Privacy notice

The public marketing website does not load advertising or marketing analytics, care records or private attachments. Its register-interest form is separate from account signup: it stores work email, optional business name, a dated privacy acknowledgement and separate optional marketing consent. This is an unverified expression of interest, not an activated account or marketing double opt-in. No email or campaign is sent by this form. Duplicate requests do not update existing consent. You can remove a registration using the form at /register-interest. Unconverted records expire after 180 days and are purged during subsequent interest requests. Technical anti-abuse counters expire on the next daily request; any available network address is converted into a keyed daily hash rather than stored in plain text. No signup or care form contents are sent to marketing analytics. Business signup remains separate from prior interest submissions: these are not converted into user accounts, memberships or marketing subscriptions. Optional marketing consent is unticked by default and recorded with the signup acknowledgement date/version; creating an account does not subscribe the user automatically. Signup collects essential business details, ABN, administrator name/work email, contact phone, services, registration status and dated acknowledgements. The existing ChatGPT sign-in system handles account credentials and account-password recovery; Zelqentra does not collect your ChatGPT password. The platform stores organisation memberships, invitation and permission audit records, verification-code hashes, encrypted authenticator secrets, recovery-code hashes and limited security sessions. Work email verification is required before protected care access. MFA is optional for every role; when enabled, it is checked before protected access until the user disables it. Each company has a private organisation ID and scoped records/uploads. Your provider decides which client records and private documents to collect, which staff are assigned and which disclosures are authorised. Ask your provider administrator about access, corrections, retention and participant privacy rights. Deactivation removes access; it does not delete retained care history. Hosting/database/private file storage uses the configured Sites/Cloudflare infrastructure. Transactional verification and invitation messages use the configured email provider (currently Resend). They contain no client details or private attachments. Provider acceptance does not confirm inbox delivery. Optional AI report drafting sends reviewed source text to the configured AI service only through the existing authorised workflow. Help chat is an AI support assistant for system-use questions. It sends your reviewed technical question and role-filtered Help documentation to OpenAI; it does not read client files, care records or ticket attachments. OpenAI API data is not used for model training by default. We request store:false; this does not establish Zero Data Retention, and provider abuse-monitoring logs may retain content for up to 30 days under the provider policy. Chat text is kept only in page memory until cleared, reload, workspace switch or logout. Only limited daily request/token counters are retained for 90 days; questions and answers are not saved by Zelqentra. Technical support tickets, replies, screenshots and access history are stored privately. Your company administrator can see company tickets; other workers see only their own. Explicitly authorised platform support staff can access technical support content across companies, with access recorded; this does not grant access to care records. Do not provide participant names, health details, passwords or credentials. Review and remove sensitive text/images before submission. Ticket emails contain only ticket numbers and generic alerts. Resolved tickets and associated files/history are deleted after 90 days on subsequent support activity; active/reopened tickets remain until resolved. Contact your organisation administrator or authorised support staff for corrections/removal requests. These rules cover technical support, not retained care or statutory incident records. This early access notice requires a confirmed operator contact, retention/deletion policy and assessment of data location/subprocessors before production use. Company isolation testing does not replace your own privacy obligations. Do not provide unnecessary sensitive information at signup.