Privacy Policy

AUSTRALIA AI TECHNOLOGY PTY LTD · ACN 701 748 898 · Effective 15 September 2026 · Version 1.0

1. Who we are

AUSTRALIA AI TECHNOLOGY PTY LTD (referred to as "AAT", "we", "us" or "our") is a proprietary limited company registered in Australia with Australian Company Number (ACN) 701 748 898, with its registered office at 31 Newstead Street, Caulfield VIC 3162, Australia.

We provide enterprise aggregation, integration and delivery services for third-party large language models and related artificial intelligence capabilities. In providing those services we may act as a controller (for example, in relation to our own business contacts and website visitors) and, where we process information on behalf of an enterprise customer under a service agreement, as a processor.

2. Scope of this policy

This Privacy Policy applies to personal information we handle in connection with:

• this website, including enquiries submitted through our contact form;
• business communications with prospective customers, customers, suppliers, partners and model providers;
• the provision of our enterprise services, to the extent we act as a controller; and
• recruitment and contractor engagement activities.

Where we process personal information on behalf of an enterprise customer, that customer's own privacy policy governs the relationship with the individuals concerned, and our handling is governed by the applicable services agreement and data processing terms between us and that customer.

This policy does not apply to third-party artificial intelligence model providers, whose own terms and privacy policies govern the information they process. Please refer to the relevant provider's documentation.

3. Information we collect

3.1 Information you provide to us

When you submit an enquiry through this website, we collect:

• your full name;
• your work email address;
• the name of your organisation;
• your role or job title;
• the area of interest and target timeline you select; and
• any additional information you choose to include in the free-text field.

We also collect information you provide in correspondence with us, at meetings, through proposals and statements of work, or in the course of a commercial relationship.

3.2 Information collected automatically

When you visit this website, our hosting infrastructure may automatically record standard technical information such as your IP address, browser type and version, operating system, referring page, the pages you request and the date and time of your request. This information is used for security, availability monitoring and aggregate traffic analysis. Please see our Cookie Policy for details of the technologies involved.

3.3 Information we do not collect

This website contains no consumer accounts, no online payment facilities, no advertising trackers, and no social media pixels. We do not knowingly collect sensitive information (such as health, biometric or political information) through this website, and we ask that you do not include such information in the free-text field of our contact form.

4. Why we collect, hold, use and disclose it

We handle personal information for the following purposes:

We do not use personal information collected through this website for automated decision-making or profiling. We do not sell, rent or trade personal information. We do not use your personal information, or your organisation's content, to train artificial intelligence models.

5. Cookies and similar technologies

This website uses only the technologies necessary to serve the pages and display them correctly. We do not deploy advertising or cross-site tracking cookies. For full details of the storage and third-party resources used, and how to control them, see our Cookie Policy.

6. Disclosure to third parties

We may disclose personal information to:

• Infrastructure and service providers who host and operate this website and our platforms, including cloud hosting providers;
• Artificial intelligence model providers, where this is necessary to deliver a service you or your organisation has engaged us to provide, and only in accordance with the configuration, retention settings and instructions agreed with the relevant customer;
• Professional advisers such as lawyers, auditors and insurers, where reasonably necessary;
• Authorities, where we are required or authorised to do so by law, regulation, court order or a lawful request;
• Successors, in connection with a proposed or actual reorganisation, merger, acquisition or sale of assets, subject to appropriate confidentiality protections.

We require our service providers to handle personal information under written terms that impose confidentiality and security obligations consistent with this policy and applicable law. We do not authorise them to use personal information for their own independent marketing purposes.

7. Overseas transfers

We operate from Australia and use infrastructure located in a number of countries. In particular, this website is hosted on infrastructure operated by Google Cloud in regions outside Australia, and the delivery of our services may involve routing requests to model providers located in the United States, the People's Republic of China, the European Union and elsewhere.

Where we transfer personal information outside Australia, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, including by entering into contractual arrangements, applying data minimisation, and using regional routing and retention configurations where available. For individuals in the European Economic Area or the United Kingdom, where relevant, transfers are made under appropriate safeguards such as the European Commission's standard contractual clauses.

8. Security and retention

We apply technical and organisational measures designed to protect personal information, including encryption in transit, access controls, network segregation, logging and monitoring, and role-based access limited to personnel who need it.

We retain personal information only for as long as it is needed for the purposes described in this policy, or as required by law. As a guide: enquiry records are retained for up to 24 months from last contact unless a commercial relationship is established; contract and financial records are retained for at least 7 years in line with Australian tax and corporate record-keeping requirements; and technical logs are retained for a short operational period. Where information is no longer required, we delete it or de-identify it.

If we become aware of a data breach that is likely to result in serious harm, we will assess and, where required, notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme. Where the General Data Protection Regulation applies, we will notify the relevant supervisory authority within 72 hours where required.

9. Your rights

Subject to applicable law, you may:

• request access to the personal information we hold about you;
• request correction of information that is inaccurate, incomplete or out of date;
• withdraw consent where our handling is based on consent (for example, by asking us to stop contacting you);
• object to or request restriction of certain processing, or request erasure of information, where the law provides for it;
• request a portable copy of information you provided to us, where applicable; and
• lodge a complaint with us or with a supervisory authority.

To exercise any of these rights, contact us using the details in section 12. We will respond within a reasonable period and, where the Australian Privacy Act 1988 (Cth) applies, within 30 days. We may need to verify your identity before acting on a request.

10. Complaints

If you believe we have breached applicable privacy law, please contact us first so we can investigate. If you are not satisfied with our response, you may contact:

• Australia — Office of the Australian Information Commissioner (OAIC), oaic.gov.au, telephone 1300 363 992;
• European Economic Area or United Kingdom — the data protection supervisory authority in your country of residence, work or the place of the alleged infringement.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The effective date at the top of this page indicates when the current version took effect. Material changes will be published on this page, and where required we will provide additional notice.

12. Contact us

Privacy enquiries, requests to access or correct your information, and any other correspondence about this policy should be directed to our administrator: