The private bit

Your leads, your prices, your quotes, your notes — only ever sent to AI providers that don't train on it and don't keep it, and we check that on every request. Your files sit in Fort Knox in Sydney and stay there. Not shared with the bloke down the road. Not sold. Turn AI off, export the lot, or bin it — one click.

Private AI · never trained on your stuff · files stay in Sydney

What the AI sees, per feature

Feature	What it sees	What it never sees
The Monday list, tags, value band, summary	Council row fields only (description, category, stage, dates, cost, company applicant, suburb)	Your name, email, prices, notes
Ranking	Your own 👍/👎/saved/won signals, as numbers	Anyone else's feedback
Ask	Your question + rows from your regions	Other customers' questions or rows outside your plan
Quotes, call scripts, letters, briefs	The row, your rate card and business kit, your plan extract	Owner names or contact details (we never look them up)
Fort Knox	A document only when you click an action that needs it, and never one you've marked 'keep AI out'	Your vault as a training set — it isn't one

Where it runs

Every model call goes through OpenRouter with a per-request policy that denies data collection and forbids fallbacks to any provider outside our allow-list of zero-retention providers. We check that policy is on every request and fail the build if any code path talks to a model vendor directly. We don't claim the model itself runs in Sydney — OpenRouter can't pin a region — but your files do: Fort Knox is Amazon S3 in Sydney with a separate encryption key per customer.

OpenRouter data policy and per-provider retention statements last checked 2026-09-06. Re-checked monthly with the standards watcher.

How long we keep things

Thing	Kept for
Council rows (public data)	Indefinitely — it's the product
Raw AI inputs/outputs for quotes, Ask and narratives	30 days, for your own history, then hard-deleted
AI call logs	Hashes and token counts only
Everything of yours after you cancel	30 days' grace, then purged — files, rows and your encryption key

Your switches

AI off — Turn the AI off. You'll still get the list, just without the smart bits.
Personalisation off — ranking falls back to value band and recency only.
Export — a zip of every CSV and PDF, any time, from Settings.
Delete — No hard feelings. Your stuff stays in Fort Knox for 30 days, then it's gone for good. Export first if you want it.

Changelog

2026-09-06 — first published.

Questions: privacy@approvedthisweek.com.au