Privacy Policy

1. Scope and legal position

This policy applies to VexlorGrid-operated websites, products and services that refer to it. VexlorGrid is operated by Dale Blackborough, ABN 35 396 200 391, in South Australia, Australia. Australian Privacy Act coverage can depend on turnover and activities. We apply the commitments in this policy as our product baseline whether or not every activity is legally required to comply with the Australian Privacy Principles. Where the Privacy Act applies, nothing in this policy reduces those obligations.

2. Information we may handle

Depending on the feature and permission, information may include account and contact details; user-provided conversations, files and inputs; preferences, goals and constraints; device, security and diagnostic metadata; explicitly connected-service data; transaction and support records; consent and permission receipts; and information inferred from permitted inputs where inference is necessary for the feature.

3. Sensitive information

We do not treat sensitive information as ordinary product telemetry. Where a feature requires sensitive information, it must have a defined purpose, appropriate consent or other lawful basis, stricter access boundaries and a retention rule. Hidden sensitive-trait inference for growth or advertising is not part of the VexlorGrid design.

4. Why we use information

• Provide and personalise the service requested by the user.
• Authenticate users and bind activity to the correct Canonical Person.
• Maintain safety, security, reliability, fraud prevention and recovery.
• Measure whether assistance worked and improve the product using permitted evidence.
• Provide support, billing and service administration.
• Meet applicable legal obligations.

5. Vera and personalisation

Vera may become more personally useful by learning user-authorised preferences, working style, recurring tasks, goals and context. Vera is an AI system, not a person. Personalisation must remain scoped to the authenticated person and permission context. Users should be able to withdraw personalisation consent, correct relevant profile information and reset or delete personalisation data subject to lawful retention obligations.

6. System learning and product analytics

Raw conversations, identifiable Person data, private notes and relationship history do not cross into system-level learning by default. VexlorGrid's architecture permits minimum, permissioned derived evidence for product learning. Product analytics should prefer aggregate or pseudonymous signals and must not silently create a second Person or memory authority.

7. Marketing

Product personalisation consent is not marketing consent. Commercial email or SMS marketing requires its own compliant consent basis, sender identification and unsubscribe path. Withdrawal from marketing must not disable unrelated core service functionality.

8. AI and service providers

VexlorGrid may use infrastructure, communications, payment, storage or AI providers to deliver requested features. Provider access is limited to what is necessary for the relevant function and subject to the technical and contractual controls available to VexlorGrid. We do not represent third-party providers as VexlorGrid-owned systems.

9. Overseas processing

Some providers may process information outside Australia. Before a material overseas disclosure of personal information, VexlorGrid should assess the destination, recipient, purpose, data class, contractual protections and available safeguards. We do not treat cross-border processing as permission to weaken this policy.

10. Retention and deletion

We aim to retain personal information only while needed for the stated purpose, security, recovery, dispute, accounting or legal requirements. Data no longer needed should be deleted or de-identified where lawful and practicable. Immutable receipts may preserve minimum historical evidence even when future collection or learning consent is withdrawn; they must not be rewritten to disguise prior events.

11. Security

We use layered access, identity, permission, evidence and recovery controls appropriate to the service being developed. No online service can guarantee absolute security. See the Security page for our public security position.

12. Access, correction, export and deletion requests

Users may contact us to request access to or correction of personal information and, where applicable, deletion or export. We may need to verify identity and may retain information where required or permitted by law, security, dispute or accounting obligations.

13. Automated decisions

VexlorGrid does not intend Vera to become the final authority for decisions that significantly affect a person's legal or similarly important rights. Where applicable law requires additional transparency about automated decisions, VexlorGrid will disclose the relevant classes of decisions and personal information used. This policy is designed to anticipate the Australian Privacy Act automated-decision transparency requirements commencing 10 December 2026 where they apply.

14. Children and young people

Companion-like personalisation can create additional risks for young users. VexlorGrid will not represent personalised companion features as suitable for under-18 users until age-appropriate design, safety and any required age-assurance controls have been separately verified for that release.

15. Law-enforcement and government requests

VexlorGrid does not voluntarily provide user information to police or law-enforcement agencies, provide standing access or create a backdoor. A binding legal obligation that cannot lawfully be resisted further is handled under the separate Law-Enforcement Request Policy.

16. Sale of personal information

VexlorGrid does not sell personal information as a product. Any future business model involving disclosure of personal information for a benefit, service or advantage would require a separate legal, privacy and product review before launch.

17. Privacy complaints

Send a written privacy complaint to accounts@vexlorgrid.com with enough detail for us to investigate. We aim to acknowledge and respond within a reasonable period. Where the Privacy Act applies, individuals may have a right to complain to the Office of the Australian Information Commissioner after first giving the organisation a reasonable opportunity to respond.

18. Changes

Material changes to this policy will be published with a new effective date. A policy update does not retrospectively manufacture consent for a materially different purpose.