1. Introduction

Rapid Policies Australia Pty Ltd ("we", "us", or "our") operates Aegis AI ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service, in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and authentication credentials when you create an account.
• Usage Data: Chat messages, uploaded documents, voice interactions, and usage patterns to provide and improve the Service.
• Payment Information: Subscription and billing details processed securely through Stripe. We do not store full credit card numbers.
• Technical Data: Browser type, device information, IP address, and cookies for security and analytics purposes.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Personalise your experience (including EMMA's responses)
• Communicate with you about your account and the Service
• Ensure the security and integrity of the Service
• Comply with legal obligations

4. AI and Chat Data

Your chat conversations with EMMA are stored to maintain your conversation history and improve the Service. Voice interactions are processed in real-time and are not permanently stored as audio recordings. We may use anonymised and aggregated data to improve our AI models and Service quality. We do not sell your personal data or chat content to third parties.

5. Data Storage and Security

Your data is stored on secure servers with encryption at rest and in transit. We implement industry-standard security measures including access controls, encryption, and regular security audits. Uploaded documents are stored securely in cloud storage (AWS S3) with access restricted to your account.

6. Third-Party Services

We use the following third-party services:

• Stripe: For payment processing (subject to Stripe's privacy policy)
• ElevenLabs: For text-to-speech voice generation (voice data is processed but not stored)
• Cloud Infrastructure: For hosting and data storage with enterprise-grade security

7. Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for data processing
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies or advertising cookies. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at [email protected].

You may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you have concerns about how we handle your personal information.