Privacy Policy

Contact details you give us directly — name, email, company and phone number — when you book a demo, submit the enquiry form, or correspond with us.

Information generated through a pilot or deployment, such as usage and performance data from an avatar integration — scoped in writing with each client before it's collected.

Technical and usage information from this website — pages viewed, referring source, device and browser type, and approximate location — collected automatically via analytics.

We don't seek sensitive information (health, biometric or similar categories) through this website, and we don't knowingly collect it from visitors.

Directly from you, through the booking/enquiry form, email or calls.

Automatically, through cookies and analytics when you browse this site — see “Cookies and analytics” below.

From a client organisation, where a pilot or deployment involves their staff or customers — governed by our agreement with that organisation, not this policy.

To respond to enquiries, schedule and run demos, and scope and deliver pilots and projects.

To operate, secure and improve this website and our services.

To send information you've asked for. We don't send marketing communications you haven't opted into, and every such message includes an unsubscribe option.

This site uses cookies and a web analytics tool to understand how it's used and to improve it. Analytics stay off by default and are only activated once configured; you can block or delete cookies at any time in your browser settings.

We don't use cookies for cross-site advertising tracking.

We use the AI avatar platforms, hosting and analytics providers named in our proposals and agreements to deliver our services. Some of these providers store or process data outside Australia, including in the United States, as part of their standard infrastructure.

We disclose personal information to these providers only as needed to deliver the service, and we favour providers that maintain appropriate security and privacy commitments — a compliance-conscious (SOC 2 / HIPAA-aware) platform for sensitive deployments.

We don't sell personal information, and we don't disclose it to third parties for their own marketing purposes.

We take reasonable technical and organisational steps to protect personal information from misuse, loss and unauthorised access.

We keep personal information only as long as needed for the purpose it was collected, or as required by law, then delete or de-identify it.

If a data breach involving personal information is likely to cause serious harm, we'll notify affected individuals and the OAIC in line with the Notifiable Data Breaches scheme.

You can ask for access to, or correction of, the personal information we hold about you by contacting us at the details below.

If you have a complaint about how we've handled your personal information, contact us first so we can investigate. If you're not satisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy as our services or obligations change. The current version always applies, and material changes will be reflected by an updated effective date above.

For any privacy question, access or correction request, or complaint, contact us at hello@bayai.com.au.