Privacy Policy — The Ringlio Brief

In one line: we collect what we need to run your Brief and understand visits to our website, and store Brief records in Australia. We do not sell personal information or use your or your visitors' data to train AI. Under our Terms, we own and may retain, license or sell aggregated, anonymised Usage Data. Source records remain subject to the deletion rules below.

This policy explains how Ringlio AI (Ringlio AI Pty Ltd, ABN 28 698 318 393) (“Ringlio”, “we”, “us”) handles personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It covers our website at ringlioai.com and the product we operate for our clients, “The Brief”.

§ 01Two kinds of relationship

We handle personal information in two distinct roles, and your rights differ depending on which applies:

As a business client of Ringlio. If you buy a Brief, we hold your account, billing and the documents you give us. We are responsible for that information directly.
As a visitor to a client’s Brief. If you ask a question on a Brief published by one of our clients, that business is the one deciding what is collected and why — we handle it on their behalf to deliver the service. For requests about that data, the business is your first point of contact; we will help them respond.

We are also responsible for our own lawful processing to create the anonymised Usage Data described in §03. A client's acceptance of our Terms or this policy is not consent on behalf of its visitors.

§ 02What we collect

From our website (ringlioai.com)

If you request a free sample, the website address and email you enter. That form is delivered to us by Formspree (see §05).
If you email us, whatever you put in that email.
Website traffic statistics through Vercel Web Analytics: pages viewed, referring sites, approximate location, browser, operating system and device type. Our tracker removes query strings and fragments from page URLs and does not send form-field contents or custom events.

From business clients

Account & contact details — name, business name, email, phone, billing contact.
Billing information — handled by our payment processor, Stripe; we do not store full card numbers.
The documents you provide for your Brief to answer from (service pages, FAQs, fee schedules, PDFs and the like). These may contain personal information if you include it.

From visitors to a client’s Brief

The questions you type and the answers composed for you, kept so the page can be resumed and shared.
A reader identifier stored in a cookie - there is no login. It lets you return to a page you started. It is a pseudonymous identifier, not necessarily anonymous information.
Pages you save or clip.
If, and only if, you choose to register interest (“the Register”), the contact details you volunteer — typically your name and an email or phone — plus a note, a brief qualification we infer from your questions, and the conversation it relates to. This is opt-in and clearly labelled before you submit it.
Limited technical/abuse-prevention data. To stop misuse we keep counters and an event log. Notably, IP addresses are stored only as a one-way salted hash (never in the clear), and the content of questions is not recorded in that log — only a length and a flag.

§ 03How we use it

To build, operate and improve each client's Brief and to compose answers using that client's own documents, subject to the AI limitations in our Terms of Service.
To deliver registered-interest details (leads) to the relevant business.
To take payment, provide support, and send service messages.
To understand traffic to ringlioai.com and improve our website.
To keep the service secure, prevent abuse, and meet our legal obligations.

We do not sell personal information, we do not use it for third-party advertising, and we do not use your or your visitors’ data to train AI models — ours or anyone else’s.

Anonymised Usage Data. Where lawfully permitted, we process service records to create aggregated, anonymised statistics, metrics and derived insights across clients, brands and sites for service improvement, research, analytics and benchmarking. This is the Usage Data defined in §09 of our Terms of Service. It excludes source documents, raw questions and answers, lead records, personal information and client confidential information.

Usage Data must not identify, or reasonably enable identification of, an individual, client or brand, including when combined with other information reasonably available in the intended use or disclosure context. Removing names or hashing identifiers alone is not sufficient. Under the applicable accepted Terms, Ringlio owns this Usage Data and may combine, retain, publish, license or sell it without further client approval or payment. This does not authorise AI-model training.

We remain responsible for the lawful processing of personal information before anonymisation, including any notice or consent required by law. We use reasonable safeguards against re-identification, do not attempt or authorise it, and prohibit it in recipient licences. If data no longer meets these limits, we stop using or disclosing it as Usage Data and further anonymise or delete it.

