SHANBOB is currently in private pilot. The following document constitutes the Terms of Service, Disclaimer, and Privacy Policy that govern your access to and use of the SHANBOB platform. It has been drafted in plain English for clarity but is intended to have full legal effect under Australian law. Before relying on these Terms commercially, or before using the Platform for regulated activity, you should obtain independent legal advice from an Australian lawyer experienced in technology, privacy, and consumer law. By using the Platform you confirm that you have read, understood, and accepted these Terms.
01Definitions
In these Terms of Service, unless the context otherwise requires, the following capitalised terms have the meanings set out below:
- "SHANBOB", "the Platform", "the Service"
- means the SHANBOB investigative-intelligence software platform accessible at shanbob.com and its associated subdomains, applications, and application programming interfaces.
- "Operator", "we", "us", "our"
- means the natural person operating SHANBOB from Sydney, New South Wales, Australia, and any successors, assigns, agents, or contractors authorised to act on their behalf.
- "User", "you", "your"
- means any natural or legal person who accesses or uses the Platform, whether as an account holder or otherwise, and includes any employee, contractor, or agent acting on behalf of an organisation that is a User.
- "Terms"
- means these Terms of Service together with the Privacy Policy, Acceptable Use Policy, and any supplementary terms incorporated by reference.
- "ACL"
- means the Australian Consumer Law set out in Schedule 2 of the Competition and Consumer Act 2010 (Cth).
- "Privacy Act"
- means the Privacy Act 1988 (Cth), as amended from time to time, and includes the Australian Privacy Principles (APPs) and the Notifiable Data Breaches scheme.
- "Personal Information"
- has the meaning given in section 6 of the Privacy Act.
- "Third-Party Data"
- means data ingested by the Platform from publicly available corporate registers and other primary sources, including but not limited to the Australian Securities and Investments Commission (ASIC), the Australian Business Register (ABR), and equivalent registers in other jurisdictions.
- "Audit Log"
- means the record maintained by the Platform of User activity, including search queries, entities viewed, exports, and case interactions, for the purpose of accountability and investigative work product.
- "Confidential Information"
- means non-public information of either party, including User case notes and Operator methodology, identified as confidential or that would reasonably be understood to be confidential.
02Acceptance of Terms
By accessing, registering for, or using the Platform in any way, you agree to be legally bound by these Terms. If you are using the Platform on behalf of an organisation, you represent and warrant that you have the authority to bind that organisation, and references to "you" include that organisation.
If you do not agree to any part of these Terms, you must not access or use the Platform. Your only remedy if you find any provision unacceptable is to cease using the Platform and close any account you have created.
These Terms constitute the entire legally binding agreement between you and the Operator in relation to the Platform and supersede any prior agreements, representations, or understandings, whether written or oral.
You confirm that you are at least 18 years of age, or otherwise have legal capacity to enter into a binding contract under the laws applicable to you, and that you are not a person barred from receiving services under the laws of Australia or any other applicable jurisdiction.
03Service Description & Disclaimer of Warranties
SHANBOB is an investigative-intelligence terminal that ingests, normalises, resolves, traverses, and presents information sourced from publicly available corporate registers. The Platform is provided "as is" and "as available", and your use of the Platform is at your sole risk.
To the maximum extent permitted by law, and subject to section 04 below, the Operator makes no representation, warranty, condition, or undertaking — express or implied, statutory or otherwise — including without limitation any warranty:
- that the Platform or the Third-Party Data presented through it will be accurate, complete, current, reliable, or free from errors or omissions;
- that the Platform will be available without interruption, secure, or free from defects, viruses, or other harmful components;
- that the Platform will be fit for any particular purpose or that its operation will meet your specific requirements;
- that information accessed through the Platform is verified, authenticated, or independently confirmed by the Operator;
- of non-infringement, merchantability, or quiet enjoyment.
