Version 2.0: effective 29 September 2026 (supersedes the version dated 27 January 2025)
Backable Pty Ltd (ABN 57 646 090 495) (Backable, we, us, our) operates The Analyst platform (Platform). We are bound by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).
The Platform includes all of its portals and interfaces, including client, advisor and firm administration portals, the Deal Room, related sub-domains, and any mobile or embedded versions.
This Policy explains how we collect, hold, use and disclose personal information in connection with the Platform, our websites and related services (Services). It should be read with the Platform Terms of Use and the Platform Disclaimer.
This Policy applies to:
In this Policy, Customer Data means all information supplied to the Platform by or for a User, including uploads, questionnaire responses, interview and meeting content, Insights and data retrieved from Connected Systems. Reports means outputs generated by the Platform. Connected Systems means third-party systems a User connects to the Platform.
Questions about this Policy can be directed to our Privacy Officer at privacy@theanalyst.io.
| Category | Examples |
|---|---|
| Identity and contact | Name, job title, business name, ABN, email, phone, postal address |
| Account and billing | Login details, subscription tier, billing history. Card details are handled by our payment processors; we do not store full card numbers |
| Usage and device | IP address, browser, device identifiers, time zone, pages viewed, interactions, error logs |
| Customer Data | Uploaded documents, such as financial statements, management accounts, tax returns, information memoranda, business plans, contracts and board papers; questionnaire responses; financial and operational data; and any personal information these contain, including about owners, staff, customers and counterparties |
| Connected System data | Accounting, bookkeeping, inventory, point-of-sale, payroll, banking, CRM, advertising and analytics records retrieved through integrations a User authorises |
| Interview and meeting content | Text transcripts, audio recordings of voice interviews and meetings, and the notes, action items and other Insights derived from them |
| Reports and modelling data | Scores, valuations, projections, simulations, model assumptions and other outputs generated from Customer Data, including any that relate to identifiable individuals such as owners or key staff |
| Support and feedback | Correspondence, survey responses, feature requests, beta feedback |
The Platform conducts and records AI-led text and voice interviews, and may record and transcribe meetings held through or uploaded to it. It also collects questionnaire responses, from the User and from people the User invites, such as staff, clients or advisers. From this content and other Customer Data, it generates meeting notes, summaries, decisions, action items, and tracking of progress against a User's strategies and goals (Insights).
Insights may attribute statements, actions or responsibilities to named participants. They form part of the User's Customer Data, are visible to that account's users according to their role, and are retained and deleted on the same basis (section 8). Insights are AI-generated and may be inaccurate, so they should be reviewed before being relied on.
The User who arranges an interview, meeting or questionnaire is responsible for telling participants how their responses will be used and for obtaining their consent to any recording. Voice recordings are used only to transcribe content and generate Reports and Insights. We do not use them to identify or verify individuals, and we do not create voiceprints or other biometric templates.
We do not seek sensitive information, such as health information, racial or ethnic origin, political opinions, religious beliefs or criminal records. Interview participants and Users may disclose it incidentally. Where that happens, we hold it only as part of the Customer Data in which it appears, use it only to provide the Services, and do not use it for any other purpose. Please avoid supplying sensitive information unless it is necessary for your Report.
Customer Data often contains personal information about people who have not dealt with us directly. By uploading or otherwise supplying Customer Data, the User warrants that it has all rights, permissions and consents needed to do so, including under any confidentiality obligation, and has told the people concerned about our handling of their information where required. Backable does not verify this and is not responsible for a User's failure to obtain those permissions. Third-party individuals may still exercise their rights under section 9 of this Policy.
We collect personal information:
We use the following tools on our websites and in the Platform:
| Tool | Purpose |
|---|---|
| Google Analytics | Measuring how our websites and the Platform are used |
| Google Ads | Measuring and improving our advertising, including remarketing |
| Meta Pixel | Measuring and improving advertising on Facebook and Instagram, including remarketing |
| LinkedIn Insight Tag | Measuring and improving advertising on LinkedIn, including remarketing |
These tools use cookies, pixels and similar identifiers to collect usage and device information, such as pages viewed, actions taken, IP address and browser type. Google, Meta and LinkedIn may combine it with other information they hold and use it under their own privacy policies, including to show you ads.
We configure these tools so they do not receive Customer Data, Reports or Insights.
We use essential cookies to operate the Platform and keep sessions secure. You can manage non-essential cookies through our cookie settings, opt out of Google Analytics with Google's browser add-on, adjust ad preferences in your Google, Meta and LinkedIn accounts, or block cookies in your browser. Visitors in the EEA, UK and Switzerland are asked for consent before non-essential cookies are set (section 14).
You may browse our public websites and make general enquiries without identifying yourself. Using the Platform requires an identified account, because we must verify subscribers, bill them and protect their data.
We use personal information to:
The Platform processes Customer Data using quantitative models and artificial intelligence systems, including large language models operated by Backable and by third-party providers. Those providers receive only the data needed for a single analytical step and process it only to return outputs to us, under terms that do not permit them to use it to train their own models.
