Privacy Policy

Airentect Pty Ltd (Airentect, we, us or our) respects your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal information when you use our website, console, browser extension, APIs and related services (collectively, the Services).

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Scope

This policy applies to:

• visitors to our public website and marketing pages;
• prospective customers who contact us or subscribe to updates;
• organisation administrators and authorised users of the Airentect console; and
• end users whose organisations deploy the Airentect browser extension.

Your organisation may also have its own policies governing staff use of AI tools. Where we process information on behalf of a customer organisation, that organisation remains responsible for informing its users as required.

2. Information we collect

Website and marketing

• name, email address, phone number and message content when you submit forms;
• email address when you subscribe to updates; and
• technical data such as IP address, browser type, device information and pages viewed.

Console and organisation accounts

• account identifiers and authentication data from our identity provider (Clerk);
• organisation name and administrator contact details;
• extension user directory entries (such as email and display name) created by your administrators; and
• configuration data such as policies, groups and inventory settings.

Browser extension and gateway

• organisation and endpoint identifiers, extension version and browser context;
• hashed extension API credentials (we store hashes, not plaintext keys);
• prompt analysis metadata, policy outcomes, timestamps and audit logs;
• prompt text or redacted prompt text where required for classification, enforcement and logging; and
• heartbeat and telemetry needed to show install status in the console.

We design the Services to minimise collection of personal information where practicable. Your organisation controls what categories are logged and how long records are retained through product configuration and agreements with us.

3. How we use information

We use personal information to:

• provide, operate and maintain the Services;
• authenticate users and enforce organisation access controls;
• classify prompts, apply policies and produce audit and governance reports;
• respond to enquiries and provide support;
• improve reliability, security and product features;
• comply with legal obligations; and
• send product updates where permitted (you may opt out of marketing emails).

4. Cookies and analytics

We use cookies and similar technologies on our website as described in our Cookie Policy. Non-essential analytics run only if you accept cookies in our banner.

5. Disclosure to service providers

We may disclose information to trusted providers who help us deliver the Services, including:

• hosting and infrastructure (for example Vercel);
• authentication (Clerk);
• database and backend services (Supabase);
• email delivery (Google Workspace / Gmail API);
• analytics (Google Analytics and Vercel Analytics, if consented); and
• cloud compute for gateway and classification (for example AWS).

These providers may process data in Australia, the United States, the European Union or other countries. Where we disclose personal information overseas, we take reasonable steps to ensure recipients handle it in a manner consistent with the APPs.

6. Security and retention

We use administrative, technical and organisational measures designed to protect personal information from misuse, interference, loss and unauthorised access. No online service is completely secure.

We retain information for as long as needed to provide the Services, meet legal obligations, resolve disputes and enforce agreements. Retention periods for customer audit logs may be set out in your agreement with us.

7. Access, correction and complaints

You may request access to or correction of personal information we hold about you by contacting info@airentect.com. We will respond within a reasonable period.

If you believe we have breached the APPs, contact us first. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

8. Children

The Services are not directed at children under 18. We do not knowingly collect personal information from children.

9. Changes

We may update this Privacy Policy from time to time. The current version will always be published on this page with an updated "Last updated" date.

10. Contact

Airentect Pty Ltd
Email: info@airentect.com

See also our Privacy Collection Notice and Terms of Service.