FediPilot Terms of Use

You stay the professional. FediPilot is software for registered tax agents, BAS agents and the staff they supervise. Fedix is not a tax agent or BAS agent and does not give tax advice. You review the work, and you are responsible for what you rely on, give to a client or lodge.

AI can be wrong. Check every figure, classification and draft before you rely on it.

Routine work runs without asking. Reading files, drafting workpapers, filling draft forms, organising files, and adding notes, tasks and client details run without an approval card. FediPilot does not currently offer a setting that makes it ask before every routine step.

Lodging, paying, sending and deleting wait for you - but the check is not perfect. Steps FediPilot recognises as lodging, submitting, signing, declaring or filing, paying, sending a message outside your practice, or deleting real data wait for your approval, and do not run if you decline or do not answer. FediPilot recognises them by the name of the action, so it may miss one it does not know, and when it controls the screen directly (Computer Use) it does not check what a button does. Do not leave it working unattended where one click would lodge, pay, send or delete. One exception to asking at the time: an ASIC company change you approve is lodged by FediPilot automatically once your client signs it, while FediPilot is running and signed in, unless you cancel it first (section 5.2A). LodgeiT form-filling never lodges. In Xero and Xero Tax, a filing step FediPilot recognises waits for your approval - and if you approve it, you have lodged it.

Your own AI account. FediPilot's chat runs on your own OpenAI or Anthropic account, under that provider's terms. For work that involves TFNs, use a plan that does not train on your content.

Client information leaves this computer. To do a task, FediPilot sends what the task needs - which can include names, figures, document text, pictures of your screen, TFNs and ABNs - to your AI provider (likely outside Australia, for example the United States) and to Fedix services, which use their own AI, transcription, messaging and document-reading providers (United States and European Union). FediPilot does not hide TFNs from your AI provider, and TFNs in work you save or send through Fedix services reach Fedix. You need your clients' permission first.

Fedix receives some information to run FediPilot. Usage data linked to your Fedix account; the instructions you type, so FediPilot can remember how you like things done (you can switch this off); your dictated voice, to turn it into text, with a list of client and contact names to help recognise them (Fedix does not keep the recording, but keeps corrections you make to the text); the workpapers and records FediPilot saves to Fedix Practice Manager; crash and performance diagnostics; and the cookies, local storage and identifiers FediPilot needs to keep you signed in, keep it secure and remember your settings. Fedix may use de-identified and aggregated data for any purpose, including improving and training AI models (section 10.8).

Feedback is part of using FediPilot. Copies of your requests and the AI's answers, with some details removed automatically, go to Fedix so it can find faults in and improve FediPilot. Feedback is always on, including while Google is connected; what FediPilot read from Google is replaced by a placeholder first (section 11).

Your legal rights stay, and our liability is limited. Nothing in these Terms removes your rights under the Australian Consumer Law. Beyond those rights: (a) our total liability is capped at the fees paid for your Fedix subscription in the previous 12 months (section 17.5); (b) we are not liable for lost profit, revenue, goodwill or data, the cost of re-doing work, or indirect loss (section 17.4); (c) if you rely on output you did not review, that counts against you when responsibility for a loss is shared (section 17.3); and (d) your Practice compensates Fedix for claims by others that arise from its breach of these Terms, from breaking the law in using FediPilot, from using client information without the permission section 8 requires, or from work it gives a client or lodges using FediPilot (section 18).

One click to accept, including for changes. You accept by selecting "I agree", or you can accept each part separately. When these Terms change, FediPilot shows the new version, with what changed, the next time you open it, and you need to accept it to keep using FediPilot. If a change reduces your rights and you do not accept it, your Practice may end its subscription and get a refund of fees paid in advance (section 19). Using FediPilot is never acceptance.

These Terms are an agreement between Fedix and:

1. (a)you, the person using FediPilot; and
2. (b)if you use FediPilot for a tax or BAS practice, firm or other business, that business (your "Practice").

Your Practice accepts these Terms when a person with authority to bind it accepts them, in FediPilot or otherwise. Under the Fedix Terms of Service, when your Practice's Fedix account owner accepts those terms, your Practice agrees that these Terms govern its use of FediPilot and that the people it authorises to use FediPilot may accept these Terms for it. If you accept for your Practice without authority, these Terms apply to you only for your own use of FediPilot until your Practice accepts, and you are never personally liable under section 18, or for a breach of section 15 that your Practice directed.

You accept by selecting "I agree". If you choose "Accept each part separately", you accept by ticking each part (the general terms, and the AI use and data terms in sections 6 to 11) and then selecting the button that agrees to them; both parts are needed to use FediPilot and the result is the same agreement. Nothing else is acceptance, including installing, opening or using FediPilot. Feedback (section 11) is part of these Terms, not a separate choice. Accepting sections 6 to 11 means you agree to use FediPilot on those terms; it is not your clients' consent and does not replace the permission section 8 requires.

