Privacy Policy

This policy applies to Inflect Labs Pty Ltd, ABN 55 651 900 249 (Inflect Labs, we, us), and covers personal information we collect through this website, through our client work, and through our dealings with prospective clients, suppliers and contractors.

Registered address: Unit 1506, 1 Chippendale Way, Chippendale NSW 2008, Australia.
Email: hello@inflectlabs.co.

• Contact and enquiry details. Your name, email address, phone number, company, role, and whatever you choose to include in an enquiry or project brief.
• Engagement information. Correspondence, project documentation, meeting notes, and billing and payment records.
• Technical information. When you visit this website, our hosting provider automatically records standard server log data such as your IP address, browser type, device type, referring page and the time of your request.
• Client system data. While delivering a project we may be given access to your systems, which can contain personal information about your own users. We handle that information only as needed to perform the engagement, and as your service provider.

We do not collect sensitive information, such as health or biometric information, and we do not store your payment card details. Payments are processed by our bank or payment provider.

We collect personal information directly from you, when you email us, speak with us, or engage us for a project. This website has no contact form or account sign-up: the contact section simply gives you our email address. We may also collect information from publicly available sources such as your company website or public professional profiles, and automatically through our website as described above.

• to respond to your enquiry and prepare a proposal or quote;
• to deliver, support and manage our services;
• to issue invoices, take payment and keep required financial records;
• to communicate with you about a current or prospective engagement;
• to improve our website and services; and
• to meet our legal, tax and regulatory obligations.

We do not sell personal information, and we do not use it for automated decision-making that has a legal or similarly significant effect on you.

We use third-party AI services in how we work and in the products we build. We apply the following rules to them:

• we use business or API tiers whose terms state that customer content is not used to train the provider's models;
• we do not put your confidential material or personal information about your users into consumer AI tools;
• where an engagement requires personal information to be processed by an AI provider, we agree that with you first and record it in your statement of work; and
• we keep the same confidentiality obligations over anything we do submit as we do for the rest of your engagement.

Where we build an AI feature into your product, the AI provider processes data on your behalf, not ours. Your own privacy policy and disclosures govern that relationship with your end users, and we will tell you which providers a feature relies on.

This website does not use advertising or cross-site tracking cookies, and does not run third-party analytics. We store a small amount of data in your browser to make the site work:

• your light or dark theme preference, stored in your browser's local storage; and
• a flag recording that you have already seen the site's intro animation, stored in your browser's session storage and cleared when you close the tab.

This data stays on your device and is not sent to us. You can clear it at any time through your browser settings.

We may disclose personal information to:

• service providers who help us operate, for example website and application hosting, email, cloud storage, project management, accounting, payment processing and the AI services described in section 5;
• contractors who work on your engagement, under confidentiality obligations;
• our professional advisers, such as accountants and lawyers; and
• anyone else where you have consented, or where we are required or permitted by law.

Overseas disclosure. Some of these providers store data outside Australia, including in the United States and the European Union. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles.

We hold personal information in reputable cloud services and take reasonable steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure, including access controls, multi-factor authentication, encryption in transit, and limiting access to those who need it.

No method of transmission or storage is completely secure. If we become aware of a data breach likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

We keep personal information only as long as we need it for the purposes described above, or as required by law. Financial records, for example, are generally retained for seven years. When we no longer need it, we take reasonable steps to destroy or de-identify it.

You may request access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Email hello@inflectlabs.co and we will respond within a reasonable period, normally within 30 days. We may need to verify your identity first, and in limited circumstances permitted by law we may decline a request. If we do, we will explain why.

You can also ask us to stop sending you marketing communications at any time, by replying to any such message or emailing us.

If you think we have breached the Australian Privacy Principles, email hello@inflectlabs.co with details of your complaint. We will acknowledge it promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Our website links to third-party sites, including the client projects shown in our work section. We are not responsible for the privacy practices of those sites, so please review their own privacy policies.

We may update this policy from time to time. The current version is always published on this page, with the last updated date shown above.

For any privacy question or request, email hello@inflectlabs.co or write to us at Unit 1506, 1 Chippendale Way, Chippendale NSW 2008, Australia.