Source registers may contain errors, omissions, stale or superseded information, or data that has been corrected, amended, deregistered, or withdrawn. The Operator does not independently verify the content of source registers and bears no responsibility for inaccuracies originating from such sources.
The Platform does not constitute legal advice, financial advice, accounting advice, taxation advice, investment advice, credit-rating advice, insolvency advice, regulatory advice, or any other form of professional advice. Nothing displayed on or accessed through the Platform should be relied upon as a substitute for:
- independent professional advice from a qualified practitioner;
- proper Know Your Customer (KYC), Anti-Money Laundering (AML), or Customer Due Diligence (CDD) verification under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) or equivalent laws;
- any other verification, due diligence, or compliance process that you are required by law, regulation, contract, or professional standards to perform.
You are solely responsible for independently verifying any information obtained from the Platform before acting on it, and for ensuring that your use of such information complies with all laws and obligations applicable to you.
If you identify an error or inaccuracy in data displayed through the Platform, please notify the Operator at hello@shanbob.com so that the matter can be investigated and, where appropriate, addressed or referred to the source registry.
04Australian Consumer Law
Nothing in these Terms is intended to exclude, restrict, or modify the application of any provision of the Competition and Consumer Act 2010 (Cth), the ACL, the Privacy Act, or any other Commonwealth, State, or Territory legislation, where to do so would contravene that legislation or cause any part of these Terms to be void, voidable, or unenforceable.
You may have rights under the ACL, including consumer guarantees that cannot be excluded, restricted, or modified by agreement (the "Non-Excludable Guarantees"). Nothing in these Terms limits or modifies those Non-Excludable Guarantees.
To the extent that the Operator’s supply of the Platform to you constitutes a supply of services to a consumer within the meaning of the ACL, and the Operator is liable for a breach of a Non-Excludable Guarantee, the Operator’s liability for that breach is — to the extent permitted by section 64A of the ACL and at the Operator’s election — limited to one or more of the following:
- the resupply of the affected services; or
- the payment of the cost of having the affected services supplied again.
The limitation in this section 04 does not apply if it would be unreasonable for the Operator to rely on it in the circumstances, or where the relevant goods or services are of a kind ordinarily acquired for personal, domestic, or household use or consumption (in which case section 64A may not be available to the Operator).
If you are not a consumer within the meaning of the ACL, the limitations and exclusions set out elsewhere in these Terms (including in section 10 below) apply to the maximum extent permitted by law.
05Account Terms & Authentication
Account creation
To access most functionality of the Platform you must register an account by providing a valid email address and creating a password. You must provide accurate, current, and complete information during registration and keep that information up to date.
Credential security
You are responsible for maintaining the confidentiality of your password and for all activity that occurs under your account. You must notify the Operator immediately at privacy@shanbob.com if you become aware of any unauthorised access to, or use of, your account.
Non-transferability
Accounts are personal to you and may not be sold, transferred, assigned, or shared with any other person without the Operator’s prior written consent. Where an account is registered to an organisation, the organisation is responsible for ensuring that only authorised personnel access it.
Audit trail
The Platform maintains an Audit Log of activity associated with your account. The Audit Log is a feature of the Platform — it is part of the investigative work product, supports accountability, and may be retained even after account closure to the extent required by law or by professional standards applicable to you.
Suspension and termination
The Operator may suspend, restrict, or terminate your account at any time, with or without notice, where the Operator reasonably believes that you have breached these Terms, or that your continued access poses a security, legal, or reputational risk to the Operator, other Users, or any third party.
06Privacy Policy
The Operator is committed to handling Personal Information in accordance with the Privacy Act, the APPs, and applicable Australian privacy law. This Privacy Policy describes how the Operator collects, uses, stores, discloses, secures, retains, and deletes Personal Information in connection with the Platform.
Personal Information we collect
- Account information: your email address and a salted, one-way hash of your password. Plaintext passwords are never stored.
