Privacy Policy

---

ForesightXL Pty Ltd (“ForesightXL”, “we”, “our”, “us”) respects your privacy and is committed to protecting the personal information we hold. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access ForesightXL (the “Service”). This Policy is drafted in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

Information We Collect

1. Identity & Account Data
Supplied by Microsoft during secure sign-in (OAuth 2.0 / MSAL):
• Microsoft 365 User ID (Object ID)
• First and last name
• Work email address
• Microsoft Azure Tenant ID
• Sign-in session metadata

This information is required to authenticate users, manage subscriptions, and enforce licensing controls.

2. Usage Metadata
• Monthly token usage totals
• Subscription and seat allocation information

ForesightXL does not store spreadsheet contents, financial figures, forecast outputs, or contextual forecast data in its databases.

3. Support Correspondence
Information you voluntarily provide, including emails, screenshots, and log files. Other than Identity & Account Data and Usage Metadata described above, forecast data processed by the Service is not stored in ForesightXL systems.

How We Use Your Information

Account Management – To authenticate users, enforce seat limits, and administer subscriptions.

Service Operation & Security – To deliver core features, monitor uptime, prevent fraud, and diagnose technical issues.

AI Processing – The numbers and contextual information you supply for forecasting are processed via proprietary ForesightXL logic operating within secure Microsoft Azure infrastructure, including enterprise AI services where applicable. Forecast data is transmitted securely for processing. Forecast content is not stored in ForesightXL databases. Data submitted through the Service is not used to train or improve AI models. Your User ID, Tenant ID, and email address are not attached to forecast data unless you deliberately include them in the contextual input.

Support & Compliance – To respond to enquiries, meet legal obligations, and resolve disputes.

We do not use personal information for direct marketing unless you have provided written consent (APP 7).

Lawful Basis for Collection

We collect and process personal information on the following bases:
• Contract performance – delivering the Service you request
• Legitimate interests – safeguarding platform reliability and security
• Consent – where you voluntarily submit information or opt in to marketing communications

Unsolicited personal information is destroyed or de-identified in accordance with APP 4.

Disclosure to Third Parties

We may disclose personal information to:
• Microsoft Corporation – for identity, licensing, and add-in distribution
• Microsoft Azure – for secure hosting of identity metadata and AI processing infrastructure
• Enterprise AI service providers operating within Microsoft Azure infrastructure (where applicable) – for processing forecast data and generating AI outputs
• Professional advisers – audit, legal, insurance
• Regulators and law enforcement – where required by law

We do not sell personal information.

AI Data Handling

What is transmitted: Only the forecast numbers and contextual data you supply (plus de-identified system instructions required for Service operation).

What is stored: ForesightXL does not retain forecast content, spreadsheet data, or AI-generated outputs in its systems.

Model training: Data submitted through the Service is not used to train or improve AI models.

Data Security

We implement appropriate technical and organisational safeguards, including:
• TLS 1.2+ encryption in transit
• Encryption at rest within Azure-hosted systems
• Role-based access controls (RBAC)
• Multi-factor authentication for administrators
• Audit logging
• Secure destruction or de-identification aligned with APP 11

Identity & Account Data is retained for the life of your subscription plus 24 months, unless a longer retention period is required by law.

Cookies & Local Storage

ForesightXL uses only essential Microsoft cookies required for authentication and Service operation. We do not use advertising cookies or third-party tracking technologies.

Access & Correction

You may request access to or correction of your personal information by emailing contact@foresightxl.com. We will respond within 30 days in accordance with APP 12–13.

Complaints

If you have a concern about how we handle your personal information, please contact contact@foresightxl.com. We will investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992.

Changes to This Policy

Material changes will be posted on this page with 30 days’ notice and an updated “Last Updated” date. Continued use of the Service after that date constitutes acceptance of the revised Policy.

Last Updated: 24 February 2026