Privacy Policy

Last updated: 10 July 2026 · Placeholder draft, pending legal review

This is a template Privacy Policy based on common industry practice and the structure of the Australian Privacy Principles (Privacy Act 1988). It is a working starting point, not legal advice. Before relying on it, have it reviewed against exactly what data your Services actually collect, and confirm whether your business currently meets the Privacy Act's turnover threshold for small business — and whether you're collecting data from users in other jurisdictions (e.g. the EU/UK, where GDPR may apply) that would bring additional obligations.

1. Who this policy covers

Ebono Intelligence Pty Ltd (ACN 699 020 392, ABN 71 699 020 392), trading as The Ebono Institute ("we", "us", "our"), respects your privacy. This policy explains what personal information we collect, how we use it, and the choices you have, in connection with ebono.au and its associated subdomains and Services.

2. Information we collect

2.1 Information you give us

Account details — name, email address, and password (stored securely, never in plain text);
Contact form submissions — name, email, and message content;
Content you upload or submit to use the Services (e.g. documents you ask the Services to process);
Billing details — handled directly by Stripe (see §4); we receive limited information back, such as the last four digits of your card and transaction status, not your full card number.

2.2 Information collected automatically

Usage data — pages visited, features used, timestamps, and general diagnostic/error information, to help us understand and improve the Services;
Device and connection information — browser type, IP address, and similar technical data;
Cookies and similar technologies — see §5.

3. How we use your information

To provide, maintain, and improve the Services;
To process payments and manage subscriptions;
To communicate with you about your account, transactions, or support requests;
To detect, investigate, and prevent fraud, abuse, or security incidents;
To meet legal and regulatory obligations.

We don't sell your personal information. We don't use content you upload to the Services to train third-party AI models except where you've been separately and explicitly informed and have agreed.

4. Third parties we share information with

We use a small number of service providers to run the Services, each of whom only receives what they need to perform their function:

Stripe — payment processing. Stripe's handling of your payment information is governed by Stripe's Privacy Policy;
Our hosting provider — to run the Services and store data;
Email delivery services — to send transactional and support emails.

We may also disclose information where required by law, or to protect our rights, users, or the public.

5. Cookies

We use cookies and similar technologies for core site functionality (e.g. keeping you logged in) and, where applicable, for basic analytics to understand how the Services are used. You can control cookies through your browser settings; disabling some cookies may affect how parts of the Services work.

6. Data security

We take reasonable technical and organisational measures to protect your information, including encrypted transmission (HTTPS) and access controls on stored data. No system is completely secure, and we can't guarantee absolute security.

7. Data retention

We keep personal information for as long as needed to provide the Services and for legitimate business or legal purposes (e.g. tax and accounting records). You can request deletion of your account data at any time, subject to information we're required to retain by law.

8. International data transfers

Some of our service providers, including Stripe, may process data outside Australia. Where this occurs, we rely on those providers' own compliance frameworks and take reasonable steps to ensure your information continues to be protected consistently with this policy.

9. Your rights

Subject to applicable law, you can ask us to:

Access the personal information we hold about you;
Correct inaccurate information;
Delete your account and associated personal information;
Ask questions about how your information is handled.

To exercise any of these, contact us via our support page or at geoff.ebbs@ebono.com.au. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).

10. Children's privacy

The Services are not directed at children, and we don't knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we'll take steps to remove it.

11. Changes to this policy

We may update this policy from time to time. We'll post the updated version with a new "last updated" date, and for material changes we'll make reasonable efforts to notify active account holders.

12. Contact

Questions about this policy or how your information is handled can be sent via our support page or to info@ebono.au.