- Usage data: search queries you submit, entities viewed, exports generated, case interactions, and other activity logged by the Audit Log.
- Technical data: your IP address, browser user-agent, session identifiers, and timestamps, processed for security, abuse prevention, rate limiting, and platform integrity.
- Communications: the content of correspondence you send to the Operator, including email to support, privacy, or legal addresses.
How and why we use Personal Information
- to provide, secure, maintain, and improve the Platform;
- to authenticate your identity and operate the account-management functions of the Platform;
- to create and preserve the Audit Log as part of the investigative work product associated with your account;
- to communicate with you about your account, security incidents, material changes to the Platform or these Terms, and to respond to your enquiries;
- to detect, investigate, and prevent unauthorised access, abuse, fraud, or breaches of these Terms;
- to comply with legal obligations, including responding to lawful requests from courts, regulators, or law-enforcement agencies.
The Operator does not sell your Personal Information, does not use it for behavioural advertising, and does not share it with third parties for marketing purposes.
Where Personal Information is stored
Account data and Audit Log entries are stored in a Postgres database operated by Supabase, Inc. and hosted in the ap-southeast-2 (Sydney) region. Personal Information is encrypted at rest and in transit. Database-level row-level security ensures that Users can only access their own account data.
Sub-processors
The Operator uses the following third-party sub-processors to provide the Platform:
- Netlify, Inc. — static-site hosting and edge-function compute.
- Supabase, Inc. — managed Postgres database and authentication service, Sydney region.
- Google LLC (Google Fonts) — typography delivery; processes requesting IP addresses.
Each sub-processor is contractually obligated to handle Personal Information in accordance with applicable law. The Operator will update this list if material sub-processor changes occur.
Disclosure to third parties
The Operator will disclose Personal Information only:
- to sub-processors strictly for the purposes set out above;
- where required by law, court order, subpoena, or lawful regulator request;
- where reasonably necessary to investigate or respond to a security incident, suspected breach, or actual or threatened legal claim;
- with your express consent.
Cross-border data transfer
Primary storage of your Personal Information is in Australia (Sydney). Some sub-processors may process metadata (for example, edge-routing data) outside Australia. Where this occurs, the Operator takes reasonable steps to ensure that such processing complies with APP 8 and that recipients are subject to enforceable privacy obligations comparable to those in the Privacy Act.
Your rights under the Privacy Act
- Access (APP 12): you may request a copy of the Personal Information the Operator holds about you. The Operator will respond within a reasonable time, generally within 30 days.
- Correction (APP 13): you may request correction of any Personal Information that is inaccurate, out of date, incomplete, or misleading.
- Deletion: you may request deletion of your account and associated Personal Information. Audit Log entries may be retained where required by law or for accountability reasons (see Retention below).
- Complaint: if you believe the Operator has breached the Privacy Act or APPs, please first lodge a complaint with the Operator at privacy@shanbob.com. If your complaint is not resolved to your satisfaction, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Retention
Account data is retained while your account is active. Following account closure, account data is deleted from primary storage within 30 days, except where retention is required by law, professional standards, or for legitimate Audit Log purposes. Audit Log entries may be retained for up to seven (7) years to support accountability for investigative work product, consistent with professional record-keeping standards.
Notifiable data breaches
If a data breach occurs that is likely to result in serious harm to individuals whose Personal Information is involved, the Operator will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.
Cookies and tracking
The Platform uses a single essential session cookie required for authentication. The Platform does not use analytics cookies, advertising cookies, or third-party tracking technologies.
Children
The Platform is not directed at, and not intended for use by, persons under 18 years of age. The Operator does not knowingly collect Personal Information from children. If you become aware that a child has provided Personal Information to the Operator, please contact privacy@shanbob.com so the information can be deleted.
