Privacy

Your information, plainly

What aihops keeps about you, where it's stored, who else sees it, how long we keep it, and how to see it, change it or delete it.

Last updated 30 October 2026.

Who we are

aihops is operated by Moir Holdings Pty Ltd, ABN 34 135 150 837, an Australian company ("we"). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988. Questions about your information go to privacy@aihops.com.au, where an AI agent replies and a person reads every message.

What we keep

Your account. Your email address and the sign-in id that comes with it, the name and icon you choose to be shown by, and when you joined.
What you put in aihops. The documents you upload (HTML, PDF and Word files) and each version of them, your comments and replies, your private notes and groups, your personas, folders and priorities.
What you do. An audit trail of the actions you take: uploads, opens, shares, comments, exports and the rest. While a document page is open, visible and in use, it also measures how long you read, by a small signal every 30 seconds. The owners of a document see how often you have opened it and how long you have read it. On a collaboration, everyone else on it sees, while you have it open, that you're there, roughly where you are in it and whether you're reading or writing a comment (never what you write, or that you're writing in private); we keep that only until you leave the page.
The people you share with. The email addresses you give us, so we can tell those people a document is waiting for them.
Your plan. Your plan, your AI uses, and the ids that link your account to Stripe. We never see or keep your card.
Your agreement to our terms. Which version of the terms of service you agreed to, and when.
Your organisation, if you ask. If you choose Use my email address to personalise aihops on your Account page, what we work out about the organisation at your email's domain: its name, what it does, its industry and some reviewers suggested for it. Only you see it, and you can forget it on the same page.
Connected AI apps. If you connect Claude or ChatGPT to aihops: which app, when you connected and last used it, and a one-way hash of its keys, never the keys themselves.
Email you send us. Messages to any aihops address, and the replies. Documents you email to share@aihops.com.au are kept as documents in your account, like an upload; we keep a one-way hash of each message's id, so it's taken only once.
Technical logs. Records of requests and errors in the app, which we use to keep it working and secure.

This website sets no cookies and runs no trackers. The app uses one sign-in cookie, and your browser's own storage for things like how you like your lists sorted.

What we use it for

To run aihops: showing your documents to the people you share them with, and keeping their history.
To email you when a document is shared with you, when there's a new version, when a document you're on changes how it's shared, and when everyone has finished a review you own. You can turn each of these off on your Account page.
To run the AI reviews and consolidations you ask for.
To take payment and keep track of your plan.
To answer your email, keep aihops secure and stop misuse.

We don't sell your information, we don't show advertising, and we don't use your documents or comments to train AI models.

People on your documents see your name and what you add for everyone. Your private notes, and your comments on your own copy of a shared document, are seen by you alone, or by the private group you chose.
Microsoft hosts aihops in Azure's Australia East region, stores everything in it, signs you in, and sends your sign-in codes.
Anthropic, in the United States, runs the AI. A document's text goes to its Claude API only when someone chooses an AI review or a consolidation. For a consolidation, the comments everyone on the document can see go too, with their authors' names, never their email addresses. Private notes, and people's comments on their own copy, never go. Anthropic's commercial terms don't let it train its models on what we send. Our email agents also use Anthropic's Claude API to read and answer email sent to aihops. If you ask us to personalise aihops from your email address, we read the public home page at your email's domain and send Claude the domain and that page's text, nothing about you; what it works out then goes with your own AI reviews and consolidations.
Anthropic or OpenAI, if you connect Claude or ChatGPT to aihops: what that app reads from aihops for you goes to its maker as part of your conversation, under your own agreement with them. We don't send them anything else.
Twilio SendGrid, in the United States, delivers our emails. They carry document titles, names, versions and links, never the text of comments.
Stripe takes payments. It gets your name, email address and card, never your documents.
Google, only if you choose to sign in with Google.
Anyone else only when the law requires us to, and then only what it requires.

Some of these companies are in the United States, so using those features means your information goes there. Everything you put in aihops is stored in Australia.

How long we keep it

Your account and documents are kept while your account exists, until you or the documents' owners delete them.
A deleted document disappears for everyone straight away. Its owners can still see its history for 30 days; then we purge it for good, with its files, comments and history.
The audit trail can't be edited, so it's kept with its document.
Technical logs are kept for 30 days. Our storage keeps a deleted file recoverable for 14 days after it is purged, in case of a mistake, and then it is gone.
Invoices are kept by Stripe for as long as Australian tax law requires.

Deleting your account

Anyone can delete their account from their Account page. It deletes the documents you alone own, with everything in them. On other people's documents it takes you off, deletes your private notes and your comments, and takes your name and address off what stays. A comment someone replied to stays, as "This comment was deleted with its author's account", so their reply still reads. We keep how many AI uses you had had, by your sign-in id and a one-way hash of your address, so a free allowance doesn't start again, and one record that an account was deleted. Your sign-in itself is Microsoft's, and it stays with them.

Seeing, changing and complaining

See it. Your Account page shows what aihops holds about you, and everything you've done. For anything more, write to privacy@aihops.com.au.
Change it. Change the name you're shown by on your Account page. Your email address comes from how you sign in.
Choose your emails, and disconnect Claude or ChatGPT, on your Account page.
Complain. Write to privacy@aihops.com.au and a person will look into it. If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner.

Keeping it safe

Everything in aihops needs a sign-in. A document's own scripts run walled off from aihops, so they can't see anyone's session or anyone else's work. Data is encrypted in transit and at rest, and every action is recorded. To report a security problem, see Security.

Changes

When this policy changes we'll update it here, with the date at the top.