's Standard Contractual Clauses. Ask and we will put them in place.

One thing stated plainly rather than left for you to discover: we have not appointed an Article 27 representative in the EU. If that matters to your own compliance, tell us and we will deal with it rather than argue about whether we need one.

Privacy Complaints

Please email 01mind@01mind.net with "Privacy complaint" in the subject headline. Please advise in detail what your complaint is and how you would like it rectified. We will respond to your complaint within 30 days.

If you are not satisfied with your complaint response, you may refer the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

Last updated: 15 September 2026