Privacy Policy | MuSoft Tech

This document is a starting template generated for MuSoft Tech and has not been reviewed by a lawyer. Before publishing, have it checked against your actual data handling practices and reviewed by a qualified professional for compliance with the Australian Privacy Principles (Privacy Act 1988) and any other jurisdictions you operate in.

1. Who we are

MuSoft Tech Pty Ltd ("MuSoft Tech", "we", "us") builds and operates RiskVault+, a GRC and audit management platform. This policy explains how we collect, use, store, and protect personal information when you visit this website, submit an enquiry, or use RiskVault+.

2. Information we collect

We collect information in a few ways:

Enquiry form: when you submit the contact form, we (or your own email client, depending on how the form is configured) receive your name, work email, company name, team size, and the message you provide.
Website analytics: we use Google Analytics (GA4) to understand how visitors use this website, including pages viewed, general location (city/region level), device type, and referral source. This is collected via cookies and similar technologies.
Product data: if your organisation is a RiskVault+ customer, the risks, controls, findings, and other records your team enters into the platform are stored per the deployment model you've chosen (RiskVault+ Cloud or Your Hosted) and are governed by your organisation's agreement with us.

3. How we use your information

To respond to enquiries and provide requested information about RiskVault+.
To operate, maintain, and improve the RiskVault+ platform and this website.
To understand aggregate website usage patterns via analytics.
To meet legal and regulatory obligations.

We do not sell personal information to third parties, and we do not use enquiry data for purposes beyond responding to your enquiry and related follow-up, unless you separately opt in to further communications.

4. Where your data is stored

RiskVault+ is built on Microsoft Azure. Depending on your deployment choice:

RiskVault+ Cloud: your data is held in an isolated environment managed by MuSoft Tech.
Your Hosted: your data is deployed directly into your organisation's own Azure tenant and does not leave it.

Website enquiry data and analytics data are processed using standard third-party tools (see Section 5) and are not used to populate the RiskVault+ product itself.

5. Third-party services

We use the following third-party services, each with its own privacy practices:

Google Analytics (GA4): website usage analytics. See Google's Privacy Policy.
Microsoft Azure: underlying cloud infrastructure for RiskVault+.

6. Cookies

This website uses cookies set by Google Analytics to distinguish visitors and sessions. You can control or disable cookies through your browser settings; doing so may affect analytics collection but will not affect your ability to use the website or submit an enquiry.

7. Your rights

Under the Australian Privacy Principles, you have the right to access the personal information we hold about you, request correction of inaccurate information, and ask us to delete information we no longer need to hold. To exercise any of these rights, contact us using the details below.

8. Data retention

We retain enquiry data for as long as reasonably necessary to respond to your enquiry and for a limited period afterward for record-keeping, unless you request earlier deletion. Product data for RiskVault+ customers is retained per the terms of your organisation's agreement with us.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent version.

10. Contact us

For any questions about this policy or your personal information, contact us at info@musofttech.com.au.