Privacy Policy

Last Updated: July 30, 2026

CoreSentia (“we,” “our,” or “us”) is committed to protecting your privacy and the privacy of your customers. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, engage us for a project, or use systems we build and host.

1. Information We Collect

1.1 Website Enquiries

When you contact us through this website, we collect:

• Contact Information: Name, email address, phone number
• Enquiry Details: Project type and the information you include in your message

1.2 Client Engagements

When you engage us for a project, we collect:

• Business Information: Business name, ABN, contact details, and details of the processes and systems in scope
• Account and Billing Information: Names, email addresses, payment details
• System Access: Credentials and API access you provide so we can build and integrate your systems - handled under least-privilege access and removed at handover unless we host the system for you

1.3 Systems We Build and Host

Where we host and operate a system on your behalf (including conversational AI systems), that system may process:

• Your Customers' Contact Information: Names, phone numbers, email addresses
• Conversation Data: SMS, chat, or call interactions handled by the system
• Operational Data: Bookings, jobs, quotes, and related business records

1.4 Automatically Collected Information

• Usage Data: Page and dashboard interactions, login times, feature usage
• Technical Data: IP addresses, browser type, device information
• Cookies: Essential cookies for authentication and session management

2. How We Use Your Information

We use collected information to:

• Respond to Enquiries: Reply to your messages and scope potential projects
• Deliver Services: Design, build, integrate, host, and support the systems you engage us for
• Improve Services: Diagnose issues and improve the reliability of systems we operate
• Communication: Send project updates, support messages, and billing notices
• Compliance: Meet legal obligations, prevent fraud, enforce our terms

3. How We Share Your Information

3.1 Service Providers

We share data with trusted third-party providers who supply the infrastructure our systems run on. Depending on the project, these typically include:

• Vercel: Web hosting and infrastructure
• Supabase: Secure database hosting
• Anthropic: AI processing (Claude)
• Twilio: SMS and voice infrastructure, where a system includes telephony
• Google: Workspace, Maps, and related APIs, where a system integrates with them

All service providers are contractually required to protect your data and use it only for providing services to us.

3.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

3.3 Business Transfers

If CoreSentia is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and subject to a different privacy policy.

3.4 What We Don't Do

• We never sell your data or your customers' data to third parties
• We never use your data for advertising or marketing outside of CoreSentia
• We never share one client's data with another client

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: Limited access to sensitive data, role-based permissions
• Monitoring: Audit logging and monitoring for suspicious activity
• Backups: Regular encrypted backups for data recovery

While we strive to protect your data, no internet transmission or storage system is 100% secure.

5. Data Retention

• Enquiries: Retained while we correspond with you and for a reasonable period afterwards
• Active Engagements: Data retained for the duration of the engagement and any ongoing hosting arrangement
• Ended Engagements: Data retained for 12 months after an engagement ends for legal and support purposes, then deleted on request or in the ordinary course
• Billing Data: Retained for 7 years as required by Australian tax law

6. Your Rights

Under the Australian Privacy Principles (APPs), you have the right to:

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Request your data in a portable format
• Objection: Object to processing of your data for certain purposes
• Withdraw Consent: Withdraw consent for data processing (may affect service availability)

To exercise these rights, contact us at info@coresentia.com. We will respond within 30 days.

7. Your Customers' Data

Where we host a system that processes your customers' information, you are the data controller and we process that data on your behalf. Your customers can exercise their privacy rights by contacting you directly. You are responsible for responding to their requests and ensuring your use of the system complies with privacy laws.

8. Cookies and Tracking

We use cookies for:

• Essential Cookies: Authentication, session management (required)
• Analytics Cookies: Understanding how you use our services (optional)

You can control cookies through your browser settings. Disabling essential cookies may affect service functionality.

9. Third-Party Links

Our services may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing any information.

10. Children's Privacy

CoreSentia is not intended for individuals under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately.

11. International Data Transfers

Some of our service providers (e.g., Twilio, Anthropic) are based outside Australia. Data transferred to these providers is protected by contractual safeguards and compliance with international data protection standards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

13. Complaints

If you have concerns about how we handle your data, please contact us first at info@coresentia.com. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

14. Contact Us

For questions or concerns about this Privacy Policy, contact us at:
Email: info@coresentia.com
ABN: 69 267 271 132
Location: Brisbane, Queensland, Australia