Security
The Operator implements reasonable technical and organisational security measures to protect Personal Information, including HTTPS in transit, encryption at rest, database row-level security, salted password hashing, rate limiting, and access logging. No system is impenetrable; the Operator does not warrant absolute security but undertakes to investigate and respond promptly to any suspected incident.
07Acceptable Use Policy
The Platform is intended for legitimate investigative, compliance, research, journalistic, regulatory, and academic purposes. By using the Platform you agree that you will not, and will not permit any other person to:
- use the Platform or any data accessed through it to stalk, harass, intimidate, dox, threaten, defame, or harm any individual or entity;
- bulk-scrape, mirror, harvest, redistribute, resell, or sublicense data accessed through the Platform, whether for commercial gain or otherwise;
- use the Platform in a manner that breaches the Privacy Act, the ACL, the Spam Act 2003 (Cth), the Copyright Act 1968 (Cth), or any other applicable law of Australia or your jurisdiction;
- attempt to reverse engineer, decompile, disassemble, or otherwise extract the source code, models, methodology, or underlying architecture of the Platform;
- misrepresent the source, accuracy, completeness, or currency of information obtained from the Platform, or use Platform output to mislead any third party;
- circumvent or attempt to circumvent rate limits, authentication mechanisms, audit logging, paywalls, access controls, or other security measures;
- use the Platform to infringe the intellectual property, privacy, confidentiality, or contractual rights of any person;
- access the Platform by automated means (including bots, scrapers, crawlers, or scripted clients) without the prior written permission of the Operator;
- introduce viruses, worms, trojans, malware, or other malicious code to the Platform;
- interfere with, disrupt, or impose unreasonable load on the Platform or the systems or networks connected to it;
- impersonate any other person, account holder, or organisation, or misrepresent your affiliation with any person or organisation;
- use the Platform to generate or facilitate unsolicited communications, marketing, or spam.
The Operator reserves the right, in its sole discretion and without notice, to suspend or terminate accounts that breach this Acceptable Use Policy, to investigate suspected breaches, and to cooperate with law enforcement and regulators where misuse is suspected or alleged. You may report suspected misuse to privacy@shanbob.com.
08Intellectual Property
Platform IP
All right, title, and interest in and to the Platform — including the underlying software, source code, database schemas, ingestion and resolution methodology, user-interface design, brand, name, logo, trade marks, documentation, and all derivative works thereof — are and remain the exclusive property of the Operator, and are protected by Australian and international copyright, trade mark, patent, trade secret, and other intellectual-property laws.
Licence to use
Subject to your compliance with these Terms, the Operator grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to access and use the Platform for your own internal, lawful investigative and compliance purposes. No other rights are granted, whether by implication, estoppel, or otherwise.
User content
You retain ownership of case notes, queries, annotations, watchlists, and other content you create within the Platform ("User Content"). You grant the Operator a worldwide, royalty-free, non-exclusive licence to host, store, reproduce, and process your User Content solely for the purpose of providing the Platform to you and maintaining the Audit Log.
Feedback
If you provide feedback, suggestions, ideas, or improvements relating to the Platform, you grant the Operator a perpetual, irrevocable, worldwide, royalty-free, sublicensable licence to use that feedback for any purpose, without obligation or compensation to you.
09Third-Party Data & Sources
The Platform synthesises Third-Party Data sourced from publicly available corporate registers and other primary sources. The Operator does not claim ownership of underlying register data.
ASIC and Commonwealth data
Data sourced from the Australian Securities and Investments Commission and other Commonwealth registers may be subject to Crown copyright and the terms of use of the relevant register. The Operator endeavours to comply with those terms but makes no warranty that you, as a downstream User, are entitled to use that data for any particular purpose. You are responsible for ensuring that your use of Third-Party Data accessed through the Platform complies with the terms of the relevant source register.
No control over source content
The Operator has no control over the content, accuracy, completeness, currency, or availability of Third-Party Data. Source registers may at any time correct, amend, withdraw, suppress, or restrict access to records. The Platform may reflect such changes only after the Operator’s next ingestion cycle, and there may be lag between source changes and Platform reflection of those changes.
