Who we are and what this policy covers
ZH is the brand of Zed Haque Pty Ltd. Zed Haque Pty Ltd (ABN 47 647 964 887) provides this public website and the authenticated AI Governance application. This policy explains how we handle personal information across those services.
Information we collect
Depending on how you use our services, we may collect contact, account, application, technical, security and usage information that you provide or that is necessary to operate the service.
Account sign-in and verification emails
We use Microsoft Entra External ID to provide account sign-in and email verification for AI Governance by ZH. Your email address and full name are processed through this service to create and manage your sign-in account. Microsoft sends the one-time verification emails, which may contain Microsoft branding and links to Microsoft's privacy information. This Privacy Policy explains how Zed Haque Pty Ltd handles personal information for our services.
How we use information
We use information to provide, secure and improve our services, authenticate access, produce requested assessment outputs, respond to support, understand service use, investigate misuse and meet legal obligations. We do not sell personal information.
Public website measurement
We use Microsoft Azure Application Insights and PostHog to understand use of this public website. Application Insights receives allowlisted events for page views, learning-library starts, lesson progress, workspace selections and assessment-link selections. Those events contain the page path and, where relevant, the lesson name, direction, link position or selected starting journey. Query strings and fragments are removed. Application Insights does not receive email addresses, account or organisation identifiers, assessment answers, uploaded material, free text or raw IP addresses through this measurement endpoint.
PostHog receives automatic page-view and page-leave events and related technical context, such as the page URL and title, referrer, browser and device information, anonymous browser and session identifiers, and engagement measures. Click and form autocapture, session recording, person profiles and IP capture are disabled. We do not identify public-site visitors to PostHog with their account or organisation details.
Service providers and overseas processing
Public website measurement is sent to Application Insights in Australia East and to PostHog through its European Union ingestion endpoint. We also use service providers including Microsoft Azure and Entra for the authenticated service. Providers may process information in Australia, the European Union, the United States and other locations where they or their subprocessors operate. Use of PostHog’s European Union endpoint does not mean all service data stays in the European Union.
Retention and security
Application Insights public measurement records are configured for 30 days. PostHog retention is controlled in the provider project settings and is not fixed in this website’s source code. We otherwise retain personal information only as long as reasonably needed for its purpose, service delivery, disputes, security and legal obligations. No internet or storage system is completely secure.
Access, correction and complaints
For privacy questions or requests to access, correct or delete your personal information, email help@zedhaque.com. Do not include passwords or sensitive assessment material in your initial message.