Legal

Privacy Policy

CourseMatch Pty Ltd (ACN 693 408 409)  ·  Last updated: April 2026

1

About This Policy

CourseMatch Pty Ltd (we, us, our) operates the CourseMatch platform, an online service that helps secondary school students explore post-school study and career pathways.

This Privacy Policy explains how we collect, use, store and disclose personal information in connection with the CourseMatch platform. It applies to all users, including students accessing CourseMatch through a school licence or a direct access code.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We are committed to handling personal information responsibly, particularly given that many of our users are under 18.

If you have questions about this policy or wish to exercise your privacy rights, please contact us at contact@coursematch.au.

2

Information We Collect

2.1 Account Information

When you create an account, we collect basic identifying information such as your name, email address, date of birth, and password. Where you register through a school, we also collect your school email address and year group. Gender is collected optionally and on a self-reported basis.

2.2 Assessment and Platform Data

As you use the CourseMatch platform, we collect information generated by your use of the service. This includes your responses to assessment activities, the results and recommendations produced for you, and any written responses you provide in free-text fields.

We also collect information about when you use the platform, such as when you start and complete different parts of the assessment. We do not collect detailed behavioural data such as mouse movements or individual keystrokes.

2.3 Feedback

Where you choose to provide ratings or written feedback on the platform, we collect and store that information.

2.4 Technical Data

We use session cookies to keep you logged in. For certain access methods, we may collect your IP address for security and audit purposes. We do not use cookies for advertising or cross-site tracking.

3

How We Use Your Information

We use the information we collect to:

  • Provide and operate the CourseMatch platform
  • Use AI-assisted analysis to generate written summaries of your personality, trait, and career results, to suggest responses to study survey questions based on previous results, and to produce your final course recommendations.
  • Verify your identity and manage your account
  • Send you transactional communications such as verification emails and password resets
  • Improve and develop our services
  • Meet our legal and contractual obligations

We do not use your personal information for marketing or advertising without your separate, explicit consent.

4

Disclosure of Information

4.1 Service Providers

We share information with a small number of third-party service providers who help us operate the platform. These providers act on our instructions and are not permitted to use your information for their own purposes.

Amazon Web Services (AWS)

Our platform is hosted on AWS infrastructure in the Asia Pacific (Sydney) region. All data is stored in Australia.

OpenAI

As of the date of this policy, OpenAI's API data usage policy states that data submitted via the API is not used to train or improve OpenAI's models unless a customer explicitly opts in. We have not opted in. API data may be retained by OpenAI for up to 30 days for abuse monitoring purposes, after which it is deleted. For OpenAI's current policy, see platform.openai.com/docs/guides/your-data.


OpenAI operates infrastructure in the United States. By using the CourseMatch platform, you acknowledge that selected assessment responses may be processed through OpenAI's US-based systems for the purpose of generating your recommendations. Before doing so, we have taken reasonable steps to satisfy ourselves that OpenAI's data handling practices provide protections substantially similar to those required under the Australian Privacy Principles.

4.2 Schools

Where you access CourseMatch through a school licence, the school is responsible for facilitating your access to the platform. We do not share your individual assessment results or personal information with your school, teachers, or school administrators. This may change in future and we will notify you before it does.

4.3 No Sale of Data

We do not sell, rent, or trade your personal information to any third party, including universities, TAFEs, course providers, or advertisers.

4.4 Legal Requirements

We may disclose your information if required to do so by law, or if we believe disclosure is necessary to protect the rights, property, or safety of CourseMatch, our users, or the public.

5

AI and Model Training

We do not use your personal information or assessment data to train artificial intelligence or machine learning models, including our own or those of third parties.

6

Data and Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our platform uses encryption in transit and at rest, access controls, and infrastructure security measures appropriate to the nature of the data we hold.

No method of transmission over the internet is completely secure. If you have concerns about the security of your information, please contact us at contact@coursematch.au.

7

Data and Retention

We retain your personal information for as long as your account is active, and for up to five years from the date of your last active use of the platform, or as required by law. This period reflects the time it typically takes for a student's post-school study and career decisions to come to fruition.

Where an account has been inactive for three or more years, we may contact you to confirm you wish to keep your account before taking any action. If we are unable to reach you, we may delete or anonymise your account at our discretion.

When an account is deleted, your personal information is removed. Anonymised, non-identifiable records may be retained for service improvement purposes.

8

Deleting Your Account

You can delete your account at any time from within the CourseMatch platform. Account deletion is permanent and irreversible. On deletion, your personal information and assessment data are removed from our systems. We recommend saving any results you wish to keep before deleting your account.

You can also request deletion by contacting us at contact@coursematch.au. We will process your request within 30 days.

9

Your Privacy Rights

Under the Privacy Act 1988 (Cth), you have the right to request access to and correction of the personal information we hold about you. You also have the right to make a complaint if you believe we have not handled your information in accordance with the Australian Privacy Principles.

To make an access request, correction request, or privacy complaint, please contact us at contact@coursematch.au. We will respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10

Children's Privacy

CourseMatch is intended for use by secondary school students. The platform is intended for students aged 15 and over. We do not knowingly collect more personal information from young people than is necessary to provide the service.

Where the platform is accessed through a school, the school is responsible for managing access and for obtaining any parental or guardian consents required under its own policies. We encourage students to discuss their use of CourseMatch with a parent, guardian, or trusted adult.

11

Cookies

We use cookies solely to manage authenticated sessions on the CourseMatch platform. We do not use advertising cookies, third-party tracking cookies, or analytics cookies.

12

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or via a notice on the platform before changes take effect. The date at the top of this document reflects when it was last updated.

13

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: contact@coursematch.au

Entity: CourseMatch Pty Ltd (ACN 693 408 409)