Last updated: 4 October 2026
This policy explains how the Plainsight Partners Portal (app.plainsightpartners.ai), run by Plainsight Partners, Sam Cordes, in Coffs Harbour, New South Wales, Australia ("we", "us"), collects, uses, stores and shares information. The portal guides a product or service from a real problem to a launched, measured business. We handle personal information in line with the Privacy Act 1988 (including the Australian Privacy Principles). Contact: hello@plainsightpartners.ai.
People who sign in: name and email address, the venture(s) they can access, and a sign-in cookie that keeps them signed in for up to 30 days. We keep a record of sign-ins for security.
Ventures and projects: each business's name, type, owners, goals, stage, and the records made while working through the method: agreements and roles, decisions and their reasons, costs and time, requirements, launch plans, test results, lessons and templates.
Research and evidence: pain point research reads public web pages and forums for a chosen niche and keeps short quotes from public posts with links to where they were found; we don't collect who wrote them beyond what appears in the quoted text. Ventures can also add their own evidence, such as interview notes, customer comments and survey answers, each labelled by where it came from.
Customer journeys and personas: descriptions of a venture's typical customers and their experience. Personas describe types of people, not real individuals.
Documents, recordings and transcripts: files a venture uploads, such as meeting or session transcripts and articles, used to draw out themes, requirements or content. Client session material is only added with the client's consent; anything that could identify a client is left out of anything produced from it, and nothing is published without a person's check.
Suppliers and products: supplier business contact details, quotes, minimum orders, lead times, product specifications, sample and test results (including photos), orders and shipments, and artwork files. Some of this is commercially sensitive and is kept within the venture.
Content: the text, images, videos and music created or uploaded to make posts, and their captions and approval history.
Performance information: statistics for a venture's own posts and channels (such as views, likes, comments and clicks), and summary sales or booking figures a venture adds or connects, used for reporting, stock and reorder planning and retention timing.
From TikTok, for a venture's own account: when the account is connected through TikTok's sign-in, TikTok gives us its profile identifier, username and display name, access tokens, and permission to publish videos to it. Before each post we ask TikTok for the account's current posting options (such as who may view the video), as TikTok requires. We do not receive the account's password or any other TikTok user's information.
From Meta, for a venture's own accounts: access tokens for its Facebook Page and Instagram account, its own posts, and their statistics. These are totals for its posts; the portal doesn't collect other people's profiles or private messages.
Consent records: what each person or client agreed to (for example recording, or use of their material), when, and any withdrawal.
To run the portal: signing in, keeping each venture's records, and guiding it through the method.
To research, plan, write requirements, test and launch, with AI assistance and a person's approval.
To create content and publish it to a venture's own accounts, and to report how it performs.
To keep the portal secure, fix problems, and meet legal and tax record-keeping obligations.
We do not sell information or use it for advertising. One venture's information is not shown to another venture or used to train AI.
DigitalOcean (Sydney, Australia), which hosts the portal, its database and its file storage.
Brevo (European Union), which sends sign-in code emails.
Anthropic (United States), whose AI, Claude, carries out research and drafts journeys, requirements and content from the information we give it for that task; under its commercial terms it does not use our information to train its models.
Google (United States), whose AI, Gemini, makes background images for videos from a short scene description written by Claude (it is not sent quotes, documents or personal information).
Meta (Facebook and Instagram), TikTok and other platforms a venture connects, to publish its own content.
Some of these are overseas. We choose reputable services with their own privacy protections, and send each only what it needs for its task.
Only people signed in to the portal with access to that venture, and the service providers above for their specific task. We disclose information otherwise only with consent or where the law requires or permits it, for example to comply with a court order or to prevent a serious threat to someone's safety.
The portal runs on DigitalOcean servers in Sydney, Australia, and can only be used after signing in. Information travels encrypted (HTTPS) and is stored with providers that encrypt it at rest; access tokens for social media accounts are additionally encrypted by the portal. Files are kept in private storage that only the portal can open. Development and testing happen on a separate copy that cannot publish anything, and the database is backed up daily.
Sign-ins end after 30 days, or when you sign out.
Venture records, research, evidence and content are kept while the venture is active so the work can be reviewed and reused, then archived or deleted on request, except where the law requires us to keep them (for example financial records).
Client session material follows the retention rules of the practice it came from, and is deleted sooner on request where the law allows.
TikTok access lasts 24 hours and is renewed automatically while the connection is in use, for up to a year. When a TikTok connection is removed, its tokens are deleted and the permission is withdrawn on TikTok's side too. Meta tokens are kept until the connection is removed, then deleted.
TikTok: in the portal, or in the TikTok app (Settings and privacy, Security and permissions, Apps and services).
Meta: in Facebook (Settings, Business integrations) or Instagram (Settings, Apps and websites).
The portal only uses three cookies, all needed for it to work: one that keeps you signed in (up to 30 days), one that remembers which venture you are working on (up to a year), and a short-lived one (10 minutes) used while connecting a TikTok account. There are no analytics, tracking or advertising cookies.
The portal is not for children and does not knowingly collect information about them.
You can ask to see, correct, export or delete information we hold about you, or withdraw a consent, by emailing hello@plainsightpartners.ai; we will respond within 30 days. If you are unhappy with how we handled your information, please tell us first; you can also contact the Office of the Australian Information Commissioner (oaic.gov.au).
We may update this policy; the date above shows the latest version.