Who we are
Fifthwave Digital operates the Fifthwave Digital website and Swell AI Governance, also known as Swell AI. References to “we”, “us” and “our” mean Fifthwave Digital.
Information we collect
We may collect contact and account information, including name, work email address, organisation, role and communications with us. We collect information submitted through demonstration, contact, support and member-offer walkthrough forms. Member-offer enquiries include the association offer used and the member-eligibility acknowledgement. For Swell AI customers, we process account, access and governance-record information that authorised users enter or upload to the service.
How we use information
We use personal information to respond to enquiries, provide and secure the service, administer trials and customer relationships, provide support, meet legal obligations, improve our services and protect our rights. We only use information for direct marketing where permitted by law. You can opt out at any time using the unsubscribe link or by contacting us.
Customer information in Swell AI
Customer governance records remain confidential to that customer and are not made available to other customers. Any use of customer data to provide, support or improve the Swell AI service is governed by the applicable customer agreement.
We may create and maintain a shared product catalogue using public information and properly de-identified, non-customer-specific product reference information. We do not use this process to identify a customer, reveal that it uses a product, or disclose its assessment answers, evidence, risks, controls, approvals or other confidential information.
Service providers and overseas handling
We use selected service providers to operate our website and service. Core Swell AI governance data is hosted in Sydney, Australia. Some providers may process limited service, security, support or website measurement information outside Australia, including in the United States. Where this is likely, we take reasonable steps to protect the information.
Cookies, analytics and advertising measurement
We use essential technologies to operate the website and remember your measurement preferences. Optional Google Analytics 4 measurement helps us understand website visits, campaign links and successfully received demo or walkthrough enquiries. Google Ads measurement helps us assess advertising. The existing Google tag is shared by these services rather than installed twice. For visits Cloudflare identifies as Australian, analytics starts automatically unless you have previously opted out. Advertising stays off by default. For other countries or an unknown location, optional Google measurement starts after you choose analytics or advertising measurement. We use Cloudflare country metadata without an external geolocation service. You can choose essential technologies only or analytics without advertising, and change your choice using Measurement preferences in the footer.
Google may receive browser, device, consent and public website-interaction information, including campaign parameters in links. We do not include names, email addresses, enquiry messages, Swell AI customer governance records, assessment answers, evidence, risks, controls or approvals in our Google measurement events. We do not enable enhanced conversions using contact details, Google Signals or advertising personalisation in this implementation. Enquiry success is measured after the website confirms that a request was received, not when someone visits a form or confirmation page.
We remember affirmative choices for up to six months. An essential-only opt-out remains in this browser until you change it or clear browser storage. An automatic Australian analytics default is not stored as consent. A visible analytics notice provides privacy details and a Turn off analytics control; Measurement preferences remains available in the footer. If you withdraw analytics consent, we stop optional measurement and remove the website measurement cookies and member-offer browser identifier that we control. Browser settings provide additional controls. Google may process measurement information outside Australia; see Google’s privacy information.
Member-offer measurement
When analytics is enabled by your choice or the Australian default, targeted member-offer pages use Cloudflare D1 to record association-level page views, calls to action and enquiry progress. A random browser identifier supports repeat-visit measurement; it is stored in your browser and recorded as a one-way hash. GA4 adds campaign and successful-enquiry reporting using the same measurement preference and Australian default. Advertising consent is not enabled for member-offer pages. With essential technologies only, optional member-offer visit events and persistent identifiers are not recorded. The form continues to work using a temporary identifier.
Completed member-offer enquiries and their successful-delivery record remain separate operational records in Cloudflare D1, so we can respond to the request. They remain separate from Swell AI customer governance data and are not uploaded as contact details to Google.
Security and retention
We use reasonable technical and organisational measures to protect information from misuse, loss and unauthorised access, modification or disclosure. We keep personal information only for as long as reasonably necessary for the purposes described above, legal obligations and legitimate business records.
Access, correction and complaints
You may request access to, or correction of, personal information we hold about you. You may also complain about how we handle personal information. Contact us through our Contact page. We will respond within a reasonable period. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.
Changes to this policy
We may update this policy from time to time. The current version will be published on this page with its effective date.