Privacy policy

Who we are

Aura8 Pty Ltd, ABN 99 691 970 779, is based in Sydney, Australia. Contact us at hello@aura8.ai about personal information and this policy.

What we collect

We collect the details you choose to provide through contact and booking forms, including your name, work email, organisation and enquiry. Discover and readiness check entries may include website details, business goals and information about your systems and AI use. Shadow Guardian customer accounts include account, work profile, organisation and billing details.

Shadow Guardian records visits to listed AI sites in managed work browsers, including page addresses and titles. On supported AI tools it records uploaded file names, types and sizes. It does not record screens, keystrokes or browsing outside the listed AI sites. Prompt checks are switched off, so Guardian doesn't read what staff type. Some AI sites put words from a search or chat into page addresses or titles, which Guardian records. See our trust page for the full collection details and scope.

How we use information

We use information to respond to enquiries, prepare checks and bookings, provide and support the services you request, manage accounts and payments, and meet our legal obligations. Where you separately agree to marketing messages, you can unsubscribe.

Storage and retention

Guardian's production application, database and file storage are hosted in Australia. Some service providers, including Replit in the USA and our email provider, may access or process information outside Australia to run the service. Our trust page describes the current hosting and provider arrangements.

We keep lead and enquiry information for 24 months, then delete it.

Customer service records are retained for the agreed service period and any applicable legal record-keeping requirements. We use access controls and other safeguards described on our trust page; no system can guarantee absolute security.

Disclosure

We share information with service providers where needed to provide the service, such as hosting, email, booking and payment providers. We may also disclose information to your authorised contacts, professional advisers or where required by law.

Access and correction

You can ask to access or correct your personal information by emailing hello@aura8.ai. We may need to verify your identity before responding. If we cannot fulfil a request, we will explain why, subject to the law.

Questions and complaints

We handle privacy matters with reference to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where applicable. Please contact us first so we can investigate your concern. You can also contact the Office of the Australian Information Commissioner through its privacy complaints page.