Privacy Policy

Last updated: April 2026

This Privacy Policy explains how JustDelegate AI Pty Ltd ("JustDelegate", "we", "our", "us") collects, uses, stores, and discloses personal information when you use our AI agent platform at justdelegate.ai (the "Service").

1. Information We Collect

We collect the following categories of personal information:

Account Information

• —Email address and full name (required for registration)
• —Company name and website URL (provided during onboarding)
• —Industry type and business description
• —Profile information you choose to provide

Payment Information

• —Billing details such as name and billing address
• —Payment processing is handled by Stripe — we do not store your credit card or bank account details on our servers
• —Subscription plan and transaction history

Usage Information

• —AI agent configurations, including persona and knowledge base content you create
• —Number of interactions, conversations, and monthly usage metrics
• —Feature usage patterns (anonymised and aggregated)
• —Log data including IP addresses, browser type, and access times

Customer Conversation Data

• —Chat messages and transcripts between your AI agents and your end users
• —Phone call transcripts (where voice agents are used)
• —Visitor information provided via pre-chat forms (name, email, phone)
• —Lead capture data submitted by your customers

Knowledge Base Content

• —Documents, FAQs, and other content you upload to train your agents
• —URLs and scraped content from websites you authorise us to access

2. How We Use Your Information

We use personal information to:

• —Create and manage your account and deliver the Service
• —Process payments and manage your subscription through Stripe
• —Power your AI agents' responses using your knowledge base and configuration
• —Send transactional emails (account confirmation, billing receipts, important notices)
• —Send product updates and marketing communications (you may opt out at any time)
• —Monitor the Service for abuse, fraud, and violations of our Terms of Service
• —Improve and train our AI systems using anonymised and aggregated data
• —Respond to support enquiries and resolve disputes
• —Comply with legal obligations

We do not sell your personal information to third parties. We do not use your conversation data to train third-party AI models without your consent.

3. Data Storage & Security

We store your data using the following infrastructure:

• —Supabase (Australia region) — primary database for account data, agent configurations, conversations, and leads
• —Pinecone (United States) — vector embeddings for your knowledge base used to power AI responses
• —Vercel (global CDN) — application hosting and serverless functions

All data is encrypted in transit using TLS 1.2 or higher. Data stored in our primary database is encrypted at rest. We implement access controls, audit logging, and regular security reviews.

By using the Service, you consent to the transfer of your data to infrastructure providers located outside Australia (including the United States). We ensure these providers maintain appropriate data protection standards.

4. Third-Party Services

The Service integrates with the following third-party providers who may process personal data:

• —Stripe — payment processing
• —Anthropic (Claude) — AI language model for generating agent responses
• —OpenAI — embedding models for knowledge base search
• —Vapi.ai — voice AI infrastructure for phone agents
• —Twilio — phone number provisioning and call routing
• —Pinecone — vector database for knowledge retrieval
• —Vercel — application hosting

Each of these providers has its own privacy policy and data processing terms. We have data processing agreements in place where required. Conversation content sent to AI providers (Anthropic, OpenAI, Vapi) is subject to their respective data handling policies.

5. Data Retention

• —Account data — retained for the duration of your active account, plus 90 days after account closure
• —Conversation transcripts and leads — retained for 12 months from the date of the interaction
• —Knowledge base documents — retained until you delete them or close your account
• —Billing records — retained for 7 years in accordance with Australian tax law
• —After deletion — personal data is removed from active systems within 30 days of account deletion; backups are purged within 90 days

6. Your Rights Under the Australian Privacy Act

Under the Privacy Act 1988 (Cth), you have the right to:

• —Access — request a copy of the personal information we hold about you
• —Correction — request correction of inaccurate or incomplete personal information
• —Deletion — request deletion of your personal information (subject to legal retention obligations)
• —Export — request a portable copy of your data in a machine-readable format
• —Opt-out — opt out of marketing communications at any time via the unsubscribe link in emails
• —Complaint — lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

To exercise any of these rights, contact us at hello@justdelegate.ai. We will respond within 30 days.

7. Cookies

We use cookies and similar technologies only as necessary to operate the Service:

• —Authentication cookies — to keep you signed in to your account (session cookies, expire when you close your browser or after 7 days)
• —Security cookies — to protect against CSRF attacks and unauthorised access

We do not use advertising cookies, tracking pixels, or third-party analytics that collect personal information. We do not participate in cross-site tracking.

8. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at hello@justdelegate.ai and we will promptly delete such information.

9. Automated Decision-Making

JustDelegate uses AI to generate conversational responses in chat and phone interactions. These are informational responses only and do not constitute automated decisions with legal or significant effects on individuals.

Under the Privacy Act 1988 (Cth) and Australian Privacy Principles, you have the right to:

• —Know when AI is involved in processing your data
• —Understand how AI generates responses about you or your enquiry
• —Request human review of any AI interaction
• —Object to automated processing in circumstances where it affects your rights

For more details, see our AI Transparency Statement.

10. Your Data Rights (Summary)

Under Australian privacy law, you have the right to:

• —Access — request a copy of your personal data
• —Correction — request correction of inaccurate data
• —Deletion — request deletion of your data
• —Export — download your data in a portable format via your dashboard
• —Complaint — lodge a complaint with the OAIC at oaic.gov.au

To exercise these rights, use the Data & Privacy section in your dashboard, or email hello@justdelegate.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email to your registered address. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

For privacy-related enquiries or to exercise your rights: