Privacy Policy

1.Who is responsible

Krrisp Digital, a business registered in New South Wales, Australia, decides how and why the information described here is handled. Where the law calls that a controller, we are it.

For the notes you store, you are the one deciding what goes in. If those notes contain information about other people, you are responsible for having the right to hold it.

2.What we hold

Your sign-in details. Your email address, and either a password we never store in readable form or the fact that you sign in through another provider.

Your notes. Everything you write or import: titles, contents, how they are filed, and the links between them.

Your conversations. What you ask the assistant and what it answers.

Your settings. The name and voice you chose for the assistant, and which models you selected for which task.

Your AI credential. Held encrypted so it can be used on your behalf. It is never displayed again, to you or to anyone, and never sent back to your browser.

Usage records. Counts of what the service did for you — for instance that a website was read, and how much of it — so that limits and costs can be applied fairly.

Network information. Your internet address is used briefly, in memory, to apply rate limits. It is not stored against your account.

Problem reports. If you report a fault, we receive your email address, a reference identifying the failure, and whatever you choose to write. Your notes are not included.

3.Why we hold it

To give you the service you asked for: to sign you in, to keep your notes, to answer your questions from them, to apply limits, and to fix faults. Where the law requires a lawful basis, ours is the performance of our agreement with you, and our legitimate interest in keeping the service working and secure.

4.Where it is held

Your notes and account records are held in Sydney, Australia. If you use the service from elsewhere, your information is transferred to and stored in Australia.

The AI provider you connect, and the organisations that help us run the service, may operate in other countries. Where information leaves Australia, we rely on the protections offered by those arrangements and on the terms we hold with them.

5.Who else sees it

The AI provider you choose. This is the significant one. When you ask a question, the parts of your notes relevant to it are sent to the provider whose account you connected. That happens under your agreement with them. We do not choose them and we do not control what they do with what they receive. Notes you mark as sensitive are never sent.

The website you nominate. If you ask us to read a web address, we fetch pages from it.

Organisations that help us operate. We use service providers for hosting and storage, for sending email, and for receiving problem reports. They act on our instructions and may use what they hold only to provide their service to us. We will name the current ones on request.

Where the law requires it. If we are compelled by a valid legal process, or where it is necessary to protect someone from harm.

6.What we do not do

We do not sell your information. We do not use your notes to train any model, ours or anyone else's. We do not read your notes to build a profile of you, and we do not use them for advertising. We do not run advertising on the service.

7.How long we keep it

Your notes and settings are kept until you delete them or close your account. Conversations are kept until you clear them or close your account. Usage records are kept for up to twenty-four months so limits and costs can be reconciled. Records of decisions you were asked to make are kept for ninety days after you make them. Problem reports are kept while the problem is being dealt with.

8.Deleting everything

You can close your account from within the service. Doing so removes your notes, your conversations, your settings, your stored AI credential and your sign-in identity. We do not keep a shadow copy afterwards, and the deletion is not reversible.

Backups are held for a short period as protection against failure, and anything deleted disappears from them as they age out.

9.Your rights

Wherever you are, you can ask us what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. Most of that you can do yourself inside the service, immediately.

Depending on where you live you may also have the right to object to or restrict certain handling, to withdraw consent, to receive your information in a portable form, and to complain to a data-protection authority. In Australia that is the Office of the Australian Information Commissioner; in the United Kingdom the Information Commissioner's Office; in the European Union your national authority. We would rather you told us first.

We do not discriminate against anyone for exercising a privacy right.

10.Security

Access to your data requires your sign-in. Your AI credential is stored encrypted and has no path back to a browser. Requests are rate limited. Data is separated by account at the database level rather than only in application code.

No system is beyond compromise, and we do not claim otherwise. If a breach affects you and the law requires that you be told, we will tell you.

11.Children

The service is for business use and is not directed at anyone under 16. We do not knowingly hold information about children. If you believe we have, tell us and we will remove it.

12.Changes

We may update this policy. The date at the top shows when it last changed, and a material change will be made visible in the service rather than only posted here.

13.Contact

For anything in this policy, including a request about your information, write to privacy@krrispdigital.com.au.