Privacy policy

Last updated: 21 June 2026

This policy explains how Unbook (ABN 75 618 765 804), a sole trader (unbook, we, us) handles your personal information when you use unbook.com.au. We voluntarily handle your personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), as a matter of policy and customer trust - even if the small-business exemption means the Act does not currently require us to. If we are, or become, covered by the Privacy Act (including by formally opting in), we comply with it as a legal obligation.

1. What personal information we collect

Your notice photo or PDF and the structured details we extract from it (state, offence code, fine amount, date, location, camera type, penalty notice number, vehicle registration).
What you tell us - your answers to the questions in the flow and anything you write in your own words to describe what happened.
Contact details - your email address, if you ask us to email your case to you or you buy a dispute pack.
Payment information - if you pay, Stripe processes your card and we receive transaction metadata (amount, time, a payment reference and partial card info). We do not collect or store your full card number.
Technical and usage data - basic analytics such as pages viewed and key events (upload, paid, outcome reported), and limited technical data your browser sends (such as IP address and device/browser type). See section 11.

We collect only what is reasonably necessary to provide the service. You can use the free analysis without giving us your name; an email is only needed to save or deliver your pack.

2. Sensitive information, and writing in your own words

A standard penalty notice usually contains personal information, not sensitive information - it is an administrative penalty, not a criminal record. However, your upload or what you write may include sensitive information, such as health or disability information, criminal-record information, or details about another person. Please do not include sensitive information unless it is genuinely necessary for your review. If you choose to provide it, you consent to us using it to provide the service, and we handle it with additional care. If your matter involves a criminal driving offence, unbook is not the right tool - please see a lawyer.

3. Other people who appear in your upload

A photo of a notice or a camera image may incidentally include other people (for example a passenger) or other vehicles. We only need the notice and your vehicle. We do not seek out or use information about other people in your image, and where we hold incidental personal information about someone else that we did not need to collect, we take reasonable steps to de-identify or destroy it. Please do not upload other people's personal information that you are not entitled to share. We do not perform facial recognition or any biometric identification.

4. Why we collect it and how we use it

We use your information to run our analysis modules, generate your draft application for internal review, deliver and (if you ask) save your pack, process your payment, provide support, keep the service secure, and meet legal and tax obligations. To improve the service we use only de-identified or aggregated information. We use your information for these purposes and for directly related purposes you would reasonably expect - or with your consent. We do not use it for unrelated purposes.

5. Who we disclose it to

To provide the service we share limited information with trusted providers:

Cloudflare - hosting, storage and security. Your photo is stored in Cloudflare R2 and your case data in Cloudflare D1, pinned to AU/APAC infrastructure where supported.
Google (Gemini) - used to read your notice and analyse the image, processed on AU-region infrastructure.
Anthropic (Claude) - used, where enabled, to review the dispute grounds and help write your letter. Only text is sent (your description and the extracted details); no photo or image bytes are ever sent to Anthropic. Anthropic processes this in the United States - see section 6.
Stripe - payment processing.
Resend - to send you transactional emails (such as your saved case link or pack).

We never sell your data, never share it for someone else's marketing, and never use your photos to train third-party AI models. We will not use your identifiable notice photos or account narrative to train AI models without your separate consent. We will not disclose your information to insurers or law enforcement except where required by law or a lawful order.

6. Sending information overseas (APP 8)

Producing your letter can involve sending information to the United States: Anthropic (text only, as above), and our payment and email providers may also process some information in the United States. Cloudflare and Google processing is pinned to AU/APAC where supported, though limited cross-border movement can occur for any internet service.

We take reasonable steps and use contractual protections to require these providers to protect your information. However, the United States does not have privacy laws that are substantially similar to the Australian Privacy Principles.

Your consent to overseas disclosure. By using the service to analyse your notice and draft your letter, you consent to the text you provide being disclosed to Anthropic in the United States. If you consent to this disclosure, Australian Privacy Principle 8.1 will not apply, which means that if Anthropic handles your information in breach of the Australian Privacy Principles, unbook will not be accountable under the Privacy Act 1988 (Cth) and you will not be able to seek redress under that Act in relation to Anthropic's handling. We still require Anthropic by contract to protect your information. You also confirm this consent when you tick the agreement box at checkout. If you do not want your text disclosed overseas, do not submit free-text and contact us at [email protected].

7. Automated analysis

Our AI helps classify your notice details, identify possible review issues, decide whether a paid pack is offered, and generate draft text. These outputs affect what unbook offers you, but they do not decide the penalty-notice outcome - the output is a draft you review, edit and choose whether to lodge, and Revenue NSW or the relevant reviewing agency makes the review decision. From 10 December 2026 new automated-decision transparency rules apply under the Privacy Act, and we will update this section as needed.

8. How we keep it secure (APP 11)

We take reasonable technical and organisational steps to protect your information, including encryption in transit, access controls, and AU/APAC-pinned storage. No online service can be completely secure, but we work to protect your information and to limit who can access it.

9. How long we keep it, and deletion

We keep personal information only as long as we reasonably need it:

Notice photos / PDFs and uploaded evidence: deleted after 12 months (or earlier if you ask).
Draft packs and case records: kept for up to 24 months for support, refunds and dispute handling, then deleted or de-identified unless the law requires us to keep them longer.
Payment and tax records: kept for as long as tax and accounting law requires.
Aggregated or de-identified data (which no longer identifies you): may be kept indefinitely.

You can ask us to delete your information at any time (see section 10) and we will, except where we must keep certain records for legal or financial obligations.

10. Accessing and correcting your information (APP 12 & 13)

You can ask for a copy of the personal information we hold about you, and ask us to correct it if it is wrong, by emailing [email protected]. We will respond within a reasonable time. There is normally no charge.

11. Cookies, analytics and marketing

We use Google Analytics (with IP anonymisation) and Cloudflare analytics to understand how the site is used. Google Analytics sets cookies and may process data in the United States. You can opt out - and see the full list of cookies we use - in our Cookie & tracking notice.

We send transactional emails (such as your case link, receipt, or pack) because they are part of the service you asked for. We will only send you marketing emails if you have opted in, and every marketing email has an easy unsubscribe link, in line with the Spam Act 2003 (Cth). You can opt out at any time.

12. Data breaches

We comply with the Notifiable Data Breaches scheme. If we suspect a data breach, we will assess it promptly, and where a breach is likely to result in serious harm we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable, with recommended steps to protect yourself.

13. Children

unbook is intended for adults dealing with their own fines and is not directed at children. We do not knowingly collect personal information from anyone under 18.

14. Complaints

If you have a privacy concern, email [email protected] and we will work with you to resolve it. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au/privacy/privacy-complaints.

15. Changes and contact

We may update this policy from time to time; the current version is always published here with its “last updated” date. Questions about privacy or this policy: [email protected].