This policy is written to explain our current website and service practices clearly. Features and providers may evolve; the current version will always be published here.
1. Scope and our commitment
This policy applies to the GeoAI Studio website, customer accounts, contact and early-access forms, ordering journeys and related services that link to it.
We aim to manage personal information openly and in line with applicable Australian privacy requirements, including the Australian Privacy Principles where they apply.
2. Information we collect
The information we collect depends on how you interact with GeoAI Studio.
- Identity and contact details, including your name, email, phone number, business or organisation and location.
- Account information, profile settings, authentication records and communication preferences.
- Enquiry, early-access and support information you submit through our forms.
- Order and project information, including selected solutions, configuration choices, candidate locations, areas of interest and uploaded materials.
- Transaction records such as product, amount, tax, invoice and payment status. Stripe processes payment-card information.
- Technical and usage information such as IP address, browser, device, pages visited, referral source and diagnostic logs.
- Communications and feedback you send to us.
3. How we collect information
- Directly from you when you register, complete a form, configure an order, contact us or provide project inputs.
- Automatically through essential cookies, session technologies, security logs and enabled analytics tools.
- From payment, authentication, scheduling, hosting and other service providers when required to complete your request.
- From public or licensed data sources used for location analysis. We distinguish project data from personal information and use each only for appropriate purposes.
4. How we use information
- Create and secure customer accounts and maintain profile preferences.
- Respond to enquiries and notify people who request launch or solution updates.
- Configure, price, process and deliver orders, invoices and receipts.
- Produce requested location-intelligence outputs and communicate about the project.
- Operate, protect, troubleshoot and improve the website and services.
- Prevent fraud, misuse and security incidents and meet legal, accounting and regulatory obligations.
- Send marketing communications only where permitted or consented to, with an option to unsubscribe.
5. When we disclose information
We may disclose only the information reasonably needed to trusted providers that help us operate the service. Depending on the feature used, these may include Supabase for authentication and database services, Stripe for payments, Resend or another configured provider for email, Calendly for meeting bookings, cloud hosting providers and analytics or security services.
We may also disclose information when required by law, to protect rights or safety, to investigate misuse, or as part of a genuine business transfer subject to appropriate safeguards. We do not sell personal information.
6. Overseas processing
Some service providers may store or process information outside Australia. Countries can vary according to the provider, its infrastructure and the settings used. Where applicable, we take reasonable steps to use reputable providers and appropriate contractual, technical and organisational safeguards.
8. Security and retention
We use reasonable technical and organisational measures designed to protect information, including access controls, encrypted connections, restricted database permissions and service-provider security controls. No online system can be guaranteed completely secure.
We retain information only for as long as reasonably needed for the purpose collected, service delivery, dispute resolution, security, accounting and legal obligations. Retention periods vary by record type. Information that is no longer required is deleted or de-identified where practical and lawful.
9. Access, correction and choices
You may ask us to provide access to, correct or, where applicable, delete personal information we hold about you. You can update certain account details and communication preferences directly through your customer account.
We may need to verify your identity before actioning a request. Some records may need to be retained where required by law or for legitimate security, transaction or dispute purposes.
10. Data incidents and privacy complaints
We assess suspected data incidents and will make notifications where required by applicable law. If you have a privacy concern, contact us with enough detail for us to investigate. We will acknowledge and respond within a reasonable time.
If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner.
11. Children
GeoAI Studio is a business service and is not directed to children. We do not knowingly seek personal information from children through customer accounts or ordering features.
12. Changes to this policy
We may update this policy as the service, providers or legal requirements change. The current version and effective date will be published on this page. Material changes may also be communicated through the website or account email where appropriate.
13. Contact us
Use our secure contact form for privacy questions, access or correction requests, deletion requests or complaints. Please select the most relevant enquiry type and include “Privacy” in the subject.