Privacy Policy — Companio Pty Ltd

Last updated: 14 October 2025 (AEST)

Who we are
Companio Pty Ltd (ABN 53683515291) (“Companio”, “we”, “us”, “our”) provides AI-powered tools and related services at companio.ai and connected apps (the “Services”).
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy explains how we collect, use, disclose, and protect personal information and how you can access and correct it.

If you don’t agree with this policy, please don’t use the Services.
Questions? support@companio.ai

1 Personal information we collect

We collect information you provide directly and information collected automatically when you use the Services.

You give us:

• Identity & contact data (name, email, phone, company, role)

• Account data (usernames, hashed passwords, preferences)

• Content (prompts, files, messages, and materials you submit to our AI tools)

• Billing data (processed via Stripe – we don’t store full card numbers)

We collect automatically:

• Usage & device data (IP address, browser/device type, pages visited, timestamps, crash logs)

• Cookies/SDK data (to keep you logged in, secure the service, measure performance, and—if enabled—personalise marketing). See Cookies & Analytics below.

Sensitive information
We don’t actively seek “sensitive information” (e.g., health, biometric, religious beliefs). If you submit such data in prompts or uploads, you authorise us to process it to provide the Services. We apply heightened safeguards.

Google APIs / Workspace data (if you connect it)
If you connect Google APIs (e.g., Drive or Gmail), our use of Google data adheres to the Google API Services User Data Policy (including “Limited Use”) and any relevant Google Workspace policies. We only access the minimum scopes you authorise and do not sell Google user data.

2 Why we collect it

• Provide, operate and improve the Services and AI features

• Authenticate you and prevent abuse/fraud/security incidents

• Customer support and service communications

• Billing and account administration (via Stripe)

• Analytics, product research and service performance

• Marketing (email/SMS/ads) with your consent and opt-out options (§ 9)

• Compliance with law and enforcement of our terms

3 How our AI features handle your data

We provide AI functionality through third-party providers such as OpenAI, Anthropic, and Google Cloud AI.
Your inputs (e.g., prompts, uploads) and outputs may be sent to these providers solely to generate results or perform safety filtering.
We apply contractual and technical controls and restrict use to service provision; we do not sell your prompts or outputs.

4 When we disclose personal information

We may disclose personal information to:

• Service providers (cloud hosting, security, analytics, email/SMS, support, payments)

• AI service providers (§ 3) to generate results you request

• Professional advisers (legal/accounting) under confidentiality

• Authorities if required by law or to protect rights and safety

• Business transactions (e.g., merger or acquisition) subject to safeguards

We take reasonable steps to ensure overseas recipients handle personal information in accordance with the APPs (APP 8).

5 Overseas disclosures (cross-border)

Our servers and providers may process data in Singapore and the United States.
We use contracts and due diligence to maintain APP-equivalent protection. On request, we’ll tell you all countries where your data is likely to be disclosed.

6 Data retention

We keep personal information only as long as needed for the purposes in this policy (and longer if required by law, tax or dispute resolution). Then we delete or de-identify it using reasonable measures.

7 Security

We use administrative, technical and physical safeguards (access controls, encryption in transit, network security, monitoring, backups, staff training).
No method is 100 % secure; if an incident is likely to result in serious harm, we’ll comply with the Notifiable Data Breaches (NDB) scheme by notifying affected individuals and the OAIC.

8 Access and correction

You can request access to personal information we hold and request corrections if it’s inaccurate or incomplete. We respond within a reasonable time under the APPs. Contact support@companio.ai.

9 Marketing choices (email & SMS)

• Email/SMS: Unsubscribe via links in emails, reply STOP/UNSUBSCRIBE to SMS, or email us.

• We don’t share SMS opt-in or metadata with third parties for their marketing.

• We may still send service or transactional messages (e.g., receipts, security alerts).

10 Cookies & Analytics (Cometly, GA4, Meta, Google)

We use cookies and similar tech to operate the site, remember preferences, secure accounts, and run analytics. We may use analytics/ads partners to measure performance and, where enabled, tailor advertising.
Blocking cookies may affect features. If required by your region, we’ll present consent controls.

Our current analytics/ads stack includes:

• Cometly (attribution & analytics)

• Google Analytics 4 (GA4), Google Ads, and Tag Manager

• Meta Pixel and related business tools

Your choices:

• Opt-out of Google Analytics at tools.google.com/dlpage/gaoptout

• Manage ad preferences in your Google and Meta accounts

• Where supported, we honour Global Privacy Control (GPC) signals

11 Children

The Services are not intended for individuals under 18. If you believe a minor has provided personal information, contact us and we’ll delete it.

12 Contact us or make a privacy complaint

Email: support@companio.ai
Post: Companio Pty Ltd, Level 5 / 100 Market St, Sydney NSW 2000, Australia

If you’re not satisfied with our response, contact the Office of the Australian Information Commissioner (OAIC) for advice on complaints and privacy rights.

13 Changes to this policy

We may update this policy to reflect changes to our practices or legal requirements. We’ll post the new version with an updated “Last updated” date and notify you if material changes occur.

14 Third-party specifics (annex)

Payments — Stripe
We use Stripe to process payments. Stripe acts as an independent controller/processor under its own privacy policy and DPA. Your payment data is handled in accordance with those terms.

Google APIs / Workspace
If you connect Google, our use of that data is limited by the Google API Services User Data Policy (Limited Use) and Workspace policies; we request the minimum necessary scopes and don’t use Google data for advertising.

AI providers
We integrate third-party AI models (e.g., OpenAI, Anthropic, Google). We share only what’s needed to generate outputs or provide safety filtering and require providers to protect data and not use it for their own marketing.

15 Region-specific rights (addenda)

European Union / United Kingdom (GDPR / UK GDPR)
If you’re in the EU/UK, you may have rights to access, rectification, erasure, restriction, objection, portability, and to complain to your local authority. Our legal bases include contract performance, legitimate interests, consent, and legal obligation.

United States state laws
Residents of certain US states may have rights to access, delete, correct, opt out of targeted ads/sale/profiling, and appeal. Submit requests to support@companio.ai. We honour browser Global Privacy Control (GPC) signals where required.

Canada
You may have rights to access, correct, and withdraw consent under federal or provincial laws. Contact us as above.

16 Definitions

• “Personal information” has the meaning given in the Privacy Act 1988 (Cth).

• “Sensitive information” means information defined in s 6(1) of that Act.

• “Processing” includes collection, use, storage, disclosure or other operations performed on personal information.

17 Governing law

This policy and any dispute arising from it are governed by the laws of New South Wales, Australia, and you submit to the exclusive jurisdiction of its courts.

18 Accessibility

This policy is available in alternative formats on request by emailing support@companio.ai.

19 Cookie summary

We use cookies and similar technologies to provide, secure, and improve our services. You can change your browser cookie settings at any time. By continuing to browse our site, you agree to our use of cookies as described in this policy.