1. Who we are
This Privacy Policy applies to Bunya AI Pty Ltd (Bunya, we, us, our), an Australian company operating at bunya.ai. We are committed to protecting personal information and complying with the Australian Privacy Principles (APPs).
2. What we collect
We collect personal information that you voluntarily provide to us when you:
- Submit an enquiry or fill in the contact form on our website
- Request a demo, book a demo time, or ask for a Command Centre test drive on our website
- Book a discovery call or partnership call
- Subscribe to our updates or newsletter
- Engage us as a client, partner, supplier, or contractor
- Apply for a role or join the Bunya Academy
- Interact with us via email, phone, LinkedIn, or other channels
The information we collect typically includes your name, email address, phone number, organisation, role, and any details you choose to include in your message or enquiry. When you engage us as a client, we may additionally collect information required to deliver our services, including business context, technical environment details, and billing information.
Demo and test drive requests. Our demo and test drive forms save your answers with us as you go, from the moment you continue past the email step, so you can close the form and carry on later on the same device. Your browser keeps only a random code for this, not your answers. If you never submit the request, we delete what you entered 30 days after your last activity. When you book a demo time, we use Microsoft Bookings to create the meeting and send your invitation, with the name, email address and phone number you gave us.
Public information about you and your practice. When you request a demo or test drive, we also look up publicly available information about you and your practice, so our conversation is relevant to you. This includes the ASIC Financial Advisers Register (such as your adviser number, licensee, authorisations, qualifications and memberships), your practice's website, and public profiles linked from it, such as LinkedIn. We record this with your request in our CRM.
3. How we use your information
We use personal information to:
- Respond to your enquiries and provide requested information
- Follow up on your demo or test drive request, including how you have used the demo
- Research your practice from public sources, so our conversations are relevant to you
- Deliver, administer, and improve our services
- Send you updates about our work, when you have opted in
- Maintain our records and meet legal and regulatory obligations
- Assess employment and Academy applications
- Protect our legitimate business interests
We do not sell personal information. We use AI tools to help read and summarise publicly available information about your practice; they do not make decisions about you. We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.
4. How we share information
We disclose personal information only as necessary, including to:
- Trusted service providers who help us operate (e.g. hosting, email, CRM, analytics, AI and web research tools) under confidentiality obligations
- Microsoft, as the platform provider for the Power Platform services we deliver
- Professional advisers (legal, accounting, insurance) as required
- Government or regulatory bodies, where required by law
- Any party to whom you direct us to disclose information
Some of our service providers may store or process data outside Australia (primarily in Microsoft Azure Australian regions, but occasionally elsewhere). The tools we use to research public information also process data overseas: OpenAI, which provides the AI, processes details such as your name, email address, role and firm, and the public information we find, in the United States; and Apify, which reads your practice's public web pages, processes data mainly in the European Union and the United States. Where this occurs, we take reasonable steps to ensure the recipient handles the information in a manner consistent with the APPs.
5. How we protect information
We hold personal information in secure cloud environments - primarily Microsoft Azure and Microsoft 365 - with access restricted to authorised personnel who need it to perform their roles. We use encryption in transit and at rest, multi-factor authentication, and documented access controls. We retain personal information only for as long as required for the purpose for which it was collected, or as required by law.
6. Your rights
Under the APPs, you have the right to:
- Request access to the personal information we hold about you
- Request correction of information that is inaccurate or incomplete
- Withdraw consent to marketing communications at any time
- Make a complaint about our handling of your information
To exercise any of these rights, email us at [email protected]. We will respond within a reasonable time, usually within 30 days.
7. Cookies & website analytics
With your permission, we use Google Analytics and Microsoft Clarity to understand how visitors use bunya.ai and improve the website. Clarity records interactions such as clicks and scrolling to produce heatmaps and masked session replays. Replays show our own page content, but our configuration masks anything you type or select, email addresses and numbers, and everything inside our demo and test drive forms. It also keeps advertising consent disabled, and excludes our interactive demo, standalone booking and test-drive pages, and visits with URL query parameters. We do not send form answers, email addresses or CRM identifiers to Clarity. For those forms, Clarity only notes which steps were reached, so we can see where a form is hard to use.
These analytics tools load only after you select Accept analytics. You can decline or withdraw permission using Privacy choices on the website. Your choice is saved on this browser for up to six months. Declining analytics does not prevent enquiries or bookings. Microsoft and Google process website usage data under their respective privacy policies. See the Microsoft Privacy Statement and Google Privacy Policy.
After you submit a demo or test drive request, the Command Centre demo links we give you are personal to you. When you open the demo through one of them, we record when you open it, whether you start and finish the guided tour, which tour sections you view, and whether you choose to book a demo, and we link this to your request so we can follow up in a way that is useful to you. If you open the demo without a personal link, your visit is counted anonymously. The demo and our forms use your browser's own storage for this, not cookies.
To keep spam out, our demo and test drive forms use Cloudflare Turnstile to check that a person, not an automated program, is using them. Cloudflare processes technical information about your browser and connection for this check, which usually happens without you needing to do anything.
8. Data breaches
If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
9. Changes to this policy
We may update this policy from time to time. The most current version will always be available at this URL with the updated date shown above.
10. Contact us
For any privacy-related questions, requests, or complaints, contact us at [email protected]. If you are not satisfied with our response, you may contact the OAIC at oaic.gov.au.