Privacy Policy

CleanEDI is operated by CleanEDI Pty Ltd, an Australian company. Our platform sits at the boundary between your systems and EDIFACT trading partners, handling B2B transaction data on your behalf. If you have any questions about this policy, contact us at privacy@cleanedi.com.

We collect data in three categories: Contact and account data. When you get in touch, request a demo, or become a customer, we collect your name, email address, company name, and any other details you provide. We use this to communicate with you and manage your account. Configuration data. To operate the platform, we store partner profiles, message mappings, transport credentials (AS2 and SFTP endpoints), webhook URLs, and other configuration you provide during onboarding. This data is necessary to process your EDIFACT messages. Message data. We process and temporarily store the EDIFACT messages sent to and from your trading partners. This includes the raw EDIFACT content and the normalised business data we produce from it. Message data is retained for 30 days on Foundation plans and 90 days on Scale and Enterprise plans for replay purposes, then deleted. We do not collect personal data about your end customers or trading partners beyond what is present in the EDIFACT messages themselves.

We use the data we collect to: Operate the CleanEDI platform and process your EDIFACT messages. Communicate with you about your account, support requests, and service updates. Diagnose and fix issues with message processing. Improve the platform based on usage patterns and feedback. We do not use your message data to train machine learning models. We do not sell your data to third parties. We do not use your data for advertising.

CleanEDI runs on Microsoft Azure. By default, all data for APAC customers is stored in Azure Australia East (Sydney). We do not replicate your data to overseas regions without your explicit agreement. Enterprise customers can request dedicated deployments in specific Azure regions to meet their own data residency obligations.

We share data only where necessary to operate the service: Microsoft Azure. Our infrastructure provider. Your data is stored and processed on Azure. Microsoft's data processing terms apply at the infrastructure level. No other third parties receive your message data or configuration data. We do not use analytics tools that process message content. If we are required by law to disclose data, we will notify you unless legally prohibited from doing so.

Message data is retained for the duration specified in your plan (30 days for Foundation, 90 days for Scale and Enterprise) and then permanently deleted. Configuration data is retained for the duration of your contract and deleted within 30 days of contract termination unless you request earlier deletion. Contact and account data is retained for as long as your account is active and for a reasonable period afterward for legal and business purposes.

Under the Australian Privacy Act 1988 and, where applicable, the GDPR, you have the right to: Access the personal data we hold about you. Request correction of inaccurate data. Request deletion of your data, subject to legal retention obligations. Object to or restrict certain processing. Request a copy of your data in a portable format. To exercise any of these rights, contact us at privacy@cleanedi.com. We will respond within 30 days.

We take reasonable steps to protect your data. All data is encrypted in transit using TLS and at rest using AES-256. Access to production systems is restricted to authorised personnel only. For a full overview of our security practices, see our security page at cleanedi.com/security.

Our website uses minimal cookies. We use a session cookie to remember your theme preference (light or dark mode). We do not use advertising cookies or cross-site tracking cookies. We use Vercel Speed Insights to measure page performance. This collects anonymised performance metrics and does not identify individual users.

We may update this policy from time to time. When we do, we will update the date at the bottom of this page. If the changes are material, we will notify existing customers by email.

For privacy questions or to exercise your rights, contact us at privacy@cleanedi.com. CleanEDI Pty Ltd Adelaide, South Australia, Australia