Privacy Policy

Cytron Pty Ltd (ABN pending) ("Company", "we", "us", "our") operates the CYTRON platform and website at cytronai.com ("Platform", "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also comply with the European Union General Data Protection Regulation (GDPR).

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2.1 Information You Provide

When you register, subscribe, or use the Platform, we may collect:

• Full name and contact details (email address, phone number)
• Business name, ABN, and business address
• Trade type and industry information
• Billing information (processed securely via Stripe; we do not store full credit card numbers)
• Content you upload, including photos, videos, job details, quotes, and invoices
• Social media account connection details
• Communications with us (support emails, feedback)

2.2 Information Collected Automatically

When you access the Platform, we automatically collect:

• Device information (browser type, operating system, device identifiers)
• IP address and approximate geolocation
• Usage data (pages viewed, features used, timestamps, session duration)
• Referral source and marketing attribution data

2.3 Information from Third Parties

We may receive information from third-party services you connect to the Platform, such as social media accounts for content publishing.

We use your personal information to:

• Provide, operate, and maintain the Platform
• Process subscriptions, payments, and billing
• Generate AI-powered content (videos, suggestions) based on your inputs
• Publish content to connected social media accounts on your behalf
• Provide materials price comparison results
• Send transactional communications (invoices, receipts, alerts)
• Send marketing communications (with your consent; you may unsubscribe at any time)
• Improve and develop new features for the Platform
• Monitor and analyse usage trends and performance metrics
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We use cookies and similar technologies to:

• Essential cookies: Maintain your session and authenticate your identity
• Analytics cookies: Understand how users interact with the Platform (via Vercel Analytics)
• Preference cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may impair your ability to use the Service.

We share your information with the following third-party service providers, strictly for the purpose of operating the Platform:

Each third-party provider operates under its own privacy policy. We encourage you to review their policies. We do not sell your personal information to any third party.

Your data is stored on servers located in Australia and the United States, operated by our infrastructure providers (Supabase and Vercel). We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication via Supabase Auth with support for multi-factor authentication
• Role-based access controls limiting employee access to personal data
• Regular security reviews and monitoring

While we take reasonable steps to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

We retain your personal information for as long as:

• Your account is active and you maintain a subscription
• Necessary to provide the Service and fulfil the purposes described in this Policy
• Required by applicable law or regulation

Specific retention periods:

• Active account data: Retained for the duration of your subscription
• Post-cancellation data: Retained for ninety (90) days after account cancellation, then permanently deleted unless otherwise required by law
• Trial account data: Retained for ninety (90) days after the trial period ends if no subscription is activated
• Billing records: Retained for seven (7) years in compliance with Australian tax law
• Usage and analytics data: Aggregated and de-identified data may be retained indefinitely for analytical purposes

Under the Australian Privacy Act and, where applicable, the GDPR, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Data portability: Request an export of your data in a structured, machine-readable format
• Restriction: Request that we restrict the processing of your personal data in certain circumstances
• Objection: Object to the processing of your data for direct marketing purposes
• Withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at labofantasma@gmail.com. We will respond to your request within thirty (30) days.

As our infrastructure providers operate servers in both Australia and the United States, your data may be transferred to and processed in countries outside your country of residence. Where we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for transfers to countries without an adequacy decision under the GDPR
• Ensuring our service providers maintain equivalent data protection standards

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

We comply with the thirteen Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth), including:

• APP 1 (Open and transparent management): This Policy describes our data practices
• APP 5 (Notification of collection): We inform you at or before the time of collection about how your data will be used
• APP 6 (Use or disclosure): We only use data for the primary purpose for which it was collected, or for directly related secondary purposes
• APP 8 (Cross-border disclosure): We take reasonable steps to ensure overseas recipients comply with the APPs
• APP 11 (Security): We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access
• APP 12 (Access): You can request access to the personal information we hold about you
• APP 13 (Correction): You can request correction of inaccurate information

If you are located in the European Economic Area (EEA) or the United Kingdom, the following additional provisions apply:

• Legal basis for processing: We process your data based on contractual necessity (to provide the Service), legitimate interests (to improve the Platform and prevent fraud), and consent (for marketing communications)
• Data Protection Officer: For GDPR-related enquiries, contact us at labofantasma@gmail.com
• Supervisory authority: You have the right to lodge a complaint with your local data protection supervisory authority

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform at least fourteen (14) days before the changes take effect. The "Last updated" date at the top of this page indicates when this Policy was last revised.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy.

If you believe we have breached the Australian Privacy Principles or the GDPR, you may lodge a complaint with us at the contact details below. We will investigate and respond within thirty (30) days.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

For any questions or concerns regarding this Privacy Policy or your personal information, please contact us:

• Cytron Pty Ltd
• Gold Coast, Queensland, Australia
• Email: labofantasma@gmail.com
• Website: cytronai.com