Privacy Policy

1. Introduction

simplefy.ai Pty Ltd (“we”, “us”, “our”) operates the AI Governance Framework Generator (“the Platform”). This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). [REVIEW]

2. Information We Collect

We collect the following categories of personal information:

• Account information (name, email address)
• Organisation details provided during discovery
• Responses to governance framework questionnaires
• Usage data (pages visited, features used)
• Authentication data (login timestamps, session tokens)

[REVIEW]

3. How We Use Your Information

We use personal information to:

• Provide and maintain the Platform
• Generate tailored AI governance frameworks
• Communicate with you about your engagement
• Improve the Platform and our services
• Comply with legal obligations

[REVIEW]

4. Data Storage and Security

Your data is stored securely using Supabase, hosted on infrastructure in the Sydney (ap-southeast-2) region. We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit and at rest, row-level security policies, and regular access reviews. [REVIEW]

5. Third-Party Services

We use the following third-party services that may process your data:

• Supabase (authentication and database)
• Vercel (application hosting)
• Google (OAuth authentication, if used)

[REVIEW]

6. Data Sharing

We do not sell your personal information. We may share information with: your organisation's designated contacts (for governance framework delivery), service providers who assist in operating the Platform, or as required by law. [REVIEW]

7. Data Retention

We retain your personal information for the duration of your engagement and for a reasonable period thereafter for record-keeping and legal compliance. You may request deletion of your data at any time. [REVIEW]

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Complain about a breach of the APPs

[REVIEW]

9. Cookies and Tracking

The Platform uses essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics may be collected for service improvement purposes. [REVIEW]

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform. Your continued use of the Platform after changes constitutes acceptance of the updated policy. [REVIEW]

11. Contact

For privacy-related enquiries or to exercise your rights, contact us at privacy@simplefy.ai. [REVIEW]