Privacy Policy

What we collect on this website

Information you submit through the contact and gated-demo forms: your name, work email, organisation, role, the framework(s) you're interested in, and your timeframe.

First-party engagement measurement. So we can see how the site is used, we record basic usage ourselves: page views, scroll depth, time on page, the referring link and any campaign (UTM) parameters, and your device/viewport size — tagged with a random identifier kept in your browser's local storage. This is first-party only: it goes to our own Australian endpoint, uses no cookies, and involves no third-party analytics, trackers or fonts. A CDN fronts this static marketing site and is named in the sub-processor register on the trust page; the lead form and the engine bypass it and terminate in Australia. Nothing collected here is sold or shared. We honour your browser's Do‑Not‑Track setting, we do not run it on this Privacy page or the Sovereignty page, and you can switch it off entirely by setting localStorage.csNoTrack = '1' in your browser.

Why we collect it, and where it goes

Solely to respond to your enquiry and, if you request one, to set up a demo. It is stored on Australian-sovereign infrastructure. We do not sell your data and do not share it with third parties for their own purposes.

The platform & the extension

Evidence you assess in the CyberSentien platform is governed by your engagement terms and held on your own or your provider's sovereign environment; the AI runs there with no third-party AI API. Every deployment, including the public demo, generates its answers on its own box — Australian-hosted, inside the deployment boundary, with no third-party AI API in the loop. The engine states its own processing location on request, and you can check it: /api/ai-statement reports the lane that actually served your answer (rather than the one we would like to claim). Licensed engagements run exclusively on Australian-sovereign compute. The Chrome extension has its own policy at /extension-privacy.

Overseas disclosure

We do not disclose personal information overseas for AI processing. Every deployment, including the free public evaluation demo and the browser extension's free lane, generates its answers on its own Australian-hosted box, inside the deployment boundary, with no third-party AI API in the loop. The engine reports the processing lane that actually served an answer at /api/ai-statement, so this statement can be checked rather than trusted.

If that ever changes, this section is updated before any overseas lane is enabled, and the answer itself carries an on-screen disclosure naming the location.

Retention, export and deletion

Enquiry details are kept until you ask us to remove them. Platform evidence, findings, approvals and reports are retained under the applicable engagement policy so their assurance lineage remains auditable. Tenant owners can request an integrity-manifested export before deletion. Deletion is refused while a legal hold applies, and backup copies follow the separately agreed backup-retention schedule rather than being silently erased.

Your rights (Australian Privacy Principles)

You may request access to, or correction of, the personal information we hold about you, and you may lodge a complaint, by emailing support@cybersentien.com. If a privacy concern is unresolved, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We may update this policy; the date above changes and the current version always lives at this URL.