§ 04Where it is stored

Your Brief records are stored in Australia. Our database and file storage run on Supabase in the Sydney region, and our application runs on Vercel with compute pinned to Sydney. To compose an answer, the question and the relevant passages of the client’s documents are sent to our AI providers for processing (see §05); the stored records themselves stay in Australia. Access inside our systems is restricted to a server-side service role — the data is not exposed to public or client-side access.

Marketing-site traffic statistics are processed by Vercel Web Analytics separately from Brief records and may be processed outside Australia. The Sydney storage commitment above applies to Brief records, not marketing-site analytics.

§ 05Who we share it with

We use a small set of trusted providers (“subprocessors”) to run the service. They may process data only to provide their function to us:

Provider	What it does	Where
Supabase	Database & file storage	Australia (Sydney)
Vercel	Application hosting & compute	Australia (Sydney)
Vercel Web Analytics	Traffic statistics for ringlioai.com	Vercel infrastructure; may be outside Australia
Anthropic (Claude)	Composes answers from the supplied documents, via API. Not used to train their models.	United States
Voyage AI	Turns documents & questions into search vectors for retrieval	United States
Resend	Sends lead notifications & service email	United States
Stripe	Payment processing (clients only)	Australia / United States
Formspree	Delivers the sample-request form on ringlioai.com only	United States

Some of these providers are overseas. Before personal information is disclosed to an overseas provider, we take reasonable steps - including contractual commitments - to ensure it is handled consistently with the Australian Privacy Principles, and we remain accountable for that handling under Australian privacy law. We share personal information otherwise only where the law requires it, or to protect our rights and safety. Anonymised Usage Data may be disclosed as described in §03.

§ 06Cookies & local storage

The Brief uses a small number of functional browser-storage items only - a pseudonymous reader identifier and a connectivity probe (cookies), plus a session token and your current edition kept in your browser's local storage so you can resume a page. We do not use advertising or cross-site tracking cookies. Blocking these may stop you resuming a page you started.

On ringlioai.com, Vercel Web Analytics measures traffic without analytics cookies or cross-site visitor identifiers. Vercel derives a temporary visitor identifier from each request and discards it after 24 hours. We see aggregated traffic reports. See Vercel’s analytics privacy information.

§ 07Security

We take reasonable steps to protect personal information: Brief records stored in Australia, transport encryption (HTTPS), row-level security with service-role-only access, IP addresses stored only as salted hashes, and question content kept out of our abuse logs. No system is perfectly secure, but we work to keep your data safe and will notify you and the OAIC of any eligible data breach as required.

§ 08How long we keep it & deletion

We keep personal information only as long as needed for the purposes above or as the law requires. Clients: you can ask us to delete your documents and account data, and we will do so on request and on cancellation, subject to any legal retention duty. Visitors: you can ask the business whose Brief you used, or contact us, to have your registered details removed.

We may retain Usage Data after deletion of source records or the end of a client relationship only while it meets the anonymisation requirements in §03. This does not extend retention of the underlying personal information or documents.

§ 09Your rights

Under the APPs you may ask to access or correct the personal information we hold about you. Email us (below) and we will respond within a reasonable time, usually within 30 days. If you are unhappy with how we have handled your information, you can complain to us first; if still unresolved, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

§ 10Children

Most Briefs are tools for businesses and are not directed at children. Some clients — schools among them — publish a Brief that students and their families may use. On every Brief: a visitor can ask questions without providing any personal details; the Register, where a visitor volunteers contact details, is directed at parents, guardians and adult enquirers, not at children; and we do not collect personal details a visitor does not choose to provide. If you believe a child has submitted personal details through the Register, contact the business whose Brief it is, or contact us, and we will remove them.

§ 11Changes

We may update this policy as the product evolves. We will publish a dated version and, for material changes affecting clients, let you know directly. A new or expanded use must have a lawful basis before it begins; we will provide any notice and obtain any consent required by law. Publication of this policy or acknowledgement at checkout does not, by itself, constitute consent to a use that requires consent.

§ 12Contact us

Questions, access requests, or privacy concerns:

Email: hello@ringlioai.com
Post: 19 Windarra Drive, City Beach WA 6015, Western Australia