Privacy Policy

CourseMatch Pty Ltd (ACN 693 408 409) ("CourseMatch", "we", "us" or "our") operates the CourseMatch platform, an online service that helps secondary school students explore post-school study and career pathways.

This Privacy Policy explains how CourseMatch collects, uses, stores and discloses personal information in connection with the CourseMatch platform and related services.

CourseMatch is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

CourseMatch collects personal information directly from students and determines the purposes and means of handling that information.

Schools may facilitate student access to the Platform, but:

• schools do not provide student personal information to CourseMatch as part of the ordinary operating model;
• schools do not determine how CourseMatch handles information collected through the Platform; and
• schools do not act as a data controller or processor in relation to CourseMatch-held student data.

CourseMatch may collect: name, personal email address, school email address, date of birth, password, year group, gender (where optionally self-reported), assessment responses, personality, trait, career and course preference data, study pathway preferences, free-text responses, AI-generated results, summaries and recommendations, feedback and ratings, support and correspondence records, session cookies, IP address (where collected for security and audit purposes), and limited technical and usage information necessary to operate and secure the Platform.

CourseMatch does not collect detailed behavioural data such as mouse movements or individual keystrokes.

CourseMatch may collect personal information:

• directly from students when they register, log in, complete assessments, submit feedback or otherwise use the Platform;
• from a parent or guardian, where relevant;
• through a school or educational institution where access is facilitated under a school arrangement; and
• automatically through session cookies, security logs and related technical systems.

CourseMatch uses personal information to:

• provide and operate the Platform;
• create and manage user accounts;
• verify identity and manage access;
• generate personality, trait, career and course matching outputs;
• generate AI-assisted written summaries and recommendations;
• send transactional and service-related communications;
• respond to enquiries, support requests and feedback;
• improve and develop the Platform;
• maintain security and integrity; and
• comply with legal, regulatory and contractual obligations.

CourseMatch does not use personal information:

• for advertising or marketing without separate, explicit consent; or
• for profiling unrelated to Platform functionality.

CourseMatch uses AI-assisted analysis to generate:

• written summaries of personality, trait and career results;
• suggested responses to study survey questions based on previous results; and
• final course recommendations.

To do this, selected assessment responses may be processed through OpenAI's API using infrastructure in the United States.

CourseMatch does not intentionally transmit directly identifying information (such as name or email address) to OpenAI for those purposes. However, free-text responses may contain identifying information.

CourseMatch has not opted in to OpenAI's API data being used to train OpenAI's models.

Platform data is otherwise stored in Australia using AWS infrastructure in Sydney.

CourseMatch may disclose personal information:

• to service providers that assist in operating the Platform, including AWS and OpenAI;
• to professional advisers, insurers and contractors;
• where required or authorised by law; and
• in connection with a corporate transaction, subject to confidentiality controls.

CourseMatch does not share a student's individual assessment results or personal information with the student's school, teachers or school administrators, except where required by law or with the student's express consent.

CourseMatch does not sell, rent or trade personal information to any third party, including universities, TAFEs, course providers or advertisers.

CourseMatch does not use personal information or assessment data to train artificial intelligence or machine learning models, including CourseMatch's own models or those of third parties.

CourseMatch is intended for secondary school students aged 15 years and over.

Where a user is under 18, CourseMatch relies on the user, the user's school and/or the user's parent or guardian (as applicable) to ensure that appropriate authorisation has been obtained for the collection, use and disclosure of personal information, including overseas disclosure and AI-assisted processing.

CourseMatch does not make automated decisions that have legal or similarly significant effects.

Recommendations are indicative only and do not determine admission, enrolment, eligibility, employment or other outcomes.

CourseMatch takes reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Those measures include, at the date of this policy:

• encryption in transit and at rest;
• access controls;
• authentication controls;
• infrastructure security measures appropriate to the nature of the information held; and
• reasonable service provider safeguards.

CourseMatch retains personal information:

• for as long as the relevant account remains active; and
• for up to 5 years from the user's last active use of the Platform,

unless a longer period is required or authorised by law.

Where an account has been inactive for a prolonged period, CourseMatch may contact the user before taking steps to delete or anonymise the account.

A user may delete an account at any time from within the Platform or by contacting contact@coursematch.au.

CourseMatch will process deletion requests within 30 days, subject to any lawful basis for retention.

Requests for access, correction or privacy complaints may be made to:

CourseMatch aims to respond within 30 days.

If a person is not satisfied with CourseMatch's response, that person may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

CourseMatch uses cookies only for essential session management and platform functionality, as described in the Cookie Policy.

CourseMatch may update this Privacy Policy from time to time, including to reflect changes in law, regulatory guidance, technology, AI practices, service features or business operations.

If a material change is made, notice may be given by email, a platform notice or website update.