Draft of 5 November 2026
This policy explains how chrometech ("we", "us") handles personal information. We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we apply them to everyone whose information we hold.
It covers this website, the client portal and the services we run for our customers. If anything here is unclear, email enquiries@chrometech.com.au.
You can browse this website without telling us who you are. To use a service we need at least a name and a work email address.
We do not sell personal information. We do not use your chats or files to train AI models. We only send you marketing email if you ask for it, and you can stop it at any time.
When someone uses Private AI team chat or Ask-your-files search, their messages and the relevant parts of your files are sent to an AI model to produce an answer. Models are run through Amazon Bedrock. By default this happens in Australia. If your organisation sets AI residency to Global, requests may be processed in other countries, which may include the United States.
Neither we nor Amazon use these requests to train AI models.
We do not use computer programs to make decisions about you that could significantly affect your rights or interests.
Some things happen automatically by design: AI pauses for a team when its AI wallet reaches zero, and a per-person spending cap set by your organisation stops that person's AI use for the month. These follow fixed rules your organisation sets or can see. If we ever start making automated decisions that significantly affect people, we will update this policy to say what information they use and what kinds of decisions they make.
We share personal information with these service providers, only so they can do their part in running chrometech. They must protect it and may not use it for their own purposes.
| Provider | Why | Where |
|---|---|---|
| Amazon Web Services | Hosting, storage, backups and AI processing (Amazon Bedrock) | Sydney or Melbourne. AI may be processed overseas if your organisation chooses Global AI residency |
| Amazon Simple Email Service (Amazon SES) | Sending invitations, notifications and account email | Run by Amazon Web Services |
| Stripe | Payments and billing | Australia and overseas, including the United States |
We may also disclose information when the law requires it, or to protect someone's safety. Before sending personal information overseas we take reasonable steps, including contract terms, to make sure it is handled in line with the APPs.
Our security page explains how we protect your service, including encryption, your own server in Australia, restricted staff access and daily backups.
When a service is cancelled we keep its data for a 30-day grace period, then keep one final backup for 90 days, then delete it. We keep billing and account records for as long as Australian tax and business law requires, generally five years, and then delete them.
You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing enquiries@chrometech.com.au. We will reply within 30 days and will not charge you for making a request. If we cannot do what you ask, we will explain why in writing.
If your information is part of your organisation's service content, we may ask your organisation to handle the request, because they control that content.
If we suspect a data breach, we will assess it promptly and within the 30 days the law allows. If it is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme. If a breach affects your organisation's service, we will tell your organisation as soon as we can so it can meet its own obligations.
If you are unhappy with how we have handled your information, email enquiries@chrometech.com.au. We will respond within 30 days.
If you are not satisfied with our response, you can complain to the OAIC at www.oaic.gov.au or on 1300 363 992.
We will update this page when our practices change and show the date at the top. If a change materially affects you, we will tell customers by email before it takes effect.