Privacy Policy

We collect the following kinds of information:

• Business profile / scanner inputs you give us. When you use the diagnostic scanner, you tell us about your business — for example your industry, company size, the software and tools you use, and the manual processes or bottlenecks you want to fix. We use this to generate your assessment and Blueprint.
• Contact details. Such as your name, email address, and (if you provide it) your company name, so we can deliver your results and communicate with you.
• Payment information. When you purchase, payment is processed by Stripe. We do not see or store your full card number — Stripe handles that. We receive limited confirmation details (such as that a payment succeeded, the amount, the currency, and a transaction reference).
• Usage and device data. Basic technical information your browser sends automatically, such as IP address, browser type, pages viewed, and timestamps, used to operate and secure the Service.

We use the information we collect to:

• Generate your operational assessment and AI Blueprint;
• Process your payment and provide the service you paid for;
• Send you your results, receipts, and service-related messages;
• Respond to your questions and provide support;
• Operate, secure, debug, and improve the Service and prevent abuse;
• Comply with our legal obligations.

We do not sell your personal information. We do not use your business data to train third-party AI models for purposes unrelated to generating your own results.

We share information only with the service providers that help us run the Service, and only as needed for them to perform their function. Each is bound by its own terms and privacy commitments:

• Stripe — payment processing.
• Supabase — database and authentication hosting, where your account and submitted business data are stored.
• Anthropic — the AI provider that processes your business profile to generate your assessment and Blueprint.
• Resend — email delivery, used to send your results, receipts, and service messages.
• Vercel — application hosting and serverless compute that runs the website and its APIs.
• Google Cloud — supporting cloud infrastructure (such as task queuing and processing) used to deliver the Service.

We may also disclose information if required by law, to enforce our agreements, or in connection with a merger, acquisition, or sale of assets. We do not sell your data to advertisers or data brokers.

To produce your assessment and Blueprint, the business profile information you submit is sent to our AI provider (Anthropic), which processes it on our behalf to generate your results. We share only what is needed to produce your output. The results are guidance generated by software and may contain errors — see our Terms of Service and Disclaimer for the limits of what the output is and isn’t.

We keep your information for as long as your account is active or as needed to provide the Service, and afterward only as long as necessary for legitimate business purposes such as recordkeeping, resolving disputes, and meeting legal or tax obligations. We take reasonable steps to destroy or de-identify personal information when we no longer need it, consistent with the Australian Privacy Principles. You can ask us to delete your data as described below, subject to those obligations.

Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate. Depending on where you live, you may also have rights to export or delete your information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at the address below and we’ll respond as required by applicable law. You can also unsubscribe from non-essential emails at any time using the link in those messages. If you are not satisfied with how we handle a privacy concern, you may complain to the Office of the Australian Information Commissioner (OAIC).

We use reasonable technical and organizational measures to protect your information, and we rely on established providers (such as Stripe, Supabase, Vercel, and Google Cloud) for sensitive operations. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

We are based in Australia, but some of the providers listed above store or process information overseas (for example in the United States). This means your information may be processed and stored in countries other than your own. Where required, we take reasonable steps to ensure such transfers are handled consistently with the Australian Privacy Principles and rely on appropriate safeguards.

The Service is intended for business owners and is not directed to children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

If you have questions about this policy or want to exercise your privacy rights, contact us at:

Samuel Roger Lucas (registered business name: LUCAS, SAMUEL ROGER), a sole trader trading as 'Clientyr' under Australian Business Number (ABN) 56 579 114 075, based in Victoria, Australia
admin@clientyr.com