No endorsement
The presence of data concerning a person or entity in the Platform does not imply any judgement, allegation, characterisation, or endorsement by the Operator. The Platform presents register data as a neutral analytical surface.
10Limitation of Liability
This section 10 is subject to section 04 (Australian Consumer Law) and applies only to the maximum extent permitted by law.
Liability cap
To the maximum extent permitted by law, the Operator’s total aggregate liability arising out of or in connection with the Platform, these Terms, or your use of the Platform — whether in contract, tort (including negligence), breach of statutory duty, or otherwise — is limited to the greater of:
- the total fees paid by you to the Operator in the twelve (12) months immediately preceding the event giving rise to the claim; or
- AUD $100 (one hundred Australian dollars), during any period in which no fees are payable (including the private pilot phase).
Exclusion of indirect loss
To the maximum extent permitted by law, the Operator will not be liable for any indirect, special, consequential, incidental, exemplary, or punitive loss or damage, including without limitation:
- loss of profit, revenue, business, or anticipated savings;
- loss of contracts or opportunities;
- loss of goodwill or reputation;
- loss, corruption, or unavailability of data;
- business interruption or operational disruption;
- loss arising from your reliance on Third-Party Data or actions taken on the basis of Platform output.
These exclusions and limitations apply regardless of whether the Operator has been advised of the possibility of such loss, and regardless of the legal theory under which the claim is brought.
11Indemnification
You agree to indemnify, defend, and hold harmless the Operator, and its officers, employees, contractors, agents, and successors, from and against any and all claims, actions, demands, proceedings, losses, damages, liabilities, judgments, settlements, costs, and expenses (including reasonable legal fees on a solicitor-and-own-client basis) arising out of or in connection with:
- your access to or use of the Platform, including any misuse of Third-Party Data accessed through the Platform;
- your breach of these Terms, including any breach of the Acceptable Use Policy or applicable law;
- your infringement of any intellectual-property right, privacy right, confidentiality obligation, or contractual right of any third party;
- any content you submit, post, or transmit through the Platform;
- any negligent, reckless, wilful, or unlawful act or omission by you or by any person acting on your behalf or under your account.
The Operator may, at its sole option, assume the exclusive defence and control of any matter for which you are required to indemnify it, in which case you agree to cooperate with the Operator’s defence at your own expense. You may not settle any claim subject to indemnification without the Operator’s prior written consent.
12Modifications & Termination
Changes to the Platform
The Operator may at any time add, remove, modify, or suspend features of the Platform, in whole or in part, with or without notice. The Operator will use reasonable efforts to notify Users of material changes that materially reduce functionality.
Changes to these Terms
The Operator may modify these Terms from time to time. Material changes will be notified by email to the address associated with your account, by prominent notice on the Platform, or both. Updated Terms take effect on the date specified in the notice. Your continued use of the Platform after the effective date constitutes acceptance of the modified Terms. If you do not accept the modified Terms, your sole remedy is to close your account.
Termination by you
You may terminate your account at any time by contacting privacy@shanbob.com. Termination does not entitle you to a refund of fees paid, except where required by the ACL or other applicable law.
Termination by the Operator
The Operator may terminate or suspend your account, with or without notice, for breach of these Terms, suspected misuse, regulatory or legal reasons, or in the Operator’s sole discretion where continued provision of the Platform to you is no longer commercially or legally viable.
Survival
The following provisions survive termination of these Terms: section 04 (ACL), section 06 (Privacy Policy, in respect of information already collected), section 08 (Intellectual Property), section 10 (Limitation of Liability), section 11 (Indemnification), section 14 (Governing Law), and section 15 (Severability and Entire Agreement), together with any other provision that by its nature should survive.