When you accept, FediPilot records on this computer the version of these Terms, a SHA-256 fingerprint of the exact text shown to you, the date and time, and whether you accepted all at once or part by part. The record is kept for your Fedix user account: anyone else who signs in to FediPilot on this computer is asked to accept for themselves, with the same one click. As soon as you are signed in, FediPilot sends that record to Fedix with usage data (section 10.1), linked to your Fedix user account and Practice. Fedix keeps those records, and a copy of every version of these Terms, for at least 7 years. You can read the current version at any time with the command "FediPilot: Show Terms of Use" or at home.fedix.ai/fedipilot/terms, and you can ask us for a copy of your record or of any earlier version.

These Terms are the only terms that apply to your use of FediPilot, including when FediPilot uses Fedix services (such as Fedix Practice Manager and MyLedger) on your instruction.

The Fedix Terms of Service at home.fedix.ai/terms continue to govern your Fedix subscription (including fees) and your direct use of Fedix's other products. None of their terms about AI, warranties, disclaimers, reliance on AI output, liability, indemnities, suspension, termination, changes to terms, disputes, jurisdiction or entire agreement apply to FediPilot. This stays true if the Fedix Terms of Service change later: a change to them affects FediPilot only if it names this section and you accept it in FediPilot under section 19.

If your Practice has an agreement with Fedix signed by both parties that expressly covers FediPilot, that agreement prevails over these Terms to the extent they differ.

The Fedix Privacy Policy (home.fedix.ai/privacy) explains how Fedix handles personal information. Where these Terms describe FediPilot's data handling more specifically, these Terms apply.

FediPilot is desktop software (an application, a built-in extension and a local helper program) that runs on your computer. At your direction it reads documents, drafts workpapers, classifies transactions, fills draft forms, prepares messages and operates systems you already use, such as Fedix Practice Manager, MyLedger, LodgeiT, Xero, Xero Tax, Microsoft 365, Google and the ASIC and ATO online services you have access to.

FediPilot is supplied for use by registered tax agents and BAS agents, and by staff working under their supervision, in the course of their business.

Fedix is not a registered tax agent or BAS agent and does not provide tax agent services or BAS services to you or your clients. FediPilot does not give tax advice. If you, or your client, want tax or BAS advice to rely on, it must come from a registered tax agent or BAS agent.

Fedix is not affiliated with, endorsed by or acting for the Australian Taxation Office, the Tax Practitioners Board, ASIC, LodgeiT, Xero, Microsoft, Google, OpenAI, Anthropic or Mistral AI. Their names are used only to identify the systems FediPilot works with.

Using FediPilot does not change your obligations under the Tax Agent Services Act 2009, including the Code of Professional Conduct. You remain responsible for:

1. (a)providing your services competently;
2. (b)taking reasonable care to find out your client's affairs and to apply the tax laws correctly;
3. (c)the content of every return, statement, form, workpaper, message and piece of advice you give or lodge, whether or not FediPilot helped prepare it;
4. (d)supervising the people in your Practice who use FediPilot; and
5. (e)keeping the records your obligations require.

AI output can be wrong, incomplete, out of date or inconsistent between runs, and can sound confident when it is wrong. A qualified person must review it, and apply their own judgement, before it is relied on, given to a client or used in anything lodged.

Routine work runs without asking. FediPilot carries out routine work on your instructions without an approval card - for example reading files you point it to, running commands, drafting and saving workpapers (including to Fedix Practice Manager), filling fields on draft returns and forms, organising files, creating or updating notes, tasks, calendar entries and client details in Fedix Practice Manager, and handing a matter over to a colleague. When FediPilot asks before running a command, you may choose to let that command run automatically from then on; the command "FediPilot: Ask Before Running Commands Again" undoes those choices. FediPilot does not currently offer a setting that makes it ask before every routine step. You must still review the work before it is relied on.

Submission steps wait for your approval. Before FediPilot carries out a step it recognises as:

1. (a)lodging, submitting, signing, declaring or filing anything with the ATO, ASIC or another regulator, including through LodgeiT, Xero or Xero Tax;
2. (b)changing your client relationships with the ATO;
3. (c)sending an email, SMS, calendar invitation, e-signature request, engagement letter or other message to anyone outside your Practice (other than the technical messages to Fedix support described in sections 10.4 and 11.3), or setting up a reminder that will later be sent to a client;
4. (d)making a payment;
5. (e)permanently deleting real data; or
6. (f)installing an update that restarts FediPilot,

it shows you an approval card. The step runs only if you approve it. If you decline, do not answer in time, or the card cannot be shown, the step does not run. This applies however FediPilot is set to run.

