Privacy Policy

Your information, handled carefully.

Effective 31 August 2026. This policy explains how Fifthwave Digital handles personal information through its website and Swell AI Governance service.

Who we are

Fifthwave Digital operates the Fifthwave Digital website and Swell AI Governance, also known as Swell AI. References to “we”, “us” and “our” mean Fifthwave Digital.

Information we collect

We may collect contact and account information, including name, work email address, organisation, role and communications with us. We collect information submitted through demonstration, contact and support forms. For Swell AI customers, we process account, access and governance-record information that authorised users enter or upload to the service.

How we use information

We use personal information to respond to enquiries, provide and secure the service, administer trials and customer relationships, provide support, meet legal obligations, improve our services and protect our rights. We only use information for direct marketing where permitted by law. You can opt out at any time using the unsubscribe link or by contacting us.

Customer information in Swell AI

Customer governance records remain confidential to that customer and are not made available to other customers. Any use of customer data to provide, support or improve the Swell AI service is governed by the applicable customer agreement.

We may create and maintain a shared product catalogue using public information and properly de-identified, non-customer-specific product reference information. We do not use this process to identify a customer, reveal that it uses a product, or disclose its assessment answers, evidence, risks, controls, approvals or other confidential information.

Service providers and overseas handling

We use selected service providers to operate our website and service. Core Swell AI governance data is hosted in Sydney, Australia. Some providers may process limited service, security, support or website measurement information outside Australia, including in the United States. Where this is likely, we take reasonable steps to protect the information.

Cookies, analytics and advertising measurement

Our website uses essential technologies and website measurement tools. We use the Google tag associated with Google Ads to understand visits to our public website and measure whether advertising results in actions such as a demo request. Google may receive browser, device and website-interaction information when this technology operates, subject to Google’s own privacy terms and applicable consent requirements. We do not send Swell AI customer governance records, assessment answers, evidence, risks, controls or approvals to Google through this website measurement. You can manage cookies and similar technologies through your browser settings.

Security and retention

We use reasonable technical and organisational measures to protect information from misuse, loss and unauthorised access, modification or disclosure. We keep personal information only for as long as reasonably necessary for the purposes described above, legal obligations and legitimate business records.

Access, correction and complaints

You may request access to, or correction of, personal information we hold about you. You may also complain about how we handle personal information. Contact us through our Contact page. We will respond within a reasonable period. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy from time to time. The current version will be published on this page with its effective date.