Aussi-Nexus Group (ABN 76 947 108 181) is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and where applicable, the General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information across all our digital platforms and services.

1. What Information We Collect

We collect the following categories of personal information:

• Identity data: Name, username, date of birth (where required);
• Contact data: Email address, phone number;
• Account data: Login credentials (stored as encrypted hashes), subscription status;
• Payment data: Billing details (processed by Stripe — we do not store card numbers);
• Usage data: Pages visited, features used, time on platform, browser type, IP address;
• Content data: Files, text, or materials you upload or generate using our Services;
• Educational data: Assessment scores, progress records, quiz responses (for education platforms).

2. How We Collect Information

• Directly from you when you register, subscribe, or contact us;
• Automatically via cookies, log files, and usage analytics;
• From payment processors (Stripe) when you make a purchase;
• From third-party APIs where you authorise integration.

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and improve our Services;
• Process payments and manage subscriptions;
• Send transactional emails (receipts, password resets, service notices);
• Send marketing communications (with your consent — opt-out available at any time);
• Personalise your experience on our platforms;
• Monitor platform performance and security;
• Comply with legal obligations;
• Respond to your enquiries and support requests.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) or UK, we process your personal data on the following legal bases:

• Contract: Processing necessary to fulfil your subscription or service agreement;
• Legitimate interests: Platform security, fraud prevention, and service improvement;
• Consent: Marketing communications and non-essential cookies;
• Legal obligation: Compliance with applicable law.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Stripe: For payment processing (see Stripe's Privacy Policy);
• Email service providers: For transactional communications;
• AI API providers (OpenAI, Anthropic): For AI-powered features — only the content you submit to those features;
• Law enforcement: Where required by Australian law or valid legal process;
• Business transfers: In the event of a merger, acquisition, or asset sale.

All third-party providers are contractually required to protect your data in accordance with applicable privacy law.

6. Data Storage and Security

Your data is stored on private cloud infrastructure (Hetzner, Germany/Finland) and managed databases secured with industry-standard encryption. We implement access controls, encrypted connections (HTTPS/TLS), and regular security monitoring. No method of transmission over the internet is 100% secure; we take all reasonable steps to protect your information.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. Upon account deletion request, we will delete your personal data within 30 days, except where retention is required by law or legitimate business need (e.g., financial records required by Australian tax law for 7 years).

8. Your Rights

Under Australian Privacy Law and GDPR, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your personal information ("right to be forgotten");
• Object to or restrict certain processing;
• Data portability (receive your data in a structured format);
• Withdraw consent at any time (where processing is consent-based);
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, contact us via the enquiry form at oneclickad.nexus.

9. Cookies

We use session cookies to maintain your login state. We use analytics cookies to understand how our platforms are used. You may disable cookies in your browser settings; however, some features may not function correctly without them.

10. Children's Privacy

Our education platforms serve students from Grade 4 (approximately age 9). For users under 13, we require verified parental consent before collecting personal information. Parents may request access to or deletion of their child's data at any time.

11. International Data Transfers

Our infrastructure is hosted in the EU (Hetzner) and your data may be processed by AI providers based in the United States. We ensure appropriate safeguards (Standard Contractual Clauses) are in place for all international transfers.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notice. Continued use of our Services after changes take effect constitutes acceptance of the revised Policy.

13. Contact Our Privacy Officer

For all privacy enquiries, complaints, or access requests:
Aussi-Nexus Group — Privacy Officer
Shailer Park, Queensland 4128, Australia
ABN: 76 947 108 181
Enquiry form: oneclickad.nexus