Privacy Policy

1. Who we are

SiteFinderAI ("we", "us") provides AI-assisted site prospecting tools for Australian vending, ATM, photo booth and allied operators. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

2. Information we collect

• Account details: name, email address, password hash (managed by our authentication provider), team membership, seat role and referral code.
• Billing details: subscription plan, trial status, invoices and receipts. Card data is entered directly with our payment processor (Stripe) — we never see or store full card numbers.
• Usage data: briefs and scan settings you create (towns, suburbs, postcodes, states, machine types, radius, business categories), lead outcomes and call notes, lead credit consumption, run costs, rate-limit and abuse-protection counters, and security audit events.
• Technical data: IP address, device and browser information, timestamps, and bot- protection signals from Cloudflare Turnstile.
• Legal records: the version and date of the Terms & Conditions you accepted and when you accepted them.

3. Business information in site leads

Site leads contain business information (venue names, addresses, categories, opening hours, estimated staffing, map imagery) sourced from third-party mapping and place data and from publicly available sources. This is business contact information, not consumer personal information, and it may be incomplete, outdated or inaccurate. You are responsible for how you use leads, including compliance with Australian telemarketing rules such as the Do Not Call Register Act 2006 and the Spam Act 2003.

4. How we use your information

• to create and secure your account, team seats and referral rewards;
• to run prospecting scans, competitor scans, confidence scoring and PDF exports you request;
• to meter lead credits, trials, usage caps and spend ceilings;
• to bill you and issue invoices, receipts and account emails;
• to detect and block abuse, bots, fraud and security incidents;
• to improve reliability and product quality, and to meet legal obligations.

We do not sell your personal information, and we do not send marketing to your leads.

5. Service providers we share data with

We disclose only what is needed to operate the platform: our cloud hosting, database and authentication provider; Google Maps Platform (places, geocoding and static map imagery for your scans); Stripe (payments); Cloudflare (bot protection); and our transactional email provider. Some providers process data outside Australia, including in the United States. We take reasonable steps to ensure they protect your information to a comparable standard.

6. AI processing

Brief filters and place data are processed by AI models to produce rankings, confidence scores and pitch notes. AI outputs can be wrong, incomplete or misleading and must be independently verified before you contact a venue or make any commitment. We do not submit your billing details to AI models.

7. Cookies and similar technologies

We use strictly necessary cookies and local browser storage to keep you signed in, remember an entered referral code, and protect forms against automated abuse. We do not use advertising cookies.

8. Data retention

We keep account, billing and legal-acceptance records for as long as your account is active and afterwards for as long as required for tax, accounting and legal purposes (generally seven years). Briefs, leads and scan history are kept while your account is active and are deleted or de-identified after account closure, subject to backups cycling out.

9. Security

We use row-level database access controls, role-based permissions, encrypted connections, rate limiting, spend ceilings, bot protection and scheduled security scanning. No system is perfectly secure, so you must keep your password confidential and not share seats outside your subscription.

10. Your rights

You may request access to, or correction of, the personal information we hold about you, ask us to delete your account, or complain about our handling of your information. Email hello@sitefinderai.com. We will respond within a reasonable time, usually within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner.

11. Children

SiteFinderAI is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

12. Changes to this policy

We may update this policy from time to time. The version number and last-updated date above will change, and continued use of the platform after an update constitutes acceptance of the revised policy.

13. Contact

Privacy questions can be sent to hello@sitefinderai.com. See also our Terms & Conditions.