<h2>Privacy Policy</h2>
<p><strong>Last updated: 13 May 2026</strong></p>
<p><strong>Plain English summary:</strong> We collect only what we need to run the platform. All data is stored in Australia. We do not sell your data. NDIS participant information is stored exclusively on Australian servers in compliance with the Privacy Act 1988 and Australian Privacy Principles (APP 8).</p>
<h3>1. Who we are</h3>
<p>ContentAutoPilot is an AI-powered content and documentation platform operated by InfoSys Solutions USA LLC. Our NDIS DocAgent helps registered NDIS providers generate compliant documentation. Contact: [email protected]</p>
<h3>2. What information we collect</h3>
<p><strong>Account information:</strong></p>
<ul>
<li>Name and email address</li>
<li>Organisation or agency name</li>
<li>Subscription and billing information (processed by Stripe — we do not store card details)</li>
<li>Sign-in method (Google SSO or magic link)</li>
</ul>
<p><strong>Usage information:</strong></p>
<ul>
<li>Documents generated (count and type — not content unless saved by you)</li>
<li>Feature usage and session data</li>
<li>Device type and browser</li>
</ul>
<p><strong>Important:</strong> We strongly recommend you do not enter personally identifiable participant information (full names, NDIS numbers, addresses) into the platform. Use initials or participant codes when generating documentation.</p>
<h3>3. How we use your information</h3>
<ul>
<li>To provide and maintain your account and subscription</li>
<li>To send login links, welcome emails, and account notifications</li>
<li>To generate AI-powered content on your behalf</li>
<li>To enforce usage limits per your subscription plan</li>
<li>To improve and maintain the platform</li>
<li>To comply with legal obligations</li>
</ul>
<p>We do not use your content for AI training without explicit consent. We do not send unsolicited marketing emails.</p>
<h3>4. Data storage and residency</h3>
<p>All ContentAutoPilot user data, authentication data, and generated content is stored exclusively on servers located in <strong>Sydney, Australia</strong>. We do not transfer or process Australian user data outside of Australia.</p>
<p>Our AI generation is powered by Anthropic's Claude API. Only industry-specific template prompts are sent — no personally identifiable participant information.</p>
<h3>5. NDIS and APP 8 compliance</h3>
<ul>
<li><strong>Data sovereignty:</strong> All data stored in Australia</li>
<li><strong>APP 8:</strong> No cross-border disclosure of personal information</li>
<li><strong>NDIS Practice Standards:</strong> Output templates align with current NDIS Practice Standards</li>
</ul>
<p>ContentAutoPilot is a documentation assistance tool. Providers remain responsible for reviewing, approving, and filing all generated documentation.</p>
<h3>6. Who we share data with</h3>
<p>We do not sell, rent, or trade your personal information. We share data only with:</p>
<ul>
<li><strong>Stripe</strong> — payment processing (PCI-DSS compliant)</li>
<li><strong>Brevo</strong> — transactional email delivery</li>
<li><strong>Cloudflare</strong> — DNS and DDoS protection</li>
<li><strong>Anthropic</strong> — AI generation API (industry prompts only, no participant data)</li>
</ul>
<h3>7. How long we keep data</h3>
<ul>
<li>Active accounts: data retained for the duration of your subscription</li>
<li>Cancelled accounts: deleted within 90 days of cancellation on request</li>
<li>Billing records: retained for 7 years as required by Australian tax law</li>
</ul>
<h3>8. Your rights</h3>
<p>Under the Privacy Act 1988, you have the right to access, correct, or request deletion of your personal information. Email [email protected]. We will respond within 30 days. You may also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.</p>
<h3>9. Cookies</h3>
<p>We use minimal session cookies necessary to maintain your signed-in state. We do not use advertising cookies or third-party tracking pixels.</p>
<h3>10. Contact</h3>
<p>Email: [email protected] | Support: [email protected]</p>