Privacy Policy

This policy explains how Ringlio AI (Ringlio AI Pty Ltd, ABN 28 698 318 393) (“Ringlio”, “we”, “us”) handles personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It covers our website at ringlioai.com and the product we operate for our clients, “The Brief”.

§ 01Two kinds of relationship

We handle personal information in two distinct roles, and your rights differ depending on which applies:

• As a business client of Ringlio. If you buy a Brief, we hold your account, billing and the documents you give us. We are responsible for that information directly.
• As a visitor to a client’s Brief. If you ask a question on a Brief published by one of our clients, that business is the one deciding what is collected and why — we handle it on their behalf to deliver the service. For requests about that data, the business is your first point of contact; we will help them respond.

§ 02What we collect

From our website (ringlioai.com)

• If you request a free sample, the website address and email you enter. That form is delivered to us by Formspree (see §05).
• If you email us, whatever you put in that email.

From business clients

• Account & contact details — name, business name, email, phone, billing contact.
• Billing information — handled by our payment processor, Stripe; we do not store full card numbers.
• The documents you provide for your Brief to answer from (service pages, FAQs, fee schedules, PDFs and the like). These may contain personal information if you include it.

From visitors to a client’s Brief

• The questions you type and the answers composed for you, kept so the page can be resumed and shared.
• An anonymous reader identifier stored in a cookie — there is no login. It lets you return to a page you started; it is not linked to your name.
• Pages you save or clip.
• If, and only if, you choose to register interest (“the Register”), the contact details you volunteer — typically your name and an email or phone — plus a note, a brief qualification we infer from your questions, and the conversation it relates to. This is opt-in and clearly labelled before you submit it.
• Limited technical/abuse-prevention data. To stop misuse we keep counters and an event log. Notably, IP addresses are stored only as a one-way salted hash (never in the clear), and the content of questions is not recorded in that log — only a length and a flag.

§ 03How we use it

• To build, operate and improve each client’s Brief and to compose answers only from that client’s own documents.
• To deliver registered-interest details (leads) to the relevant business.
• To take payment, provide support, and send service messages.
• To keep the service secure, prevent abuse, and meet our legal obligations.

We do not sell personal information, we do not use it for third-party advertising, and we do not use your or your visitors’ data to train AI models — ours or anyone else’s.

§ 04Where it is stored

Your data is stored in Australia. Our database and file storage run on Supabase in the Sydney region, and our application runs on Vercel with compute pinned to Sydney. To compose an answer, the question and the relevant passages of the client’s documents are sent to our AI providers for processing (see §05); the stored records themselves stay in Australia. Access inside our systems is restricted to a server-side service role — the data is not exposed to public or client-side access.

§ 05Who we share it with

We use a small set of trusted providers (“subprocessors”) to run the service. They may process data only to provide their function to us:

Some of these providers are overseas. Before personal information is disclosed to an overseas provider, we take reasonable steps — including contractual commitments — to ensure it is handled consistently with the Australian Privacy Principles, and we remain accountable for that handling under Australian privacy law. We share data otherwise only where the law requires it, or to protect our rights and safety.

§ 06Cookies & local storage

The Brief uses a small number of functional browser-storage items only — an anonymous reader identifier and a connectivity probe (cookies), plus a session token and your current edition kept in your browser’s local storage so you can resume a page. We do not use advertising or cross-site tracking cookies. Blocking these may stop you resuming a page you started.

§ 07Security

We take reasonable steps to protect personal information: data stored in Australia, transport encryption (HTTPS), row-level security with service-role-only access, IP addresses stored only as salted hashes, and question content kept out of our abuse logs. No system is perfectly secure, but we work to keep your data safe and will notify you and the OAIC of any eligible data breach as required.

§ 08How long we keep it & deletion

We keep personal information only as long as needed for the purposes above or as the law requires. Clients: you can ask us to delete your documents and account data, and we will do so on request and on cancellation, subject to any legal retention duty. Visitors: you can ask the business whose Brief you used, or contact us, to have your registered details removed.

§ 09Your rights

Under the APPs you may ask to access or correct the personal information we hold about you. Email us (below) and we will respond within a reasonable time, usually within 30 days. If you are unhappy with how we have handled your information, you can complain to us first; if still unresolved, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

§ 10Children

Most Briefs are tools for businesses and are not directed at children. Some clients — schools among them — publish a Brief that students and their families may use. On every Brief: a visitor can ask questions without providing any personal details; the Register, where a visitor volunteers contact details, is directed at parents, guardians and adult enquirers, not at children; and we do not collect personal details a visitor does not choose to provide. If you believe a child has submitted personal details through the Register, contact the business whose Brief it is, or contact us, and we will remove them.

§ 11Changes

We may update this policy as the product evolves. We will change the “effective” date at the top and, for material changes affecting clients, let you know directly.

§ 12Contact us

Questions, access requests, or privacy concerns:

• Email: hello@ringlioai.com
• Post: 19 Windarra Drive, City Beach WA 6015, Western Australia