Privacy Policy

1. Introduction

Welcome to Priset. This Privacy Policy outlines how Priset Pty Ltd ("Priset", "we", "us", or "our"), an Australian proprietary company, collects, uses, protects, and discloses your Personal Information. We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with:

• The Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
• The General Data Protection Regulation (GDPR) for European users.
• The California Consumer Privacy Act (CCPA) and CPRA for Californian users.
• Other applicable international privacy laws.

If you do not agree with the terms of this Privacy Policy, please do not access the Site or use our Services.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Site, purchase services, or contact us. We also automatically collect certain technical data.

A. Personal Data Provided by You

• Identity and Contact Data: Name, email address, postal address, phone number.
• Student Verification Data (Student Plan): For users on our Student Plan, we use the student-provided API key to validate their Student ID card and student email address. We do not store the full details of these documents, except for:
  • Name of the Academic Institution (e.g., High School or University name).
  • Current course year.
  • Student type (e.g., Secondary school, Undergraduate, Postgraduate).
• Credentials: Passwords, password hints, and authentication data.
• Payment Data: Billing address and payment method details. Note: We use a secure third-party payment processor (e.g., Stripe) and do not store full credit card numbers.
• Communications: Content of messages sent to customer support.

B. Data Collected Automatically

• Device Data (MAC Address): We collect the MAC address of your device solely for the purpose of identifying your machine to manage the trial license and prevent abuse of the trial period. This constitutes a legitimate business interest in fraud prevention and license enforcement.
• Usage Data & Cookies: We may collect information about how you access and use the Site, including IP address, browser type, operating system, and interaction logs. We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

3. Information We Do NOT Collect

• Your Source Code: All Priset application data files ("Knowledgebase") are stored directly on your local machine. Your source code, and any proprietary information contained within it, is never stored, archived, or viewed by us.
• Sensitive Personal Information: We do not collect sensitive data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information.

4. Purpose of Collection and Legal Bases

We process your personal information for the following purposes, relying on these legal grounds:

• To Provide Services (Contract): To create accounts, validate licenses (via MAC address), verify student status for eligibility (Student Plan), process payments, and manage vendor/partner relationships (Contractual Necessity).
• To Improve and Protect (Legitimate Interest): To prevent fraud, ensure network security, and analyze usage trends to improve the software.
• To Communicate (Consent/Legitimate Interest): To send administrative updates (Contract) or marketing emails (Consent, where required).
• To Comply with Laws (Legal Obligation): To satisfy tax, accounting, and regulatory requirements in Australia and internationally.

5. Data Sharing and Disclosure

We do not sell your personal information. We share data only in the following circumstances:

• Service Providers: Third parties who perform services for us (payment processing via Stripe, hosting, email delivery). They are contractually bound to protect your data.
• Analytics Providers: We use third-party analytics services, such as Google Analytics and PostHog, to monitor and analyze the use of our Service.
• User-Selected AI Providers (BYOK): To power Priset's core features, User Content (including code snippets) is transmitted directly from your local machine to the third-party AI provider you select via your API key (e.g., Google, Anthropic, or OpenAI). The handling of this data is subject to the respective B2B API terms of the provider you choose. For absolute IP protection, we recommend utilizing the Google Gemini API, which enforces strict zero-retention Data Governance terms for paid services.
• Cross-Border Disclosure: As an Australian company, we may disclose personal information to recipients overseas, primarily in the United States (where our cloud and infrastructure providers operate). We take reasonable steps to ensure overseas recipients comply with privacy principles similar to the APPs.
• Legal & Business Transfers: If required by law, court order, or in connection with a merger or acquisition.

6. International Data Transfers

Priset is headquartered in Australia. By using our Services, you acknowledge that your information will be transferred to, stored, and processed in Australia and the United States.

For European (EEA/UK) Users: When we transfer your data outside the EEA/UK to countries not deemed to provide an adequate level of data protection (such as Australia or the US), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Government to ensure your data remains protected.

7. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information.

A. For Australian Residents (Privacy Act 1988)

• Access and Correction: You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate.
• Complaints: If you believe we have breached the Australian Privacy Principles, please contact us. If you are unsatisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

B. For European (GDPR) & UK Residents

• Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
• Right to Portability: Request transfer of your data to another service.
• Right to Restrict/Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time.

C. For California Residents (CCPA/CPRA)

• Right to Know: Request details on categories of data collected and sources.
• Right to Delete/Correct: Request deletion or correction of your data.
• Non-Discrimination: We will not discriminate against you for exercising these rights.
• "Do Not Sell or Share": Priset does not sell your personal information.

To exercise any of these rights, please contact our privacy team.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted or anonymized.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption (SSL/TLS) for all communications. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data-handling practices, please contact us.

Data Controller: Priset Pty Ltd (Australia)
Contact Privacy Team