Privacy Policy

1. Scope

This Privacy Policy explains how LOCAI TECHNOLOGY PTY LTD ("LocAI", "we", "us", or "our") collects, uses, discloses, stores, and protects information when you use our website, dashboard, API services, billing flows, documentation, support channels, and related products (together, the "Services").

We operate from Australia and handle personal information in line with the Australian Privacy Principles where they apply. Users in other jurisdictions may also have local privacy rights, including rights under the GDPR or similar laws.

2. Information We Collect

We may collect information you provide directly, information generated when you use the Services, and information we receive from trusted third parties.

• Account information: email address, name, organization, login records, invite status, account role, and dashboard preferences.
• Billing information: prepaid wallet activity, invoice details, checkout session identifiers, payment status, transaction metadata, and Stripe customer references. We do not store full card numbers.
• API usage metadata: API key identifiers, model name, protocol, request time, token counts, response status, latency, cost, and operational logs needed for billing, abuse prevention, debugging, and reliability.
• Content submitted to the Services: prompts, inputs, files, messages, responses, and related content may be processed to provide the requested service. Retention depends on the product setting, operational need, and legal obligation.
• Website and device information: IP address, browser type, pages visited, referring URLs, approximate location, cookie identifiers, and similar diagnostics.
• Communications: emails, support requests, sales inquiries, partnership messages, attachments, and feedback you send to us.

3. How We Use Information

• Provide, secure, maintain, and improve the Services.
• Create accounts, authenticate users, issue API keys, manage access, and deliver dashboard features.
• Process prepaid wallet top-ups, invoices, refunds, fraud checks, taxes, and billing support.
• Measure API usage, calculate costs, apply limits, troubleshoot incidents, and protect service availability.
• Respond to support, privacy, security, legal, sales, and partnership requests.
• Develop aggregate statistics, internal reporting, and service analytics that help us operate LocAI responsibly.
• Send important service notices, policy updates, security alerts, and optional marketing communications where permitted.

4. AI Inputs, Outputs, and Model Training

LocAI processes customer inputs and outputs to provide model responses, route requests, operate tools, perform abuse checks, support billing, and maintain reliability. We treat customer API content as customer content.

We do not use customer API prompts, files, or outputs to train public third-party foundation models. If we ever offer an optional improvement, fine-tuning, evaluation, or managed service workflow that uses customer content beyond ordinary service delivery, the applicable terms or written agreement will describe that use.

5. Disclosure to Other Parties

We may disclose information to other parties where necessary to operate LocAI, protect users, comply with law, work with business partners, or support business operations. These parties may include:

• Service providers and processors: hosting, infrastructure, database, monitoring, security, analytics, support, email, and payment providers.
• Payment partners: Stripe and related financial partners for checkout, fraud prevention, refunds, chargebacks, invoices, and tax or accounting records.
• Professional advisers: lawyers, accountants, auditors, insurers, and compliance advisers.
• Business partners: integration, reseller, enterprise, or implementation partners when needed to deliver a requested service or commercial relationship.
• Affiliates and corporate parties: entities involved in an acquisition, financing, restructuring, merger, or sale of assets, subject to appropriate safeguards.
• Authorities or legal parties: regulators, courts, law enforcement, or others where disclosure is required by law or needed to protect rights, safety, security, or service integrity.

We do not sell personal information in the ordinary meaning of that term.

6. Cookies and Analytics

We use cookies and similar technologies for authentication, session management, security, preferences, analytics, and product measurement. Some cookies are essential for the Services to work. You can control cookies through your browser, but disabling essential cookies may limit access to logged-in features.

7. Security

We use technical and organizational safeguards designed to protect information, including access controls, encryption in transit, secret management practices, webhook verification, account controls, logging, and operational review. No online service can guarantee absolute security, so users should also protect API keys, passwords, devices, and account access.

8. Retention

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, protect the platform, maintain business records, and support billing or audit requirements. Retention periods may vary by data type, product setting, contract, legal requirement, and operational need.

9. International Transfers

LocAI is based in Australia, and our service providers, processors, infrastructure, partners, or users may be located in other countries. Information may be transferred to, stored in, or processed in Australia and other jurisdictions. Where required, we use appropriate contractual, technical, and organizational safeguards for international transfers.

10. Your Choices and Rights

Depending on your location and relationship with LocAI, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. You may also unsubscribe from marketing emails.

To make a privacy request, contact us at info@locai.com.au. We may need to verify your identity and account relationship before acting on a request.

11. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to LocAI, contact us so we can review and take appropriate action.

12. Enterprise and Partner Terms

Some enterprise, reseller, education, research, or partner arrangements may be governed by separate written agreements, data processing terms, security terms, or order forms. If those terms conflict with this Privacy Policy for a covered customer relationship, the written agreement controls for that relationship.

13. Changes

We may update this Privacy Policy from time to time. When changes are material, we will take reasonable steps to notify affected users, such as by posting an updated policy, sending email, or providing an in-product notice. The date at the top shows the latest update.

14. Contact

For privacy, security, support, legal, partnership, or data rights questions, contact us any time:

LOCAI TECHNOLOGY PTY LTD
ABN 49 676 179 114
Suite 3, 38 Rowe St, Eastwood NSW 2122