ASIC company changes are lodged once your client signs. When you approve an ASIC company change (for example a change of address), FediPilot sends the authority to your client to sign. Once every signature is in, FediPilot lodges the matching change through the ASIC Portal from the computer where you approved it, without a second approval card, while FediPilot is running and signed in there (it checks about every 30 seconds). It lodges only if the signed authority and the details still match what you approved. Your approval of the first card is your approval of that lodgement. To stop a change before it is lodged, use the command "FediPilot: Cancel ASIC Company Change". A change that FediPilot is already lodging cannot be cancelled, and if every signature is already in when FediPilot starts, FediPilot may lodge the change shortly after you sign in. Cancelling does not withdraw the signature request, so also tell your client they need not sign. Keep FediPilot running and signed in on that computer until the change is lodged, or lodge it yourself, so that ASIC's deadline is met.

LodgeiT. FediPilot's LodgeiT form-filling stops before lodgement: it refuses any lodge, submit, sign, file or delete step. Running LodgeiT's pre-lodgement validation check does not lodge. Any other step FediPilot recognises as lodging or signing through LodgeiT is a submission step under section 5.2. You lodge in LodgeiT yourself.

Xero and Xero Tax. FediPilot can read and update information anywhere in Xero and Xero Tax at your direction. A filing step FediPilot recognises - lodging, filing, signing, approving, sending to a client or deleting - waits for your approval under section 5.2, subject to section 5.6. If you approve a filing step, FediPilot carries it out.

When FediPilot controls the screen. On some computers FediPilot can operate your screen by taking pictures of it, pointing, clicking and typing ("Computer Use"). Computer Use does not currently check what a button or control does before it clicks, so it does not show an approval card for a click that lodges, pays, sends or deletes. Do not use Computer Use on a screen where a click could lodge, submit, pay, send or delete unless you are watching and ready to stop it. The pictures it takes show everything on your screen, including other clients' windows and notifications; close or hide anything the task does not need before you start.

Limits of recognition. Outside Computer Use, FediPilot recognises submission steps from the name and details of the action. It cannot guarantee that it will recognise every such step - for example a command it does not know, or an action whose name does not describe what it does. Do not leave FediPilot working unattended on a task where one step would lodge, pay, send or delete.

Approving is your act. When you approve a step, you are the person taking it, with the same professional responsibility as if you had clicked the button yourself. Check the client, the period, the figures and the recipient first. If the approval card did not accurately describe what then happened, this section 5.7 does not apply to that step.

Email inside your Practice. FediPilot sends an email without an approval card only when every recipient is an active user of your Practice's Fedix account. It records that it did so. You can choose to see a card for these emails too (command "FediPilot: Ask Me Before Emailing Colleagues"). Any other recipient gets a card.

Tell us. If FediPilot ever appears to take a submission step without your approval, stop using the affected feature and tell us at support@fedix.com.au.

FediPilot's assistant runs on the AI account you connect: your own OpenAI or Anthropic account, using a sign-in or API key. The methods currently offered are listed in FediPilot under Accounts and Connections. Fedix does not supply that account for FediPilot chat and does not pay for it. If your Practice has arranged for FediPilot to use an AI service supplied by Fedix instead, section 7.2 applies to that service.

Fedix AI credits. Some features use AI that Fedix supplies under its own account rather than yours - for example dictation, reading scanned documents and some Fedix Practice Manager features. These use the AI credits included in, or bought for, your Practice's Fedix subscription, on the terms of that subscription. If your Practice has no credits left, those features may stop until credits are added; the rest of FediPilot keeps working.

Your use of that account is governed by your agreement with the provider. That agreement and your plan's settings decide how the provider handles what FediPilot sends, including where it is processed, how long it is kept and whether it may be used to train models.

Before you use client information, check that your plan and settings suit confidential client work. Business, team or enterprise plans that do not use your content for training are generally more suitable than personal plans. For any work that involves TFNs, use a plan that does not train on your content. Some sign-in methods FediPilot offers connect a personal plan; check its settings before you use it for client work. If you are unsure, do not use client information with that account.

You are responsible for your account's settings, charges, limits and security.

Fedix chooses which sign-in methods FediPilot offers. You are not responsible to Fedix for whether a method FediPilot offers is permitted by the provider for use through FediPilot. If a provider tells Fedix that a method is not permitted, Fedix will switch it off and tell you.

FediPilot can also open the coding assistants of OpenAI and Anthropic (such as Codex and Claude Code) in their own windows. Those windows run the provider's own software under your account with that provider and that provider's terms, not under these Terms.

Fedix is not responsible for your AI provider's availability, accuracy, conduct or charges, or for how it handles information you send it through your own account.

