Privacy policy.

1. Who we are

Corro AI (ABN 22 169 955 404) is run by Dian Van Rensburg in Brisbane, Queensland. We design, build and run AI agents and automations for businesses across Brisbane, South East Queensland and further afield.

In this policy, "we", "us" and "our" mean Corro AI. "You" means anyone who visits getcorro.com.au, contacts us, or works with us.

We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). We hold ourselves to the APPs even where the Act might not strictly apply to a business of our size.

2. The personal information we collect

We only collect what we need. Depending on how you deal with us, that can include:

• Contact details: your name, business name, email address and phone number.
• What you tell us about your business: the work that takes up your team's time, the hours you'd like back, and anything else you share in the contact form, by email, on a call or in a meeting.
• Chat messages: what you type into the Ask Corro chat on our website.
• Client and project information: when you become a client, the details we need to deliver our services, such as the names, roles and contact details of your team, the systems we connect to, and records of the work our agents do (see section 6).
• Billing information: invoices, payment records and your business's ABN. We don't store card numbers.
• Technical information: basic data that our hosting provider records automatically, such as your browser type, device, IP address and pages visited, to keep the site running and secure.

We don't ask for sensitive information, such as health, racial or religious information, and we ask you not to send it to us. If it reaches us by accident, we delete it unless the law requires us to keep it.

You can deal with us without giving your name, for example when you browse the site or ask a general question in the chat. We can't reply to you or work with you without contact details, though.

3. How we collect it

• Directly from you: through our contact form, the chat, email, phone and video calls, and meetings.
• From your business: when you give us access to your systems so we can build and run your agents.
• Automatically: through our hosting provider when you use the website.

We don't buy contact lists, and we don't collect information about you from third parties for marketing.

4. Why we use it

• To reply to your enquiry, book a call and work out whether our agents are a good fit for your business.
• To deliver our services: measuring the work, building and running your agents, fixing problems and reporting on the time and money saved.
• To invoice you and manage our business relationship.
• To run, secure and improve our website.
• To meet our legal, tax and accounting obligations.

We'll only send you marketing emails if you've asked to hear from us, and every one includes an easy way to unsubscribe, as the Spam Act 2003 requires. We never sell, rent or trade your personal information.

5. AI tools and how we use them

We use AI services to answer questions in the Ask Corro chat and to power the agents we build for clients. When these services process information, it is sent to the AI provider to generate a response.

We choose AI providers whose business terms say they don't use the data we send them to train their models, and we don't use your information to train AI models ourselves.

Our agents are set up to say they're AI. They don't make hiring, pay, pricing or legal decisions, and anything outside the rules we agree with a client goes to a person.

6. Client data we handle for you

When we build and run agents for a client, we may handle personal information held by that client, for example the details of their staff, candidates, workers or customers. In that case:

• We only access the systems and records the client approves, and only for the work we've agreed.
• The data stays in the client's own tools and accounts wherever possible, and the client stays in control of it.
• We don't use it for any other purpose, and we never sell it or share it with anyone except the service providers needed to run the agents.
• When our work ends, we hand everything back and remove our access, as set out in our agreement with the client.

Our clients remain responsible for their own privacy obligations to the people whose information they hold. Our agreement with each client sets out how we handle their data.

7. Who we share it with

We only share personal information with service providers who help us run our business, and only as much as they need:

• Base44, which hosts our website, contact form and chat.
• The AI providers that power the chat and our agents.
• The tools a client asks us to connect, such as their email, accounting, inventory, warehouse or fleet systems.
• Our accountant, bank and payment providers, for billing and tax.

We may also disclose information when the law requires it, or to protect someone's safety.

8. Overseas storage and processing

Some of our service providers, including our website host and AI providers, store or process information outside Australia, mainly in the United States. Before using a provider, we take reasonable steps to make sure it protects personal information to a standard similar to the APPs.

By using our website or services, you accept that your information may be handled overseas in this way.

9. Keeping it secure

• Enquiries sent through our website can only be read by us.
• We use services with encryption in transit and access controls, and we protect our accounts with strong passwords and two-factor authentication where available.
• We only give our agents the access they need to do their job.

No system is completely secure. If we become aware of a data breach that is likely to cause serious harm, we'll act quickly to contain it, tell the people affected, and notify the Office of the Australian Information Commissioner (OAIC) where required.

10. How long we keep it

• Enquiries and chat messages from people who don't become clients: up to 24 months, then we delete them.
• Client records, invoices and tax records: for as long as Australian tax and business law requires, usually 5 to 7 years.
• Client data inside agents we run: only while we run them. When our work ends, we hand it back or delete it.

You can ask us to delete your information sooner, unless the law requires us to keep it.

11. Cookies and analytics

Our website uses the cookies and browser storage it needs to work, for example to remember your chat during a visit. We don't currently use advertising cookies or sell data to advertisers. If we add analytics or advertising tools, we'll update this policy first.

12. Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct or delete it. Just send us a request through our contact form or call 0477 063 722. We'll respond within 30 days and won't charge you for a reasonable request. If we can't do what you ask, we'll tell you why.

13. Questions and complaints

If you have a question or a concern about how we've handled your personal information, please contact us through our contact form, marking it as a privacy matter, or call 0477 063 722. We'll take it seriously, look into it and respond within 30 days.

If you're not happy with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

14. Changes to this policy

We may update this policy as our business or the law changes. The latest version will always be on this page, with the date it was last updated.