Privacy Policy

This Privacy Policy (the "Policy") describes how Australian AI Company (ACN 677136604) ("we", "our", or "us") collects, uses, and discloses your personal information when you use our website Numbat.ai (the "Website") and our services, including our AI legal information assistant, APIs, and any other software or services that we offer (collectively, the "Services").

This Policy applies only where we act as a data controller. It does not apply where we act as a data processor. We may change this Policy from time to time by posting revisions on our Website. If you were a user of our Services before the posting of a revision, that revision will take effect 14 days after its posting. For new users, revisions will take effect immediately upon their posting.

Personal Data is collected from you directly, automatically from your device, and also from third parties. The Personal Data we process when you use the Services depends on variables like how you interact with our Services, the features you use, and your method of accessing the Services.

2.1 Information We Collect From You

• Account data: We collect information when you open an account such as your name, email address, password, company name, payment information, and transaction information.
• User content and files: When you use our Services, we collect Personal Data included as part of the information you provide such as inputs, text, documents, or feedback.
• Demographic information: In some cases, you may provide us with demographic details.
• Feedback data: This consists of information you submit through surveys, reviews, or interactive features.
• Payment information: For paid subscriptions, we collect details like your name, email address, billing address, payment methods, and tax information.
• Support data: When you seek customer support, we collect details necessary to assist you.

2.2 Information We Collect Automatically

• Device and browser information: This includes your IP address, browser type and version, device type, operating system, and other technical information about your device.
• Usage Data: Information about how the Service is accessed and used, including:
• The pages of our Service that you visit
• The time and date of your visit
• The time spent on those pages
• Unique device identifiers and other diagnostic data
• Cookies and similar technologies: We use cookies for essential functionality like storing settings and recognizing you while using our Services. Depending on your jurisdiction, we may use additional cookies after obtaining your consent.
• Email marketing interactions: Our emails may have web beacons that offer information on email reception, opens, and link clicks.
• Geolocation information: Depending on the Service's functionality, we may collect regional geolocation data.

2.3 Information We Collect From Third Parties

• Information from other users: We may receive information about you if you are identified as a representative or administrator on your company's account.
• Services you linked to your account: When you or your administrator integrate third-party apps or services with our Services, we receive information based on your settings with those services.
• Vendors, Partners, and Affiliates: We may receive information about you from third parties, like vendors, resellers, or partners for the purposes outlined in this Policy.

2.4 Chat History and AI Interactions

We use the collected data for various purposes:

• Service provision: To deliver, maintain, and improve our Services as configured and used by you, and to provide ongoing personalized experiences and recommendations.
• Communication: To inform you about new Services, features, offers, promotions, and other pertinent information. This includes sending confirmations, invoices, technical notices, updates, security alerts, and administrative messages.
• Business operations: For activities like billing, accounting, and creating aggregated statistical data for internal reporting, financial planning, and product strategy.
• Personalization: To customize the Service to your preferences and ensure a seamless and consistent user experience.
• Safety and security: To promote safety, integrity, and security across our Services, using both automated and, at times, manual techniques for abuse detection, prevention, and violations of terms of service.
• Troubleshooting: To identify and resolve technical issues and maintain performance.
• Legal compliance: To comply with legal obligations, including responding to data subject requests, tax requirements, agreements, and disputes.

When carrying out these activities, we practice data minimization and use the minimum amount of personal information required.

We may share Personal Data with the following recipients:

• Affiliates: Personal Data may be shared with our affiliates to facilitate customer service, marketing, order fulfillment, billing, technical support, and legal and compliance obligations. Our affiliates may only use the Personal Data in a manner consistent with this Policy.
• Organization accounts: If an organization adds you to their account, we might share Personal Data with that organization to fulfill the commercial relationship.
• Competent authorities: We may disclose Personal Data to authorized law enforcement, regulators, courts, or other public authorities in response to lawful requests or to protect our rights and safety.
• Corporate transaction entities: We might disclose Personal Data within the limits of the law for strategic business transactions such as sales or a merger.
• Service providers: We may use vendors to provide services on our behalf, including hosting, marketing, support ticketing, credit card processing, or security services. They are bound by contractual obligations to ensure the security, privacy, and confidentiality of your information.

Our processing activities typically fall under these lawful bases:

• Contractual necessity: Processing is required to fulfill our contractual duties to you, in accordance with our Terms of Service.
• Legal obligation: We process data when it's necessary to comply with applicable laws or to protect the rights, safety, and property of our company, our affiliates, users, or third parties.
• Legitimate interests: We process data for purposes that are in our legitimate interests, such as securing our Services, communicating with you, and improving our Services. This is done only when these interests are not overridden by your data protection rights or your fundamental rights and freedoms.
• Consent: We process data when you have explicitly consented to such processing. When we rely on consent as the legal basis, you have the right to withdraw your consent for data processing at any time.

The security of your data is important to us. We strive to use commercially acceptable means to protect your Personal Information, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

We store your Personal Information in a way that reasonably protects it from unauthorized access, misuse, modification or disclosure. When we no longer require your Personal Information for the purpose for which it was collected, we will take reasonable steps to destroy, anonymize, or de-identify it.

Your data is stored securely in Australia and we implement appropriate technical and organizational security measures to protect your information.

While our primary data storage is in Australia, we may transfer, store, and process your information in countries other than your own. By using our Services, you consent to such transfers where necessary for providing our Services.

Under Australian privacy law and depending on your residence location, you have the right to:

• Request access to the personal data we hold about you
• Request correction of your personal data if it is inaccurate or incomplete
• Request erasure of your personal data under specific conditions
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data
• Withdraw consent where processing is based on your consent

To exercise these rights, please contact us at [email protected]. We aim to promptly respond to requests in compliance with legal requirements. Please note that we may retain certain data as necessary for legal obligations or for establishing, exercising, or defending legal claims.

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier.

9.1 Types of Cookies We Use:

• Essential Cookies: Required for the operation of our website, like storing settings and recognizing you while using our Services.
• Analytical Cookies: Help us understand how you use our website and improve our services.
• Functional Cookies: Remember your preferences and settings for enhanced functionality.
• Marketing Cookies: Track your visit across different websites (only used with consent where required by law).

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

We may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service
• To provide the Service on our behalf
• To perform Service-related services
• To assist us in analyzing how our Service is used

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our policies
• Maintain security measures

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18 or the minimum age required by law to be able to consent to access and use our Services, whichever is higher.

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us at [email protected]. We may seek further information from you to clarify your concerns.

If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the bottom of this page.

If you have any questions about this Privacy Policy, please contact us at [email protected].