Last Updated: September 26, 2024

Your data is secure with us. We collect, use, and protect your personal information to provide our services. You control your data, and we’re committed to transparency and compliance with global privacy laws.

1. Introduction

Enterprise AI Pty Ltd (“we,” “us,” “our”) is committed to safeguarding the privacy of our users, customers, and partners. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our products and services, including our website, software, and other online platforms (collectively referred to as “Services”) in accordance with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth) and New Zealand Privacy Act 2020. This policy also addresses our obligations under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data Controller

Enterprise AI Pty Ltd is the data controller responsible for the processing of personal data as described in this Privacy Policy. Our registered office is located at Level 12, 50 Carrington St, Sydney, NSW 2000, Australia.

3. Scope of This Privacy Policy

This Privacy Policy applies to:

• Individuals who use our Services, whether as direct users or as employees or customers of our corporate clients.
• Corporate clients that purchase our Services and provide them to their customers and staff.

4. Data We Collect

We collect various types of data to provide and improve our Services:

4.1 Personal Data Provided by Individuals

• Account Information: Name, contact details, account credentials, and payment information.
• Content Data: Any personal data included in inputs, files, or other content you provide while using our Services.
• Communication Data: Information you provide when you contact us, such as your name, email address, and the content of your message.
• Usage Data: Data about how you interact with our Services, including log data, device information, and usage patterns.

4.2 Data Provided by Corporate Clients

• Employee and Customer Data: Data about your employees or customers that you provide to us for the purpose of using our Services, including names, contact details, and usage data.
• Organisational Data: Data about your organisation, including business strategies, operational procedures, and other sensitive information necessary for the use of our Services.

5. How We Use Your Data

We use your data for the following purposes:

• To Provide and Maintain Our Services: We process your data to deliver the features and functions of our Services, including user authentication, customer support, and software updates.
• To Improve Our Services: We analyse usage data to improve the performance, functionality, and security of our Services, ensuring that we continuously meet your needs.
• To Communicate with You: We use your contact information to send you updates, newsletters, and other communications related to our Services. You can opt out of receiving such communications at any time.
• To Comply with Legal Obligations: We process your data to fulfil our legal obligations, including data retention, compliance with governmental requests, and the protection of our rights.

6. Data Sharing and Disclosure

We may share your data under the following circumstances, always ensuring that appropriate safeguards are in place:

• With Service Providers: We may share your data with third-party service providers who assist us in delivering our Services, such as cloud hosting providers, payment processors, and customer support services. These providers are bound by contractual obligations to protect your data and use it only as necessary to perform their functions. We ensure that these providers comply with GDPR and other applicable data protection laws.
• With Corporate Clients: If you are an employee or customer of a corporate client, we may share your data with your employer or the entity that provided you access to our Services. This includes usage data and other information necessary to fulfil our contractual obligations to our corporate clients. Corporate clients are responsible for ensuring that they have the necessary legal basis to share data with us.
• With Legal Authorities: We may disclose your data to government authorities or other third parties if required by law or if we believe such action is necessary to comply with legal obligations, protect our rights, prevent fraud or abuse, or respond to an emergency.

7. Data Security

We implement robust security measures to protect your data from unauthorised access, disclosure, alteration, or destruction. These measures include encryption, access controls, regular security audits, and monitoring for potential vulnerabilities. We also require our service providers to adhere to similar security standards.

To further enhance security, we regularly review our security practices and update them in line with industry best practices and evolving threats. Despite our best efforts, no security measure is completely infallible, and we cannot guarantee absolute security.

8. Data Retention

We retain your data only as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We periodically review the data we hold and securely delete or anonymise it when it is no longer needed.

For corporate clients, data retention policies may be governed by specific contractual agreements, which we will honour. We encourage corporate clients to implement clear data retention policies to ensure compliance with applicable laws.

9. International Data Transfers

As an Australian company, we may transfer your data to countries outside of your jurisdiction, including the United States and other locations where our service providers operate. We ensure that such transfers comply with applicable data protection laws, including the use of Standard Contractual Clauses approved by the European Commission for transfers of personal data from the European Economic Area (EEA), Switzerland, and the UK.

For data transfers to countries that do not provide an adequate level of protection, we implement additional safeguards to ensure that your data is protected. These safeguards may include encryption, anonymisation, and ensuring that third parties handling the data are bound by stringent contractual obligations.

10. Your Rights

You have the following rights regarding your personal data, subject to certain conditions and limitations:

• Access: You can request access to the personal data we hold about you and obtain a copy of it.
• Rectification: You can request that we correct any inaccuracies in your personal data.
• Erasure: You can request that we delete your personal data, subject to certain conditions, such as our legal obligations to retain the data.
• Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another data controller.
• Objection: You can object to the processing of your personal data for certain purposes, such as direct marketing. In such cases, we will cease processing unless we have compelling legitimate grounds to continue.
• Withdrawal of Consent: If we rely on your consent to process your data, you can withdraw that consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdrew your consent.

To exercise these rights, please contact us at legal@enterpriseaigroup.com. We may require verification of your identity before processing your request, to ensure that we are dealing with the correct individual.

11. Children’s Privacy

Our Services are not directed at minors (under the age of 18), and we do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor without proper consent, we will take steps to delete that data promptly.

We require corporate clients to ensure that any use of our Services by minors complies with applicable laws, including obtaining parental consent where necessary.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. We will notify you of any significant changes by posting the updated policy on our website and, where appropriate, providing additional notification (e.g., via email).

The date of the latest revision will always be indicated at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Enterprise AI Pty Ltd

Level 12, 50 Carrington St

Sydney, NSW 2000

Australia

Email: legal@enterpriseaigroup.com

Phone: +61 2 7200 2525

This Privacy Policy is designed to comply with the GDPR and other relevant privacy laws, ensuring that your data is handled responsibly and transparently across all jurisdictions where we operate.