Client files you open are read on your computer. When you ask FediPilot to do a task, it sends the information that task needs. Depending on the task, this can include client names and contact details, ledger and tax figures, emails and attachments, text and images from documents, pictures of your screen, TFNs and ABNs. It goes to:

1. (a)your AI provider (section 6), which is likely to process it outside Australia, for example in the United States;
2. (b)Fedix services that the task uses, such as Fedix Practice Manager and MyLedger, whose primary hosting is in Sydney, Australia. This includes workpapers FediPilot saves, notes, tasks, client details, draft invoices and messages, and emails and calendars in your Microsoft 365 mailbox, which FediPilot reaches through Fedix Practice Manager;
3. (c)providers that Fedix itself uses: some Fedix services use AI models from OpenAI and Anthropic (United States) under Fedix's account, including the AI that sorts the instructions Fedix remembers (section 10.2); voice you dictate, with a list of up to 100 client, staff and contact names from your Practice to help recognise them, is turned into text by Fedix's speech-to-text provider (currently OpenAI, United States); when FediPilot reads text from a scanned document or image, it uses a document-reading provider (currently Mistral AI, European Union, with OpenAI, United States, as a fallback), either through a Fedix service or directly from this computer; SMS messages you approve are sent through Fedix's messaging provider (currently Twilio, United States); and e-signature requests and stored documents use the signing and storage providers listed in the Fedix Privacy Policy; and
4. (d)the systems you direct FediPilot to use, such as LodgeiT, Xero, Xero Tax, Google (Gmail and Google Calendar, if you connect them), ASIC and, through Fedix Practice Manager, the ATO.

Fedix is responsible under the Privacy Act 1988 for information Fedix itself sends to its own service providers, including those in sections 7.1(c), 10 and 11. The providers Fedix uses and their countries are listed in the Fedix Privacy Policy.

For information FediPilot sends to your own AI provider under section 7.1(a), or to a system you direct it to use under section 7.1(d), you (not Fedix) are the one disclosing it.

If you connect Google, FediPilot reaches Gmail and Google Calendar directly from this computer. What it reads from them goes to your AI provider, and what you ask it to write goes to Google. FediPilot does not send what it reads from Gmail or Google Calendar to Fedix's servers, except what you then ask it to save or send through Fedix services (for example a workpaper or a note) and instructions you type (section 10.2). Feedback (section 11) is sent while Google is connected, but FediPilot first replaces what it read from Gmail and Google Calendar with a placeholder, keeping only which Google action ran, whether it worked and how long it took, and Fedix's servers do the same again before storing it. Fedix does not use information it receives from Google to train AI models, and handles it as Google's API Services User Data Policy requires.

Fedix does not sell client information and does not use identifiable client information to train AI models.

The Code of Professional Conduct says that, unless you have a legal duty to do so, you must not disclose information about a client's affairs to a third party without your client's permission. Fedix and your AI provider are third parties.

Before you use FediPilot on a client's information, you must have whatever permission the law and the Code of Professional Conduct require for their information to be handled as described in sections 7, 9, 10 and 11, including outside Australia, unless the law otherwise allows the disclosure. That includes the client's consent to Fedix and your AI provider collecting any sensitive information (for example health details) that the task involves, including the copy sent to Fedix as Feedback (section 11). We recommend the client gives that permission by a positive step, such as signing or ticking an engagement letter. If you rely on your client's consent for information going outside Australia, the law requires that you first expressly tell them that, if they consent, Australian Privacy Principle 8.1 will not apply - so you will not have to take reasonable steps to make sure the overseas recipients handle their information consistently with the Australian Privacy Principles, and you will not be accountable under the Privacy Act for how they do. Fedix can give you suggested engagement-letter wording that lists each recipient and purpose and includes that statement. FediPilot does not obtain this permission for you, and using FediPilot does not mean permission has been given.

If you do not have that permission for a client, do not use FediPilot on that client's information.

Please also tell your clients, for example in your engagement letter or privacy notice, that Fedix receives their information as described in these Terms and that the Fedix Privacy Policy explains how Fedix handles it and how to contact Fedix.

FediPilot does not hide TFNs from your AI provider. If a task involves a document or record that shows a TFN, FediPilot may send it, and the provider receives it. FediPilot removes TFNs written in the usual 8- or 9-digit forms from the instructions it remembers (section 10.2) and from Feedback (section 11); a TFN written in another way may not be recognised.

Under the Privacy (Tax File Number) Rule 2015 and the Taxation Administration Act 1953, TFNs may only be recorded, used and disclosed for a purpose authorised by taxation, superannuation or personal assistance law, access to them must be limited to people who need them for that purpose, and they must be protected and securely destroyed or permanently de-identified when no longer needed. These obligations apply to you even if you are otherwise exempt from the Australian Privacy Principles.

Only ask FediPilot to work on documents showing a TFN when the task needs the TFN for a tax purpose, such as preparing or checking that client's return. Otherwise remove or mask the TFN first. Use an AI plan that does not train on your content (section 6.3).

Fedix receives a TFN whenever it is in something FediPilot saves or sends through Fedix services: for example a workpaper or form saved to Fedix Practice Manager (FediPilot keeps saved workpapers in step as you edit them), an email or attachment sent through your mailbox, text read from a scanned document, dictated text, or a step through Fedix Practice Manager to the ATO. Fedix records, uses and discloses those TFNs only to provide the service you are using, limits access to the staff and systems that need them, and protects them as the Privacy (Tax File Number) Rule 2015 requires. Usage data does not include TFNs, and section 9.5 applies to Feedback.

If a TFN reaches Fedix in Feedback or in remembered instructions despite section 9.1, Fedix does not use or disclose it for any purpose, limits access to it to the staff who handle Feedback, and permanently masks it as soon as Fedix finds it, and in any case when it reviews that Feedback.

Usage data. To run, secure and support FediPilot, FediPilot sends Fedix usage data: the features, commands and FediPilot-supplied skills used, sign-ins and sign-outs, the app version, device type and a random identifier for this installation, update checks, chat and turn identifiers, errors, crash reports and performance measurements (for example start-up time, memory use and how long steps take), dictation use, and AI usage counts such as tokens, durations and reported AI cost. It is sent with your Fedix user identifier, email address and practice identifier. When you work on a client, it also includes Fedix Practice Manager's reference for that client, which Fedix can link to the client's record. It does not include the text of your requests or the AI's answers, or file contents. Skills you have taught FediPilot yourself are counted without their names. The record of your acceptance of these Terms (section 1.4) is sent with it. Usage data is needed to run and support FediPilot and cannot be switched off in FediPilot's settings. Fedix may use the AI usage counts to measure Fedix AI credits (section 6.1A). Fedix keeps usage data as a business record, archived after about 13 months. Usage data is not sold.

Remembered instructions. So that FediPilot can remember how you and your Practice like work done, it sends Fedix the instructions you type to it (for example "always round to the nearest dollar for this client"), linked to your Fedix account and Practice. Only your own typed messages are used, never documents, emails or the AI's answers. Before sending, FediPilot removes TFNs, BSBs and card numbers (section 9.1). It does not remove names, addresses or other details you type, so an instruction can include a client's name or circumstances. Do not type health or other sensitive details into an instruction unless the task needs them. Fedix stores these instructions in Fedix Practice Manager. Fedix's AI provider (section 7.1(c)) sorts them into instructions for you, for your Practice, or of general use. Fedix uses them to remind FediPilot of your instructions in later work. After a Fedix staff member has reviewed it and removed anything that identifies you, your Practice or a client, an instruction of general use may be used to improve FediPilot's work for other Fedix customers. You can switch this off in Settings > FediPilot > Memory: Remember Instructions; the switch applies to everyone using FediPilot on this computer, takes effect when FediPilot next starts, and FediPilot then stops sending instructions. You can also ask privacy@fedix.com.au to withdraw instructions already sent (section 13.6).

Voice. If you use dictation, FediPilot records your voice on this computer and sends it to Fedix Practice Manager to be turned into text (section 7.1(c)) and, if the tidy-up option is on, tidied into written form by Fedix's AI provider. To recognise names, Fedix keeps a list of the names of your Practice's clients, staff and email contacts, and sends up to 100 of them with each dictation to its speech-to-text provider. Fedix does not store the recording after turning it into text. When you correct the text, Fedix keeps the correction with a short piece of the text around it to improve recognition for your Practice. The text becomes part of your message to FediPilot and is handled like anything you type (sections 10.2 and 11). Dictation uses Fedix AI credits (section 6.1A). Do not dictate information you would not type. FediPilot does not record meetings or calls. If you ask FediPilot to transcribe a recording you import, you must have the permission of the people recorded that the law requires.

Support messages. If FediPilot loses its connection to Fedix Practice Manager, it may send Fedix support (support@fedix.com.au) a short technical message from your account with an incident reference, a category and an error code. It contains no client information.

Information in this section is personal information and Fedix handles it under the Privacy Act 1988 and the Fedix Privacy Policy.

Cookies, local storage and identifiers. FediPilot, its built-in browser windows and the Fedix services it uses store cookies, local storage, a random identifier for this installation, session identifiers and similar technologies on this computer, and read them back. They keep you signed in to Fedix and to the systems you connect, keep FediPilot and your accounts secure, remember your settings and choices, measure how FediPilot is used and how well it performs, and help Fedix improve FediPilot and Fedix services. They are part of using FediPilot and cannot be switched off in FediPilot. Cookies that the systems you connect (for example Xero, LodgeiT, Microsoft or Google) set in FediPilot's browser windows are governed by those systems' own terms. The Fedix websites use cookies as the Fedix Privacy Policy describes.

Testing and new features. Fedix may try out new or changed features, settings and AI instructions, turn them on for some users or practices before others, and compare how well different versions work, using usage data and Feedback. These changes are subject to these Terms; in particular, a submission step still waits for your approval under section 5.2.

De-identified and aggregated data. Fedix may create de-identified or aggregated data from usage data, Feedback, remembered instructions and diagnostics - data that does not identify you, your Practice, your staff or a client, and that Fedix takes reasonable steps not to re-identify. Fedix owns that data and may use it for any purpose, including to improve, develop and train FediPilot, Fedix services and AI models, and to produce statistics and benchmarks. This section does not apply to information FediPilot read from Google (section 7.4).

Contact about FediPilot. Fedix may contact you, by email, in FediPilot or by phone, about your use of FediPilot - for example service and security messages, changes, faults it found in your work through Feedback, and invitations to give feedback or take part in product research. You can unsubscribe from marketing messages at any time; service and security messages are part of using FediPilot.

Feedback is part of using FediPilot and is always on, including while Google is connected (section 7.4). By accepting these Terms you agree to it. It cannot be switched off in FediPilot.

FediPilot sends Fedix a copy of each completed request you make, the AI's answer and a short summary of the steps it took. Before sending, FediPilot automatically removes TFNs, ABNs, bank, card, licence and passport numbers, email addresses, phone numbers, dollar amounts, web links, file paths, internal identifiers, access tokens and API keys, and the full name of the client you are working on where FediPilot knows it (not other forms of that name, or other clients' names), and replaces what it read from Gmail and Google Calendar with a placeholder (section 7.4). Other details in the conversation - for example other people's names, addresses, dates of birth or circumstances - may remain. Do not type health or other sensitive details into a request unless the task needs them.

Fedix stores Feedback encrypted on its servers. Fedix's own AI provider (currently OpenAI, United States, under Fedix's account) reviews some of it, and Fedix staff may read it. Fedix may record short fault reports, with personal details screened out, in its engineering systems (currently GitHub, United States). FediPilot may also email Fedix support (support@fedix.com.au), from your own Microsoft mailbox, a technical fault report that does not include file contents or client names.

Fedix uses Feedback to find and fix faults in, and to improve, FediPilot and Fedix services, and may create de-identified and aggregated data from it (section 10.8). Fedix does not sell it, and does not use identifiable client information in it to train AI models (section 7.5). Access to it is limited to the Fedix staff and providers who need it for those purposes. Feedback that Fedix received before version 2026-10-22.1 is used, kept and withdrawn only as the version under which Fedix received it allowed.

The client permission section 8 requires must cover Feedback.

FediPilot keeps on this computer working files, settings, voice recordings, the instructions it remembers, any signature image you choose to save for stamping documents, and a record of the steps it runs without asking and of each approval you give or refuse (who, what, the action and its details, and when). These can contain client information. From this version, FediPilot replaces TFNs in the approval records with a placeholder, keeps a fingerprint of the exact details approved that is locked with a secret key kept in the same folder (the file fingerprint.key) - without that key file a TFN cannot be worked out from the records, so leave it out of any copy you give someone else, and keep a secure backup of it, because without it the fingerprints cannot be checked - and, on macOS and Linux, makes those records readable only by your computer account (on Windows they are protected by your user folder's permissions). Records made by earlier versions may contain full TFNs, and other working files may contain TFNs; section 12.2 applies to them.

FediPilot does not delete these records for you. You decide how long to keep them, consistently with your record-keeping obligations and your duty to destroy or de-identify TFN information you no longer need (section 9.2). The approval records help show that a person reviewed and approved a step; they do not replace the client records you must keep.

If you save a signature, FediPilot uses it only to stamp documents you ask it to prepare, and never sends a signed document without an approval card. You can remove the saved signature at any time.

You are responsible for your own obligations under the Privacy Act 1988, including the Australian Privacy Principles where they apply to you, the rules on sending information overseas, and telling your clients how their information is handled. If you are covered by the Australian Privacy Principles, from 10 December 2026 your privacy policy must describe any decisions about your clients that you make using a computer program, including the kinds of personal information the program uses, where the decision could significantly affect their rights or interests. Fedix can give you suggested wording.

Fedix handles personal information it receives through FediPilot under the Fedix Privacy Policy and the Privacy Act 1988, and uses client information it receives only to provide, secure, support and improve FediPilot and the Fedix services you use, as described in these Terms, and as required by law.

Fedix takes reasonable steps to protect information it holds from misuse, interference and loss, and from unauthorised access, modification or disclosure.

If Fedix becomes aware of a data breach involving information you sent through FediPilot that is likely to affect your Practice or its clients, Fedix will tell your Practice without undue delay, and will assess and notify breaches as the law requires.

