1. About This Policy

This Privacy Policy explains how Tax Toys Pty Ltd ("Tax Toys", "we", "us") collects, uses, stores, and protects personal information when you visit our website, use the Diviato AI Tax Agent, or interact with our services. We are committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

Account Information

When you create an account or subscribe, we collect your name, email address, company name, and role. This information is necessary to provide the service.

Payment Information

Subscription payments are processed securely by Stripe. We do not store your full credit card details. Stripe may collect payment card information, billing address, and transaction history in accordance with their own privacy policy.

Usage Data

We collect information about how you use the Diviato service, including queries submitted, conversation history, session duration, and feature usage. This data is used to provide the service, improve quality, and monitor system performance.

Contact Form Submissions

When you submit a contact form enquiry, we collect the information you provide: name, company, email, enquiry type, and message content.

Website Analytics

We may use analytics tools to collect anonymised data about website visits, including pages viewed, referral sources, browser type, and device information.

3. How We Use Your Information

We use your personal information to:

• Provide and maintain the Diviato service
• Process subscriptions and payments
• Respond to enquiries and provide support
• Improve service quality and user experience
• Communicate important service updates
• Comply with legal obligations
• Detect and prevent misuse or security incidents

4. AI and Conversation Data

Conversation content submitted to the Diviato AI Tax Agent is processed to generate responses. Important points:

• Your conversation data is not used to train third-party AI models
• Conversation history is stored to provide your chat history feature
• We may analyse aggregated, anonymised usage patterns to improve the service
• You should not submit sensitive personal information (such as Tax File Numbers) through the chat interface

5. Third-Party Processors

We use trusted third-party service providers to operate the Diviato platform:

• Microsoft Azure — cloud hosting, data storage, AI model inference
• Stripe — payment processing
• OpenAI / Azure OpenAI — AI language model processing

These providers process data in accordance with their own privacy policies and applicable data protection laws. Data may be transferred to or processed in jurisdictions outside Australia.

6. International Data Transfers

Some of our service providers operate outside Australia (including in the United States). Where data is transferred internationally, we take reasonable steps to ensure it is protected consistently with Australian privacy standards.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide the service. After account closure, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, or enforce agreements. Conversation history may be deleted upon request.

8. Data Security

We implement reasonable technical and organisational measures to protect personal information, including encryption in transit (TLS), access controls, and secure infrastructure. However, no system is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent for marketing communications
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

10. Cookies

Our website uses essential cookies for authentication and session management. We may use analytics cookies to understand website usage. You can manage cookie preferences through your browser settings.

11. Children

Diviato is not designed for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the website or email. Continued use of the service after changes constitutes acceptance.

13. Contact Us

For privacy enquiries, access requests, or complaints, contact our Privacy Officer:

• Email: support@taxtoys.com
• Post: Tax Toys Pty Ltd, Australia