Privacy Policy

When you engage with Innovation Child — through our contact form, platform sign-up, or any other interaction — you will be presented with a clear, separate, voluntary checkbox to opt in to communications such as:

• Industry insights and research articles
• Product updates and release notes
• Promotions, events, and early access offers

You may withdraw consent at any time by clicking “Unsubscribe” in any email we send, or by contacting us directly at [email protected]. Withdrawal is immediate and permanent — we do not re-subscribe you automatically.

We collect only what is necessary to provide our services:

• Account information: name, email address, company name, and role when you register or contact us.
• Usage data: pages visited, features used, session duration — collected in aggregate to improve our platform.
• Platform inputs: documents, queries, and data you submit to our AI platform, processed solely to generate your requested outputs.
• Communications: emails or messages you send us, retained for support and legal record-keeping.

We do not purchase or acquire personal data from data brokers or third-party sources.

Your information is used exclusively for:

• Delivering, operating, and supporting the services you have requested
• Communicating with you about your account, contracts, or support queries
• Sending communications you have explicitly opted in to receive
• Complying with legal obligations and resolving disputes
• Detecting and preventing fraud or security incidents

We will never use your information to train AI or machine learning models — including any foundation models, fine-tuned models, or embeddings — without your explicit, informed, written consent.

We do not sell, rent, or trade your personal information. We may share data with trusted service providers who operate under strict confidentiality agreements and process data only on our behalf for:

• Cloud hosting and infrastructure (data residency controls applied where required)
• Transactional email delivery (for account and service communications only)
• Analytics tooling used in aggregate, anonymised form

We require all sub-processors to meet equivalent data protection standards. We will notify you promptly if we are compelled by law to disclose your information and are legally permitted to do so.

We apply industry-standard security controls including encryption in transit (TLS 1.2+) and at rest, access controls limited to authorised personnel, regular security assessments, and audit logging on systems that handle personal data.

For enterprise clients, we offer local deployment options where your data never leaves your own infrastructure. No cloud, no third-party exposure.

No system is infallible. In the event of a data breach that is likely to result in risk to your rights or freedoms, we will notify affected individuals and relevant authorities within 72 hours of becoming aware, in accordance with applicable law.

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. On termination of a service relationship, we will delete or anonymise your personal data within 30 days unless a longer retention period is required for legal or regulatory compliance.

Depending on your jurisdiction, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request erasure of your personal data (subject to legal obligations)
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing of your data for direct marketing at any time
• Withdrawal of consent: withdraw any consent you have previously given

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We use essential cookies required for the site to function (session management, security tokens, theme preference). We do not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies.

Any analytics we collect are privacy-preserving, aggregated, and do not include personally identifiable information.

Innovation Child is headquartered in Australia and operates under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Where data is processed or stored outside Australia, we ensure equivalent protections apply through contractual safeguards and, where applicable, adequacy decisions.

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately at [email protected] and we will delete it promptly.

We may update this policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via email (to those who have opted in to communications) and/or a prominent notice on our website at least 30 days before taking effect. Continued use of our services after that date constitutes acceptance of the revised policy.

The effective date at the top of this page indicates when this version was last revised.

For any privacy-related questions, concerns, or requests, please contact our Privacy Officer: