This Privacy Policy sets out how SupplyChain Assist AI Pty Ltd (ABN 97 699 029 046) ("we, us, our") collects, holds, uses, and discloses personal information in connection with our Website and the SupplyChain Assist platform. We take our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs") seriously and are committed to handling your personal information with care, transparency, and in accordance with the law.
WHAT PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT
What personal information do we collect?
The personal information we collect is generally limited to:
• name and contact details (including email address, phone number, and business address);
• account credentials (username and encrypted password) for platform access;
• business information (including company name, ABN, and industry);
• query content --- information you input into the Software when using the SupplyChain Assist platform, including supply chain system details and operational questions;
• payment and billing information (processed securely through our payment provider); and
• communications we have with you by email, phone, or through the platform.
We may also collect information about how you use our Website and platform via analytics tools and cookies (see below).
How do we collect your personal information?
We collect personal information primarily when you provide it to us directly. This may occur when you:
• create an account or complete sign-up forms on our platform or Website;
• submit queries or interact with the SupplyChain Assist AI platform;
• contact us by email, phone, or through our Website contact forms;
• subscribe to communications or marketing from us; or
• correspond with us in connection with a Subscription or support request.
We may also collect limited, aggregated information indirectly through our privacy-focused analytics provider, Plausible Analytics. Plausible is cookieless and does not collect personal information or track individuals across websites; it provides only aggregated statistics about how our Website is used.
We do not use analytics or advertising cookies on our Website, and our analytics provider (Plausible) is cookieless. Any cookies we do use are strictly necessary to help our Website function effectively and to maintain your session. You can manage your cookie preferences through your browser settings, though disabling cookies may affect the functionality of parts of our Website.
Why do we collect your personal information?
We collect and use personal information to:
• create and manage your account and provide access to the SupplyChain Assist platform;
• respond to your queries and provide support;
• process payments for Subscriptions;
• verify your identity for security and account management purposes;
• send you service-related communications (including account notices and updates);
• send you marketing or promotional communications, where you have opted in (you may unsubscribe at any time);
• analyse and improve our Website, platform, and services; and
• comply with our legal obligations, including financial record-keeping requirements.
We do not use the content of your platform queries (Your Information) to train our AI models without your express consent.
To manage your email communication preferences, use the unsubscribe link in any email we send you, or contact us at sales@supplychainassist.com.au.
How long do we retain your personal information?
We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by law. In general:
• Financial records are retained for a minimum of 7 years as required by law.
• Account and platform data is retained for the duration of your Subscription and for 3 years following your last interaction with us, unless you request earlier deletion.
• Query content submitted to the platform is retained in accordance with our data deletion process (see below).
WHEN WE DISCLOSE PERSONAL INFORMATION AND HOW YOU CAN ACCESS IT
When do we disclose your personal information?
We will not disclose your personal information to third parties except:
• with your consent;
• where required or authorised by law (including where we reasonably believe there is a serious risk to the life, health, or safety of any person);
• where necessary to provide our services to you (for example, to our payment processor, cloud hosting provider, or customer support tools); or
• to third-party analytics, data storage, or advertising service providers who assist us in operating our Website and platform.
We take reasonable steps to ensure that any third-party service providers we engage to handle your personal information comply with the APPs and applicable privacy laws.
Cross-border disclosure
Some of our third-party service providers (including cloud hosting, analytics, and payment providers) may be located overseas. We will take reasonable steps to ensure that any overseas recipients of your personal information are subject to laws or binding contractual obligations that provide privacy protections substantially similar to the APPs. This may include:
• entering into binding data processing agreements with overseas recipients;
• verifying that the recipient operates under a privacy framework substantially equivalent to the APPs; or
• obtaining your express consent to the overseas disclosure after informing you that the recipient may not be subject to the APPs.
How can you access, correct, or delete your information?
You have the right to request access to, correction of, or deletion of personal information we hold about you. To make a request, or to change your communication preferences, please contact us at sales@supplychainassist.com.au. We will respond to requests within a reasonable period, subject to any legal obligations requiring us to retain certain information.
If you have a complaint about the way we have handled your personal information, please contact us in the first instance. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) by:
• phone: 1300 363 992;
• online: https://www.oaic.gov.au (select "Lodge a Privacy Complaint"); or
• post: Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001.
AI AND YOUR INFORMATION
The SupplyChain Assist platform uses AI Technologies to process the queries you submit. The following principles govern how your information interacts with those AI Technologies:
• Your queries are not used for AI training without consent. We do not use the content of queries you submit to the platform to train, fine-tune, or improve our AI models without your express, written consent.
• Query data is processed to generate responses. When you submit a query, it is transmitted to and processed by our AI system to generate a response. This processing is necessary to provide the service.
• Do not submit sensitive personal information in queries. You should not input sensitive personal information (such as health information, government identifiers, or financial account details) into the platform unless strictly necessary. We are not responsible for the handling of such information by third-party AI model providers if it is included in a query.
• Third-party AI providers. The AI Technologies underlying our platform may incorporate models or components provided by third-party AI vendors. Those vendors may have their own data handling practices. We take reasonable steps to select providers whose practices are consistent with applicable privacy law, but we encourage you to contact us at sales@supplychainassist.com.au if you have concerns.
SECURITY
We implement and maintain appropriate technical, organisational, and security measures to protect your personal information against unauthorised access, use, disclosure, loss, destruction, or alteration. These measures include:
• login-protected access to the platform;
• SSL/TLS encryption for data transmitted to and from our Website and platform;
• encryption of stored personal information;
• access controls restricting platform access to authorised personnel only; and
• payment processing is handled by our third-party payment provider, Stripe, which is certified as compliant with the Payment Card Industry Data Security Standards (PCI DSS); we do not store full payment card details on our systems.
We will notify you as required by law in the event of a data breach that is likely to result in serious harm to you.
ADDITIONAL PROVISIONS FOR EUROPEAN RESIDENTS
If you are a resident of the European Economic Area ("EEA") or the United Kingdom, you have certain rights under the General Data Protection Regulation ("GDPR") or the Data Protection Act 2018 (UK). We act as a data controller in respect of personal information we collect from EEA and UK residents.
We will only process your personal information where we have a lawful basis to do so, including:
• where you have given us valid express consent;
• where processing is necessary to perform a contract with you; or
• where we are required to comply with a legal obligation.
Your rights under GDPR
As an EEA or UK resident, you have the right to: be informed; access your personal information; request rectification; object to processing; restrict processing; erasure ("right to be forgotten"); data portability; and the right not to be subject to solely automated decision-making.
To exercise any of these rights, please contact us at sales@supplychainassist.com.au. In some circumstances, we may continue to process your information after you have withdrawn consent where we have an independent legal basis to do so or where it is necessary to protect our legitimate security interests.
By providing us with your personal information, you consent to us disclosing it to third parties who may reside outside EEA countries or the UK. We will take reasonable steps to ensure those third parties are GDPR-compliant where required.
OTHER
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Where we make material changes, we will notify you by email or by a notice on our Website before the changes take effect. Your continued use of our Website or platform after notification constitutes acceptance of the updated Privacy Policy.
This Privacy Policy is governed by the laws of Victoria, Australia.
If you have any questions about this Privacy Policy or the way we handle your personal information, please contact us at sales@supplychainassist.com.au.
SupplyChain Assist AI Pty Ltd | ABN 97 699 029 046
Registered in Victoria, Australia | sales@supplychainassist.com.au