PrepDesk
Draft: to be reviewed by a privacy lawyer before launch. This is a placeholder, not the final wording.

Version 2026-09-24-draft

Privacy policy

What personal information PrepDesk handles, where, and for how long.

Who we are and what we hold

PrepDesk is a service for Australian accounting firms. We hold the details of the people who use it (name, work email, sign-in records) and, on each firm’s behalf, the documents and figures the firm uploads about its clients.

For a firm’s client information, the firm decides what is collected and why; we handle it only to provide the service to that firm.

Where it is kept

Everything about a firm’s clients is stored and processed in Australia (Sydney, with Melbourne as the only fallback for the AI). The providers we use are listed on our trust page.

Tax file numbers

Text recognition reads each page in Sydney first; we then remove tax file numbers automatically, before the AI reads any text, and never store them. If removal can’t run, processing stops.

Automated decisions

PrepDesk uses software, including AI models run in Australia, to read the documents a firm uploads, sort them, find the figures in them and prepare draft workpapers.

The software does not make decisions about anyone. It prepares suggestions. Every figure is shown with the page it came from, and a registered tax agent at the firm reviews, changes or rejects each suggestion and decides what goes into a tax return.

Tax judgements, such as whether a cost is a repair or an improvement, are always left to a person. Nothing is lodged with the ATO by PrepDesk.

Anything exported before a person has reviewed and signed it off is marked “DRAFT, NOT REVIEWED”.

The AI models are never trained on your information.

How long we keep it

Source documents are kept for the period each firm chooses (90 days to 7 years after sign-off, 12 months by default), then permanently deleted. Workpapers and their history are kept while the firm is a customer.

When a firm leaves, it has 30 days to export everything; then everything is deleted, backup copies expire within 35 days, and we confirm in writing.

Access, correction and complaints

[Placeholder: how to ask for access or correction, and how to complain, including to the OAIC.]

Contact

Questions about this document? Write to us:

malakye@prepdesk.com.auEmail PrepDesk

See also: Terms of service · Data processing agreement · How we look after your clients’ data