A data breach at your own AI provider may be an eligible data breach for you under the Notifiable Data Breaches scheme, even though it happened at the provider, because the law can treat information you sent overseas as still held by you. A breach involving TFN information can be notifiable even if you are otherwise exempt from the Australian Privacy Principles. Check your obligations.

Requests. You can ask privacy@fedix.com.au to stop using instructions Fedix has remembered from your account (section 10.2); Fedix will then stop using them for FediPilot, except an instruction already used in de-identified form. Requests to withdraw Feedback or instructions that Fedix received under an earlier version are handled as that version said. Fedix handles other requests about personal information under the Fedix Privacy Policy.

You sign in to FediPilot with your Fedix account. Keep this computer encrypted, up to date and locked when unattended, protect your sign-ins and saved passwords, and do not share accounts.

If you let FediPilot remember a sign-in to a system for you (for example by saving a password or an authenticator code), those credentials are kept in your computer's protected password store and are used only to sign in to that system. Saving an authenticator code means one device holds both sign-in factors; check that your security obligations and that system's terms allow it. Signing out does not remove a remembered sign-in; you can remove it at any time in FediPilot under Accounts and Connections ("Sign out and forget my login").

Each connected system's own terms apply to your use of it, including through FediPilot. Fedix does not control those systems and is not responsible for their availability, errors or changes.

Tell us at support@fedix.com.au as soon as you can if you suspect unauthorised access to your FediPilot or Fedix account. You are responsible for everything done through your account by anyone using your sign-in, except anything done after you told us of the suspected unauthorised access.

Fedix grants you a non-exclusive, non-transferable licence to install and use FediPilot for your Practice's business while these Terms apply.

Fedix and its licensors keep all rights in FediPilot. FediPilot includes open source components (including from Visual Studio Code) licensed under their own licences, which these Terms do not limit.

You and your clients keep all rights in your data. Work product you create with FediPilot belongs to you or your Practice, as between you and Fedix. You give Fedix a licence to use your data to provide, secure, support and improve FediPilot and the Fedix services you use, including through Feedback (section 11) and by creating de-identified and aggregated data (section 10.8), as described in these Terms.

No other warranties. Subject to section 17.1, FediPilot is provided as it is. Fedix does not promise that FediPilot or its output will be uninterrupted, error-free, complete or suitable for your purposes, or that it will work with every system or version of a system you use.

Fedix may update FediPilot to fix problems, improve security, add features, or change or remove features. FediPilot checks for updates (sending its platform, channel and version) and asks before restarting to install one.

Rights you keep. FediPilot comes with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in these Terms excludes, restricts or modifies any guarantee, right or remedy you have under the Australian Consumer Law or any other law that cannot lawfully be excluded, restricted or modified.

Limit on guarantee remedies. If FediPilot is not of a kind ordinarily acquired for personal, domestic or household use, then to the extent the law allows, Fedix's liability for failing to meet a consumer guarantee (other than the guarantees of title, undisturbed possession and freedom from undisclosed securities) is limited, at Fedix's choice, to:

1. (a)for the FediPilot software: replacing it, supplying equivalent software, repairing it, or paying the cost of any of those; and
2. (b)for services: supplying the services again, or paying the cost of having them supplied again.

17.3 Shared responsibility. Subject to section 17.1, Fedix's liability for a loss is reduced to the extent you, your Practice, or its staff or contractors caused or contributed to it. This includes relying on, giving to a client or lodging FediPilot output without the review section 4.2 requires, where that review would reasonably have found the problem.

Types of loss. Subject to section 17.1, neither party is liable to the other for loss of profit, revenue or goodwill, or for any indirect or consequential loss, but this does not limit your Practice's obligations under section 18 or to pay fees. Fedix is not liable for loss of data or for the cost of re-doing work, except that if a defect in FediPilot's software or settings, or Fedix's breach of section 13.3, causes loss of data, Fedix will take reasonable steps to help recover it, and its liability is limited to the reasonable cost of restoring that data from your most recent backup or of re-doing that work.

Cap. Subject to sections 17.1 and 17.6, Fedix's total liability to your Practice and all its users together (or, for your own use under section 1.2, to you), for all claims arising out of or in connection with FediPilot or these Terms for events after your Practice (or you) first accepted these Terms, in each 12-month period starting on that date or an anniversary of it, whether in contract, tort (including negligence), under statute or otherwise, is limited to the fees paid to Fedix for your Practice's Fedix subscription in the 12 months before the first event giving rise to a claim in that period.

No cap. The cap in section 17.5 does not apply to Fedix's liability for:

1. (a)personal injury or death caused by Fedix's negligence;
2. (b)Fedix's fraud or wilful misconduct; or
3. (c)any liability that cannot lawfully be limited.

