Privacy Policy

1. Introduction

This Privacy Policy explains how Arc AI Agent (ABN 43 879 594 646) (“we”, “us”, “ClaimRebate”) collects, uses, discloses and stores your personal information when you use ClaimRebate.com.au (“Site”) and related services.

2. Information We Collect

• Google OAuth data: name, email, avatar (for authentication).
• AI chat transcripts: questions & answers, retained while your account is active.
• Newsletter consent: opt-in status (you can opt-out at any time).
• Usage data: Google Analytics in cookie-free mode (no cookies set).

3. How We Collect Information

We collect your personal data when you:

• Sign in via Google OAuth.
• Interact with the AI Eligibility Checker or other chat tools.
• Submit any form on the Site (e.g., newsletter signup, vote for rebates).

4. Purposes of Use

We use your information to:

• Authenticate and personalise your experience.
• Send state-specific rebate alerts (newsletter).
• Improve our AI models and Site features.
• Compile anonymous analytics on Site usage.

5. Disclosure to Third Parties

We may share your data with:

• Installers and service-provider agents only after obtaining your explicit consent via forms or chat prompts.
• Analytics providers (Google Analytics) in privacy-friendly mode.
• Our email service (in-house).

6. Data Storage & Retention

Our Site is hosted on Hostinger servers located in Asia. Backups are stored locally; no off-site backups outside Asia. We retain personal data as follows:

• AI chat transcripts: while account is active, deleted within 30 days of account closure.
• OAuth profile info & newsletter consent: until you unsubscribe or delete your account.
• Analytics data: aggregated and anonymised indefinitely.

7. Overseas Transfers

No personal data is transferred outside Asia. Google Analytics processing may occur in multiple regions under Google’s global infrastructure, subject to their privacy safeguards.

8. Security Measures

We implement reasonable technical and organisational measures, including:

• MFA for admin access.
• Encryption at rest and in transit.
• Regular security reviews and patching.

9. Children’s Privacy

We do not knowingly collect or store personal information of children under 13. All users must sign in via Google OAuth, which enforces its own age restrictions.

10. Access & Correction

You may request access to or correction of your personal data by emailing navadeep.r.m@gmail.com. We will respond within 30 days.

11. Complaints Handling

If you have a privacy complaint, please contact us at navadeep.r.m@gmail.com. If unsatisfied, you may refer your complaint to the Office of the Australian Information Commissioner.

12. Changes to Policy

We may update this policy. We will notify registered users by email and post a banner on the Site for 7 days. Continued use after changes constitutes acceptance.

13. Contact Information

For privacy enquiries, email navadeep.r.m@gmail.com.