Privacy Policy

We collect information you provide to us and information generated by your use of the Service:

• Account details: name, business name, email address, mobile number, industry, and (if you provide them) profile photo and time zone.
• Billing details: business name, billing address, and payment metadata (we do not store full card numbers — see “Payments” below).
• Content you submit: improvements, opportunities, automation definitions, notes, uploads, and other data you enter into the Service.
• Usage information: log data, device and browser information, IP address, and information about how you interact with the Service.
• Communications: messages you send to us and preferences for product, transactional, and marketing communications.

We use personal information to:

• provide, personalise, secure, and improve the Service;
• authenticate members and prevent fraud and abuse;
• process membership payments and issue receipts and invoices;
• send transactional messages (billing, security, and service updates) that are part of the Service and cannot be disabled while you are a member;
• send product updates and educational content when you have opted in;
• respond to support requests and comply with our legal obligations.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where applicable to overseas members, we rely on performance of your membership contract, our legitimate interests in operating and securing the Service, your consent (for optional marketing), and our legal obligations.

We use a small number of trusted third-party providers to run the Service. These are common infrastructure providers used across the SaaS industry, and they only process personal information on our instructions and under contract.

• Cloud hosting for application delivery and edge functions.
• Database and authentication provider for member accounts and application data storage.
• Payment processor for membership billing and card handling (payment card details are entered directly with the processor).
• Transactional email provider for account, billing, and service-related messages.
• Analytics and error monitoring providers for aggregated usage and reliability information.

We keep this list current and will update this page when we add or change a major subprocessor.

Payment card details are collected and processed by our payment processor. Kayotte does not store full card numbers on its systems. The payment processor is contractually required to handle card data under industry standards.

We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, and understand aggregated usage patterns. You can control cookies through your browser settings; some parts of the Service may not work without them.

We do not sell personal information. We share personal information only with our subprocessors as described above, with professional advisers under confidentiality, and where required by law or to protect Kayotte, our members, or the public.

Some of our subprocessors host or process data outside Australia. Where personal information is transferred overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

We keep personal information for as long as you are a member and for a period after your account is closed to allow for billing, dispute resolution, and legal obligations. Member account data is deleted from active systems within 90 days of account closure, subject to any records we are required by law to retain (for example, financial and tax records).

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit, and role-based access to production systems. No online service is perfectly secure; please help us by keeping your account credentials confidential and reporting suspicious activity.

You may:

• access and update your account details from within the Service;
• request a copy of the personal information we hold about you;
• request correction or deletion of your personal information;
• opt out of non-essential marketing communications at any time.

To exercise these rights, email info@kayotte.ai. We will respond within a reasonable time and, where required, in line with applicable law.

The Service is not directed at children and we do not knowingly collect personal information from anyone under 18.

We may update this Privacy Policy from time to time. If we make material changes, we will notify members through the Service or by email before they take effect.

Privacy questions, requests, or complaints can be sent to info@kayotte.ai. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).