Privacy Policy

TurnkeyAI Pty Ltd ("TurnkeyAI", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information in compliance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. What we collect

When you submit our contact form, request a quote, or engage us for a deployment, we may collect:

• Identity data: name, business name, role.
• Contact data: business email, phone number, business address.
• Engagement data: industry, package interest, workflow descriptions, the tools your business uses.
• Operational data: during a deployment, we may temporarily process samples of your business data (e.g. emails, invoices) to test workflows. This data is anonymised where possible and deleted at the end of the build phase.
• Technical data: standard server logs (IP, user agent, referrer) when you visit our website.

2. How we use it

We use personal information to:

• Respond to your enquiry and send confirmation emails.
• Scope, build, deliver, and support your deployment.
• Send transactional notifications related to your engagement.
• Improve our service and operational metrics in aggregated, de-identified form.
• Comply with legal obligations (e.g. tax records).

We do not use your personal information for unrelated marketing without your consent. We do not sell your data.

3. Where it lives

Form submissions are processed by Netlify (deployment hosting) and Resend (transactional email), both of which are subject to their own privacy commitments. Operational data during a deployment is processed locally on our build infrastructure in Australia and on the Mac Mini hardware delivered to your office. Once the hardware leaves us, your operational data lives only on your premises.

4. Disclosure to third parties

We disclose personal information only:

• To service providers who help us deliver the engagement (hosting, email, accounting), bound by confidentiality obligations.
• Where required by law (e.g. court order, regulatory request).
• With your express consent.

Some of our service providers (e.g. Resend, Netlify) operate in the United States. Where data is transferred overseas, we take reasonable steps to ensure the recipient is bound by privacy commitments substantially equivalent to the APPs.

5. Cookies

Our website uses minimal cookies. We do not currently run third-party analytics or advertising trackers. Any first-party cookies set are limited to functional purposes (e.g. preserving form state). You can disable cookies via your browser; doing so will not affect your ability to read the site.

6. Security

We protect personal information using industry-standard security: encryption in transit (TLS), encryption at rest for credentials, principle of least privilege for our team's access, and physical security of our build infrastructure. No system is 100% secure; if a breach affects you, we will notify you in line with the Notifiable Data Breaches scheme.

7. How long we keep it

We retain contact and engagement data for the duration of our relationship with you and for 7 years after the last engagement to comply with Australian record-keeping obligations. Operational data sampled during a deployment is deleted within 14 days of handover. You may request earlier deletion subject to our legal obligations.

8. Your rights

Under the Privacy Act 1988, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or out-of-date information.
• Request deletion of personal information we are not legally required to retain.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, email start@tkai.com.au. We respond within 30 days.

9. Children

Our Services are intended for businesses and their authorised representatives. We do not knowingly collect personal information from individuals under the age of 18.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated to active clients by email.

11. Contact

Privacy questions or requests: start@tkai.com.au. Our postal address is available on request.