13Force Majeure
Neither party will be liable for any failure or delay in performance of its obligations under these Terms (other than payment obligations) to the extent that such failure or delay is caused by circumstances beyond that party’s reasonable control, including without limitation:
- acts of God, natural disasters, fire, flood, earthquake, severe weather;
- war, terrorism, civil unrest, insurrection, riot, or sabotage;
- government action, regulation, order, embargo, or sanction;
- pandemic, epidemic, or public-health emergency;
- strike, labour dispute, or industrial action;
- internet, telecommunications, power, or utility outages;
- failure or unavailability of third-party services, including cloud-hosting and source-register providers.
The affected party must notify the other party as soon as reasonably practicable and use reasonable efforts to mitigate the effect of the force-majeure event. If a force-majeure event continues for more than 60 consecutive days, either party may terminate these Terms by written notice without further liability.
14Governing Law & Dispute Resolution
These Terms are governed by, and will be construed in accordance with, the laws of New South Wales, Australia, and the laws of the Commonwealth of Australia applicable in New South Wales. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
The parties submit to the exclusive jurisdiction of the courts of New South Wales and the federal courts of Australia sitting in New South Wales, and the courts competent to hear appeals from them, in respect of any dispute, controversy, or claim arising out of or in connection with these Terms or the Platform.
Pre-action negotiation
Before commencing any legal proceeding (other than for urgent injunctive relief), the party intending to make a claim must give written notice to the other party setting out the nature of the dispute and the relief sought. The parties will then attempt in good faith to resolve the dispute by negotiation for a period of at least 21 days.
Mediation
If the dispute is not resolved through negotiation, either party may refer the dispute to mediation administered by the Resolution Institute (or another mutually agreed mediator) before commencing litigation. Each party will bear its own costs of mediation, and the mediator’s fees will be shared equally. This clause does not prevent either party from seeking urgent injunctive or equitable relief from a court of competent jurisdiction at any time.
No class action
To the maximum extent permitted by law, any dispute arising under these Terms must be brought on an individual basis. The parties waive any right to participate in a class, collective, consolidated, or representative action.
15Severability & Entire Agreement
Severability
If any provision of these Terms is held by a court of competent jurisdiction to be invalid, illegal, void, or unenforceable, that provision will be severed from these Terms to the minimum extent necessary, and the remainder of these Terms will continue in full force and effect. The parties intend that the severed provision be replaced by a valid and enforceable provision that achieves, as nearly as possible, the original commercial intent of the severed provision.
Entire agreement
These Terms (together with any document expressly incorporated by reference) constitute the entire agreement between you and the Operator concerning the Platform, and supersede all prior or contemporaneous agreements, communications, proposals, or representations, whether oral or written, on that subject matter. No representation or warranty is made, given, or implied except as expressly set out in these Terms.
No waiver
No failure or delay by either party in exercising any right, power, or remedy under these Terms operates as a waiver of that right, power, or remedy. A waiver is effective only if given in writing and signed by the party against whom enforcement is sought.
Assignment
You may not assign, transfer, sublicense, or delegate your rights or obligations under these Terms without the Operator’s prior written consent. The Operator may assign these Terms in connection with a sale, merger, restructure, or successor-in-interest transaction.
Relationship
Nothing in these Terms creates a partnership, joint venture, employment relationship, agency, fiduciary relationship, or franchise relationship between you and the Operator.
Headings
Section headings are for convenience only and do not affect the interpretation of these Terms.
16Notices & Contact
All formal notices to the Operator under these Terms must be sent to legal@shanbob.com. Notices to you will be sent to the email address associated with your account. Notices are deemed received on the next business day in Sydney, NSW following dispatch.
For non-formal communications:
- General queries — hello@shanbob.com
- Privacy queries, data access requests, complaints — privacy@shanbob.com
- Legal correspondence, regulator requests — legal@shanbob.com
SHANBOB · Sydney, New South Wales, Australia · Private pilot phase.
↑ BACK TO TOP