Privacy Policy

MyAIConsent ("the Platform") is operated by Krupesh Desai, an independent software developer based in Melbourne, Australia. References to "I", "me", and "my" in this policy refer to Krupesh Desai as the sole operator of MyAIConsent at myaiconsent.app.

I am committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how I collect, use, disclose, and safeguard your personal information when you use myaiconsent.app.

1. Information I Collect

Account Information

• Name, email address, and password (or OAuth provider ID)
• Public profile fields you choose to provide: username, bio, avatar, website URL, and social media links

Uploaded Content

• Files you upload to train your AI Twins (PDFs, text documents, etc.)
• System guidelines and configuration you set for your AI Twins

Usage Data

• Chat queries submitted to AI Twins and the generated responses
• Query counts, timestamps, and usage metrics for rate limiting

Payment Information

• Billing is processed directly by Stripe. I never store credit card numbers on my servers.

2. How I Use Your Information

Your information is used solely for:

• Service delivery: Operating your AI Twins, processing uploaded files through RAG (Retrieval-Augmented Generation), and generating AI responses
• Account management: Authentication, subscription management, and customer support
• Public profiles: Displaying your profile and public AI Twins only when you explicitly opt in
• Platform improvement: Aggregated, anonymised analytics only — never individual profiling
• Legal compliance: Meeting my obligations under Australian law

3. Your Data, Your Control

You have full control over your data at all times:

• Delete files: Remove any uploaded training file from your AI Twin at any time via the setup dashboard
• Delete twins: Delete an entire AI Twin — this removes all associated files and knowledge base data from my servers and vector database
• Profile visibility: Switch your profile between public and private at any time from your Account Settings
• Account deletion: Email me at support@myaiconsent.app to request full account deletion, processed within 30 days

5. Marketing Communications

• I send only essential transactional emails (account confirmation, subscription receipts, security alerts)
• Marketing emails are opt-in only — I will never send promotional content without your explicit consent
• You can unsubscribe from any marketing communications at any time
• I do not send spam or share your email with third-party marketers

6. Data Sharing and Disclosure

I share your information only in these limited circumstances:

• Service providers: Stripe (payments), DigitalOcean (hosting), OpenAI and Anthropic (AI processing) — all bound by data processing agreements
• Legal requirements: When required by Australian law, court order, or government request
• Business transfer: In connection with a merger or acquisition, with equivalent privacy protections maintained
• Public content: Only information you explicitly choose to make public (username, bio, public twins)

7. Data Security

I implement industry-standard security measures including TLS/HTTPS encryption, secure password hashing, UUID-based resource identifiers, and strict access controls. While no system is completely secure, I take all reasonable steps required by APP 11 of the Privacy Act 1988 to protect your data.

8. Your Rights Under the Australian Privacy Act 1988

You have the right to:

• Access: Request a copy of the personal information I hold about you (APP 12)
• Correction: Request correction of inaccurate, out-of-date, or incomplete information (APP 13)
• Deletion: Request removal of your data where it is no longer needed
• Complaint: Lodge a complaint with me directly or with the Office of the Australian Information Commissioner (OAIC)

I also extend GDPR-equivalent rights to all users regardless of location, including the right to data portability and the right to restrict processing.

9. International Data Transfers

My platform uses infrastructure that may be located outside Australia, including Singapore (hosting via DigitalOcean) and the United States (AI processing via OpenAI and Anthropic). Where personal information is transferred overseas, I take reasonable steps to ensure recipients handle your data in accordance with the APPs, as required by APP 8.

10. Cookies

I use essential cookies only — for session management, authentication, and CSRF protection. I do not use advertising cookies, tracking pixels, or third-party analytics cookies.

11. Changes to This Policy

I may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related queries, requests, or complaints:

I aim to respond within 5 business days. Formal complaints can also be directed to the Office of the Australian Information Commissioner (OAIC).