RequestHub privacy policy

    Last updated: 25 September 2026

    Tessellate Advisory Pty Ltd (ABN 14 609 961 462), trading as RequestHub ("RequestHub", "we", "us" or "our"), takes your privacy seriously. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It should be read with our terms of use.

    1. Information we collect

    We collect the following personal information:

    • When you register: your name, business email address, and business name.
    • When you contact us or join the waitlist: your name, email address, and anything else you choose to tell us in the form or in an email.
    • When you use the Services: further business information needed to provide the Services, and records of how you use them.
    • Billing information: your billing contact and subscription history. Card details are collected and stored by our payment processor, not by us.
    • Automatically: technical data such as IP address, approximate location derived from it (country, region, city), device and browser information, and usage data collected through cookies and analytics.

    If you do not give us the information we ask for, we may not be able to provide the Services to you.

    2. Information inside your account

    2.1 The data you and your team put into the Services, including emails, attachments, drawings, requests for quotation, and customer and contact details, is called Customer Data in our terms of use. It often contains other people's personal information, such as your customers' names and contact details.

    2.2 For that information we act on your instructions. You are responsible for having any consent or notice needed before putting other people's personal information into the Services, and for handling it in line with your own privacy obligations.

    2.3 We use Customer Data to provide, support, secure and fix the Services, to improve the accuracy of the Services' AI, and to analyse patterns and trends so we can improve and develop the Services. When we do this, we work with de-identified or aggregated data wherever we reasonably can, and access to specific records is limited to the people who need it. We do not sell Customer Data, and we do not use it to train AI models offered to anyone other than RequestHub.

    3. How we use your information

    • To provide, support and improve the Services.
    • To set up and administer your account, and to process payments.
    • To verify that an email address you give us can receive mail.
    • To communicate with you about updates, changes, service issues, and, where you have not opted out, news about the Services.
    • To understand how the Services and our website are used, and to measure the performance of our advertising.
    • To detect and prevent fraud, misuse and security incidents.
    • To meet our legal obligations.

    4. Who we share it with

    We share personal information with:

    • Service providers who help us run RequestHub. They may use the information only to provide their service to us, and only as needed to do so. They include providers of payment processing, AI processing, hosting and databases, product analytics and advertising measurement, customer relationship management and support, email delivery and email address verification, and location lookup based on IP address. Our payment processing is handled by Stripe, and our AI processing is currently handled by OpenAI. We do not name every provider here, because the providers we use change over time. If you would like to know who handles your information at any point, email [email protected] and we will tell you.
    • Advertising and measurement platforms, namely Meta and Google. Their tracking tools run on our website and send them information about your visit, including the pages you view, your IP address and your device. They may combine that with information they already hold about you and use it for their own advertising purposes, under their own privacy policies. Clause 8 explains how to stop this.
    • Professional advisers, such as our accountants and lawyers, where needed.
    • A buyer of our business, if all or most of our business is sold, on terms that protect your information.
    • Regulators, courts and law enforcement, where the law requires or permits it.

    We do not sell your personal information.

    5. Overseas disclosure

    Some of the providers and platforms described above are located outside Australia, including in the United States and the European Union, so your personal information may be stored and processed overseas. We choose providers that we consider will protect your information properly, including through the contracts we have with them.

    6. Data security

    We take reasonable technical and organisational steps to protect personal information, including:

    • encryption of data in transit and at rest;
    • multi-factor authentication for access to stored data;
    • access controls that limit data to the people who need it;
    • regular backups of our database; and
    • choosing providers who meet recognised security standards.

    No online service is perfectly secure, and we cannot guarantee that information will never be lost, corrupted or accessed without permission.

    7. Security incidents

    If we become aware of a breach affecting your personal information, we will tell you promptly, explain what happened, and tell you what we are doing about it.

    8. Cookies and tracking

    8.1 We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Services and our website are used, and measure our advertising. This includes cookies set by our analytics provider, and by the Meta Pixel and Google tag on our marketing website, which set their own cookies (such as _fbp and _gcl_*) and report your page views to Meta and Google. We also pass an ad click identifier to our analytics so we can see which ads lead to sign-ups.

    8.2 You can block or delete cookies through your browser settings, and you can opt out of this advertising tracking using a browser setting or extension that blocks it, or through the ad preference controls Meta and Google provide. Some parts of the Services may not work properly if you block cookies.

    9. How long we keep your data

    9.1 We keep your data for as long as you are an active subscriber. If your subscription ends, we keep your data unless you ask us to delete it, so that you can reactivate your account later without losing your history.

    9.2 You can ask us to delete your data at any time by emailing [email protected], and we will do so within 30 days, unless we are required by law to keep it. Deleted data may remain in our backups for a limited time until those backups expire.

    10. Automated decisions

    The Services use AI to read and interpret Customer Data, and automated checks such as form validation and email deliverability verification. These processes do not make decisions that have legal or similarly significant effects on you. AI output can be wrong and is reviewed by you, not relied on by us to make decisions about you. Our payment processor may show prices in a local currency based on your location.

    11. Your choices

    You can ask us to:

    • give you a copy of the personal information we hold about you;
    • correct it if it is wrong, out of date or incomplete;
    • delete it, as set out in clause 9.2;
    • stop sending you marketing messages; and
    • withdraw a consent you have given us, where the handling relies on consent.

    Email [email protected] and we will respond within a reasonable time, normally within 30 days. We may need to verify your identity first. If we cannot do what you have asked, we will tell you why.

    If your information sits inside another business's RequestHub account, for example, because you are their customer, please contact that business. We will refer your request to them.

    12. Complaints

    If you think we have mishandled your personal information, email [email protected] with the details. We will acknowledge your complaint, look into it, and tell you the outcome, normally within 30 days.

    13. Updates to this policy

    We may update this policy from time to time. The date at the top shows when it last changed, and we will tell you about significant changes by email or a notice in the Services.

    14. Contact us

    Questions about this policy, or about how we handle your personal information: [email protected].

    Tessellate Advisory Pty Ltd (ABN 14 609 961 462), Ground Floor, 470 St Kilda Road, Melbourne VIC 3004, Australia.