Privacy Policy

Compliance

XponixAI ("we", "our", "us") handles your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the GDPR for EU/UK users.

What We Collect

• Name, email address, and country of residence
• Chat inputs, feedback, and usage data (truncated IPs, device types)
• Payment amounts and partial card details via our secure gateway

We do not request or store passport scans, visa documents, or other sensitive identity documents.

How We Use Your Data

To deliver personalised AI responses, process subscriptions, and maintain platform security. Data is collected directly from you, via cookies, or through service providers.

Disclosure

We never sell your data. We share information only with:

• Microsoft Azure (hosting) and OpenAI (model inference, enterprise-segregated)
• Payment processors and de-identified analytics tools

Overseas transfers are protected by contractual clauses and technical safeguards.

Security and Retention

We use industry-standard encryption and access controls. Chat logs and usage data are retained for up to 24 months for dispute resolution and compliance. De-identified analytics may be kept indefinitely.

Your Rights

You can access, correct, or delete your personal information and withdraw consent at any time. Complaints can be lodged with the Office of the Australian Information Commissioner.