Client-level models. Where the Platform tunes or trains a model on a User's Customer Data, that model is used only for that User's account. We do not pool one User's Customer Data with another's, and we do not use it to generate outputs for any other User.
Backable models. We may in future fine-tune, train or evaluate Backable's own models to improve the Platform. We will do so only with de-identified Customer Data and usage data, from which information identifying any individual or business has been removed. Before we begin, we will update this Policy and give Users at least 30 days' notice. Any User may opt out by emailing privacy@theanalyst.io, and data from opted-out accounts will be excluded.
The Platform uses computer programs to generate scores, valuations, projections and recommendations about businesses from the information supplied. Personal information, such as interview responses or owner-level financial data, may be used in doing so.
These outputs are opinions and estimates that support human decision-making. Backable does not use them to make decisions that significantly affect an individual's rights or interests. A User or third party who relies on a Report to make such a decision, for example about credit, employment or a transaction, is responsible for that decision and for any human review it requires. See the Platform Disclaimer.
Reports, Insights and suggestions generated by the Platform are general information only. They are not financial product advice under the Corporations Act 2001 (Cth), credit assistance, tax agent services under the Tax Agent Services Act 2009 (Cth), legal advice, or medical or health advice. Every suggestion the Platform makes is accompanied by a recommendation to obtain advice from an appropriately qualified professional. See the Platform Disclaimer.
We disclose personal information only as needed for the purposes in section 4, to:
We do not sell personal information. Reports and Customer Data are disclosed to others only at the direction of the User who commissioned them.
All Customer Data we store is held in data centres in Australia, currently Microsoft Azure in Sydney and Melbourne.
To generate Reports and Insights, parts of Customer Data are sent to the AI model providers listed in section 5. Those providers may process that data outside Australia, including in the United States. Some AI models are accessed through providers' global endpoints, so requests may be routed to data centres in other countries depending on demand. They receive only the data needed for each analytical step and are engaged on paid or enterprise terms that do not permit them to use it to train their models.
Google, Meta and LinkedIn may process usage data overseas through the analytics and advertising tools described in section 3.
Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure it handles the information consistently with the APPs, including through contractual data-protection terms.
We protect personal information with administrative, technical and physical safeguards, including:
No system is completely secure. Users are responsible for keeping their credentials confidential and for the security of their Connected Systems.
| Information | Retention period |
|---|---|
| Account and billing records | While the account is active, then 7 years after closure |
| Customer Data, Reports and interview recordings | While the subscription is active, then 7 years after expiry or closure; deleted within 90 days after that period ends |
| Encrypted back-ups | Purged on a rolling cycle of no more than 30 days |
We retain records for 7 years to meet taxation, record-keeping and legal-defence requirements. A User may ask us to delete Customer Data earlier. We will do so unless we are required by law to keep it or need it to establish, exercise or defend a legal claim.
When information is no longer needed, we securely destroy or de-identify it.
You may ask for access to, or correction of, personal information we hold about you by emailing privacy@theanalyst.io. We will respond within 30 days. We may need to verify your identity first.
If we refuse a request, we will explain why in writing and how to complain. Where the information forms part of a User's Customer Data, we may consult that User before responding.
If we suspect a data breach, we will contain it and assess it within 30 days. Where it is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, in accordance with the Notifiable Data Breaches scheme. Where the breach affects Customer Data, we will also notify the relevant User.
We may send product updates and promotional messages in accordance with the Spam Act 2003 (Cth). You can opt out at any time by using the unsubscribe link or emailing privacy@theanalyst.io. Service and account notices are not marketing and will continue while you have an account.
If you believe we have breached the Privacy Act or the APPs, please email a written complaint to privacy@theanalyst.io. We will acknowledge it within 5 business days and aim to resolve it within 30 days.
If you are not satisfied with our response, you may complain to the OAIC at www.oaic.gov.au or on 1300 363 992.
We may update this Policy from time to time by publishing a new version on our website. We will give at least 30 days' notice of material changes by email or in-app notification.
This section applies where the EU General Data Protection Regulation, the UK GDPR or the Swiss Federal Act on Data Protection applies to our processing of your personal data.
Controller and processor. Backable Pty Ltd is the controller of account, billing, usage and marketing data. For Customer Data a User supplies about other people, the User is the controller and we process it on the User's behalf under our data processing terms.
Legal bases. We process personal data:
Your rights. You may request access to, rectification or erasure of, or restriction of processing of your personal data, request data portability, object to processing (including direct marketing), and withdraw consent. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects; we do not make such decisions (section 4). Email privacy@theanalyst.io. We will respond within one month.
International transfers. We are based in Australia, which does not hold an EU or UK adequacy decision. Transfers to us and our service providers are protected by the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism.
Data breaches. Where we are the controller, we will notify the relevant supervisory authority of a qualifying breach within 72 hours where required.
Complaints. You may lodge a complaint with your local data protection authority, such as the Information Commissioner's Office in the UK.
Privacy Officer
Backable Pty Ltd (ABN 57 646 090 495)
Email: privacy@theanalyst.io
Level 1, 3 Wharf Street, Docklands VIC 3008 (The District Docklands, Space SCF 16)