17.7 Proportionate liability. Nothing in these Terms excludes or limits the operation of Part 4 of the Civil Liability Act 2002 (NSW), Part VIA of the Competition and Consumer Act 2010 (Cth), or any other proportionate liability law.

Your Practice (not the individual user) will compensate Fedix for loss, liability and reasonable costs from a claim, complaint or investigation by a third party (including your client, the ATO, the Tax Practitioners Board or the Office of the Australian Information Commissioner) against Fedix, to the extent it arises from:

1. (a)a breach of these Terms by your Practice or a person it allowed to use FediPilot, or a breach of the law by any of them in using FediPilot;
2. (b)your Practice using a client's information through FediPilot without the permission or legal basis section 8 requires; or
3. (c)advice, returns, statements, messages or other work your Practice gives a client or lodges using FediPilot,

except to the extent the claim is caused by a defect in FediPilot's software or settings, by Fedix's breach of these Terms, or by a submission step FediPilot took without the approval section 5.2 requires.

The indemnity is reduced to the extent Fedix caused or contributed to the claim, and does not cover a penalty imposed on Fedix for Fedix's own contravention of a law. Fedix will tell your Practice promptly about a claim, take reasonable steps to reduce the loss, and not settle a claim in your Practice's name without its consent.

Every change to these Terms gets a new version number. Fedix publishes each version at home.fedix.ai/fedipilot/terms. The next time you open FediPilot after a change, it shows you the new version, with a summary of what changed at the top, and asks you to accept it. To keep using FediPilot you need to accept it; until you do, FediPilot cannot be used. Using FediPilot without accepting is never acceptance. The version you last accepted continues to govern everything that happened while it applied. Until you accept a new version, FediPilot may not lodge ASIC company changes under section 5.2A; accept the new version or lodge the change yourself so that ASIC's deadline is met.

A new version takes effect for you when you accept it. FediPilot shows each new version, with what changed, the next time you open it; Fedix does not give separate notice of changes.

If you do not accept a new version, you cannot use FediPilot, and your files and records on this computer stay with you. If the new version reduces your rights and you do not accept it within 30 days of FediPilot first showing it, your Practice may, within that time, end its Fedix subscription by notice to support@fedix.com.au, without a cancellation fee, and Fedix will refund any fees paid in advance for the period after it ends.

A change never applies to anything that happened before you accepted it.

You may stop using FediPilot and uninstall it at any time.

Fedix may suspend or limit FediPilot, or its access to Fedix services, if Fedix reasonably considers it necessary to protect the security or integrity of FediPilot, Fedix services or any person's data, to comply with a law or a direction from a regulator or court, or because of a material breach of these Terms or any breach of section 15. Fedix will tell you why, before the suspension where it reasonably can and otherwise as soon as it can, keep the suspension no wider or longer than reasonably needed, and restore access once the reason is resolved. Suspension does not stop you getting your data from Fedix services.

FediPilot needs a Fedix account. If your Fedix subscription ends, FediPilot's connections to Fedix services end too. Before then, you can get your data from Fedix services as the Fedix Terms of Service allow, and your files and records on this computer stay with you.

Either party may end these Terms by written notice if the other materially breaches them and does not remedy the breach within 14 days of written notice, or at once if the breach cannot be remedied. Fedix may also stop offering FediPilot, or end these Terms, by giving 30 days' notice; if your Practice paid a fee in advance specifically for FediPilot, Fedix will refund the part for the period after it ends.

When these Terms end, your licence ends. Sections 9, 10.8, 12, 13, 17, 18, 21 and 22 continue.

These Terms are governed by the law of New South Wales.

Before starting proceedings about these Terms, a party must give the other written notice of the dispute and both must try in good faith to resolve it for 20 business days. This does not stop either party seeking urgent relief, or you complaining to a regulator at any time. If a time limit for starting proceedings would otherwise expire during that period, a party may start them earlier. After that, either party may bring proceedings in any Australian court that has jurisdiction.

Notices. We may give you notices by email to your Fedix account address or within FediPilot. You may give notices to support@fedix.com.au. An email notice is received one business day (in Sydney) after it is sent, unless the sender receives a message that it was not delivered.

Assignment. You may not transfer these Terms without our consent, which we will not unreasonably withhold. We may transfer them to a person who takes over the business of supplying FediPilot, by giving you notice, if that person agrees to be bound by these Terms. You may end these Terms at any time (section 20.1).

If part is invalid. If a court decides part of these Terms is void or unenforceable, that part does not apply and the rest continues.

Whole agreement. These Terms and any signed agreement under section 2.3 are the whole agreement about FediPilot. The Fedix Privacy Policy explains how Fedix handles personal information; it is not part of this agreement and cannot reduce what these Terms promise. This does not exclude liability for misleading or deceptive conduct.

No waiver. Not exercising a right is not a waiver of it.

Meaning. Headings and examples are for convenience; "including" means "including without limitation".