Privacy Policy

Effective Date: 1 January 2026

1. Information We Collect

We collect your name, email address, and payment details (processed securely via Stripe). We also collect usage data to improve the platform experience.

2. How We Use Your Information

Your information is used to provide and improve our services, process payments, send account notifications, and communicate about platform updates.

3. Data Storage & Security

Your data is stored securely using industry-standard encryption. We implement SOC 2 and NIST-aligned security practices including rate limiting, input validation, and secure session management.

4. Third-Party Services

We use the following third-party services: Stripe (payment processing), Google Gemini & OpenAI (AI features), and SMTP email services. These providers have their own privacy policies.

5. Cookies & Sessions

We use session cookies for authentication. These are essential for the platform to function and expire after 24 hours of inactivity.

6. Your Rights

Under the Australian Privacy Act 1988, you have the right to access, correct, or delete your personal information. Contact us to exercise these rights.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your personal data is removed within 30 days.

8. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or platform notification.

9. Contact

For privacy-related enquiries, please contact us at support@rtoaivox.com.au.