Jacaranda Agents Privacy Policy
This policy explains how Jacaranda Legal Pty Ltd (Jacaranda, we, us or our) handles personal information in Jacaranda Agents, our workflow assistant available through Microsoft Teams.
Information we handle
Depending on how you use the assistant, we may handle your Teams display name and account or tenant identifiers, conversation identifiers, messages you send, answers and assistant responses, workflow status and results, and technical records such as timestamps, selected model/provider, token-usage metadata, errors and tool events. Please do not send information that is not needed for your request.
How information is collected and used
Information is received through Microsoft Teams and the Microsoft Bot Service when you message the assistant. It is used to authenticate and authorise the request, operate the requested workflow, ask follow-up questions, return results, maintain workflow history, prevent duplicate processing, troubleshoot failures and protect the service.
The current release supports personal text chats and a limited set of read-only tools. It does not accept chat attachments or provide access to Jacaranda's business applications through workflow tools. These capabilities may change; this policy will be updated if the information handling changes.
Storage, providers and disclosures
Conversation history, questions, responses and workflow results are stored in the service's MariaDB database on Jacaranda's server. The current release has no automatic retention purge. Records therefore remain stored until an authorised operator deletes them or a retention process is introduced. Operational logs are designed not to include message bodies or secrets.
To generate a response, relevant conversation history and workflow information are sent to the model provider selected for that run. The configured providers may include OpenAI (for the Codex model adapter) and DeepSeek. The provider is selected by the service's routing configuration or an authorised user's explicit choice; a failed provider is not silently replaced with another provider. Microsoft also processes information as part of Teams and the Bot Service. These providers handle information under their own terms and privacy documentation. Provider processing and storage may occur outside Australia.
We may also disclose information to service providers who host, secure or maintain the service, and where required or authorised by law. We do not sell personal information.
Access, correction and complaints
You may ask us to access or correct personal information about you, or complain about our handling of it. Contact Jacaranda Legal through the contact details on jacarandalegal.com.au. We will review and respond to your request or complaint. You may also contact the Office of the Australian Information Commissioner if you are not satisfied with our response.
Security and changes
We use access controls and technical safeguards intended to protect information. No method of transmission or storage is completely secure. We may update this policy to reflect changes to the service; the effective date above indicates the latest revision.
This policy is intended to describe the current Jacaranda Agents service. Before publication, Jacaranda should verify the live provider configuration, hosting and retention practices, and the contact channel used for privacy requests.