Privacy Policy

1. About this policy

Centric/Core is a product of Centric/AI. This policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. By using our website and platform, you agree to the practices described here.

2. Information we collect

We collect information you provide directly, such as your name, email address, company details and any message you send us. When you use the platform, we also collect account and usage data needed to deliver the service. We do not collect sensitive information unless it is necessary and you have consented.

3. How we use your information

We use personal information to provide and improve the platform, respond to enquiries, process billing, send service communications and meet our legal obligations. Where we send marketing communications, you can opt out at any time.

4. Storage and security

Your data is hosted in Australia. We take reasonable steps to protect it from misuse, loss and unauthorised access, including encryption, multi-factor authentication and role-based access controls. No system is perfectly secure, so we cannot guarantee absolute security.

5. Third-party services

Your records are stored on infrastructure we operate in Amazon Web Services' Melbourne region, with encrypted backups held in its Sydney region. No copy of the database is held outside Australia. To deliver the platform we use a small number of providers that handle data under their own terms and only to the extent needed to provide their service to you. Some of them process information outside Australia, which we disclose here so you can describe it accurately in your own privacy notice:

• Cloudflare (global edge network) carries web traffic to and from the platform and does not store your records.
• Every email, campaign and transactional alike, is sent through Amazon SES in Sydney (Australia).
• Stripe (United States) processes subscription payments and Xero (Australia, New Zealand and the United States) holds our invoices to you; card details are entered on Stripe's own page and never reach our servers.
• Sophia and the Director's Office run on Amazon Bedrock in Sydney (Australia), which does not store prompts or use them for training. Overseas AI models (through OpenRouter, United States) are used only when a workspace chooses one, such as another model family, image generation or legal web research, and never when the workspace keeps AI processing in Australia.
• Texto (Australia) delivers SMS. Optional company-data providers used for enrichment receive a company name, domain or ABN only when a workspace turns enrichment on.
• Connectors you choose to switch on (for example Xero, Microsoft 365, Google or HubSpot) exchange data with your own accounts on your authority.

6. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate. Contact us using the details below and we will respond within a reasonable time.

7. Contact us

If you have any questions about this policy or a privacy concern, please contact us at [email protected]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.