Privacy Policy

The personal information Migration Desk holds for a firm, where it goes and who can read it.

• Each firm's records (clients, matters, documents, messages and billing) are stored against that firm, and every request is checked against the signed-in person's firm before anything is read or written. We test this separation and fix faults when we find them. If you ever see another firm's information, tell us straight away.
• Staff can read only what their role and permissions allow. Creates, changes and deletes on business records are written to the firm's activity log.
• Migration Desk does not sell client information and does not use it to train models.
• Some features send information to other companies, and some of those are outside Australia. The Sub-processors page lists each one, the country it is based in and what it receives. The firm is responsible for telling its own clients about these disclosures in its own privacy policy.
• The optional AI features send text to Anthropic in the United States. The assistant sends the question and, when asked from a matter, these facts: matter type, visa applied for, stage, status, occupation, anzsco, current visa, current visa ends. Document Extract sends document text only if an admin has ticked that setting. Social rewording sends the post text. We are still confirming Anthropic's retention terms, so keep client names, passport numbers and contact details out of questions.
• A firm can export its data at any time from Settings → Data Export, and can ask for its data to be deleted when it leaves.
• Questions or access requests go to the support address shown in Help.

Last updated 19 October 2026.