Privacy Policy

We collect the following categories of information:

• Account information — name, email address, and business details provided when you register
• Business and compliance data — information about your business, customers, risk assessments, AML/CTF program documents, and compliance activities entered into the platform
• Payment information — processed by our payment provider Stripe; we do not store full card details
• Usage data — how you interact with the platform, including features used, pages visited, and session duration
• Communications — any correspondence you send us via email or support channels

We use your information to:

• Provide, operate, and maintain the AMLify platform and services
• Process your transactions and manage your subscription
• Generate compliance documents, risk assessments, and reports on your behalf
• Send transactional emails such as account confirmations, invoices, and service notifications
• Provide customer support and respond to your enquiries
• Improve the reliability, security, and performance of the platform
• Comply with our own legal and regulatory obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

AMLify uses artificial intelligence to generate compliance programs, risk assessments, and other outputs. The AI processes your inputs to generate outputs specific to your business.

We do not use your data to train AI models. Your data is processed to generate your specific outputs and is not retained for model training, benchmarking, or any purpose beyond providing your service. This applies to all data you provide, including compliance programs, customer records, risk assessments, and any other business or personal information.

Our in-app assistant, Ami, is powered by a reputable third-party AI provider to generate responses. Text you enter into Ami is processed by that provider in the United States and is not used to train AI models. Please avoid entering more personal information than necessary when using Ami.

AI-generated outputs are provided as compliance tools and educational guidance. They do not constitute legal advice. AMLify recommends consulting a qualified legal professional for advice specific to your obligations.

We host our core application and database in Australia (Sydney). To operate AMLify we rely on a small number of reputable third-party service providers — for infrastructure and hosting, database and authentication, email delivery, payment processing, identity verification, and our AI assistant. Most process your data in Australia; some (including certain hosting, email, payment and AI providers) process it in the United States. Your personal information may therefore be stored in, or accessed from, Australia and the United States.

Where a provider is located overseas, we take reasonable steps to ensure it handles your personal information consistently with the APPs. We can provide the current list of our service providers to the Office of the Australian Information Commissioner on request, and to you on reasonable request, by contacting support@amlify.au.

We implement industry-standard security measures including encryption at rest and in transit (TLS), access controls, and regular security reviews. Despite these measures, no internet transmission is completely secure, and we cannot guarantee absolute security.

Data breaches. We maintain a data breach response plan. If a data breach occurs that is likely to result in serious harm to any individual whose personal information we hold, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

We may share your information with:

• Service providers — third-party vendors who assist us in operating the platform (hosting, payment processing, email delivery), some located overseas (see section 4), subject to confidentiality obligations
• Professional advisers — lawyers, accountants, and auditors bound by confidentiality
• Law enforcement and regulators — where required by law, court order, or to protect our legal rights
• Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections

We retain your personal information for as long as your account is active or as needed to provide services. When you close your account, we will delete or anonymise your personal information within 90 days, unless retention is required by law (such as for financial records) or where you have requested export of your data.

You may export your compliance data at any time from within the platform before closing your account.

Under the Australian Privacy Act, you have the right to access the personal information we hold about you, request correction of inaccurate information, and make a complaint if you believe we have breached the Australian Privacy Principles.

To exercise these rights, contact us at support@amlify.au. We will respond within 30 days.

AMLify uses cookies to maintain your login session and personalise your experience. We may use anonymised analytics (such as page views and feature usage) to improve the platform. We do not use advertising cookies or share analytics data with advertising networks.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the platform. Continued use of AMLify after the effective date of any change constitutes your acceptance of the updated policy.

AMLify provides identity verification services and acts as an identity service provider (IDSP), conducting identity proofing on behalf of customer organisations that use the platform to meet their AML/CTF and know-your-customer obligations.

As part of this service, AMLify collects the identity details of the individuals being verified — such as name, date of birth, and identity document details (for example, driver licence, passport, or Medicare card numbers) — and checks them against official government records through the Australian Government's Document Verification Service (DVS). AMLify does not disclose raw DVS match results to customer organisations; it provides only an identity opinion, supported by multiple verification checks, in accordance with DVS requirements.

Consent. Before any DVS request is submitted, AMLify presents a consent notice that informs the individual of the purpose of collection, that their details will be checked against official records through the DVS, and that third-party systems and services may be involved. AMLify obtains the individual's express consent before proceeding and keeps records of those disclosures and consents.

Delivering this service may involve third-party systems and service providers (including the DVS gateway operator), subject to confidentiality and privacy obligations. AMLify's use of the DVS is subject to the applicable DVS participation agreement and the terms and conditions for the connection type used.

If you have a complaint or enquiry about how AMLify has handled your personal information — including in connection with identity verification or DVS-related processing — you can contact us at support@amlify.au. AMLify is the primary contact point for customer and stakeholder issues relating to its use of the DVS. We will acknowledge your complaint and respond within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Questions about this Privacy Policy or our data practices? Contact: support@amlify.au

Consultin AI Pty Ltd
Sydney, Australia

AMLify is a product of Consultin AI Pty Ltd.