Privacy Policy

CRUXINATOR Pty Ltd ABN 27 627 408 968 ("we", "us") operates the DUSC-SC service. This Privacy Policy explains what personal information we collect, how we use it, and your rights. We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What personal information we collect

When you use DUSC-SC we may collect:

• Contact and account details: your first name and email address when you submit a request or create an account.
• Request content: the natural-language text you submit to be compiled into a specification.
• Email correspondence: any replies you send to results emails are captured and associated with your conversation.
• Technical and usage data: IP address, browser type, pages visited, timestamps, and error logs collected automatically.
• Analytics data: aggregated, anonymised usage statistics collected via Google Analytics 4 (see section 5).

We do not collect payment card details directly; any payments are handled by third-party processors.

2. How we collect it

We collect information you provide directly (via the intake form, account registration, or email), automatically via server logs, and through Google Analytics cookies placed on your browser when you visit this site.

3. How we use your information

We use your information to:

• compile and deliver your requested specification;
• operate, maintain, and improve the service;
• send transactional emails (results, account notices, status updates);
• detect and prevent fraud, abuse, and security incidents;
• comply with legal obligations;
• understand how the service is used (analytics, aggregated only).

We do not use your request content to train AI models, and we do not sell your personal information to third parties.

If you have opted in to marketing emails, we will send you occasional service updates and announcements. You can unsubscribe at any time.

4. Disclosure to third parties

Your information may be disclosed to:

• Email delivery providers: used to send transactional emails (results, activation links).
• Google Analytics: anonymised usage data (see section 5).
• Hosting and infrastructure providers operating under data processing agreements.
• Law enforcement or regulators where required by law.

5. AI processing

Your request content is processed by DUSC, a proprietary AI system developed and hosted entirely in Australia by CRUXINATOR Pty Ltd. Your data is not transmitted to any third-party AI provider. We do not use your content to train or improve AI models.

6. Google Analytics

This website uses Google Analytics 4 to collect anonymised data about how visitors use the site (pages viewed, session duration, geographic region at country/state level, device type). Google Analytics does not receive your name, email, or request content.

Google Analytics may set cookies on your browser. You can opt out at any time by installing the Google Analytics opt-out browser add-on or by using your browser's privacy settings to block third-party cookies. We do not use Google Analytics advertising features or cross-site tracking.

7. Cookies

We use a session cookie to keep you logged in while using the dashboard. This cookie is strictly necessary for the service to function. We also use Google Analytics cookies as described above. We do not use tracking cookies for advertising.

8. Data retention

We retain your account information and conversation history for as long as your account is active plus a reasonable period afterwards for support and legal compliance purposes. Compiled specifications and raw email content are retained for a rolling period (typically 12 months) before being pruned. Server logs are retained for up to 90 days. You may request deletion of your data at any time (see section 9).

9. Security

We use industry-standard measures to protect your information, including HTTPS encryption in transit, encrypted database credentials, restricted access controls, and regular security reviews. We do not hold payment card data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We do not hold ISO 27001, SOC 2, or equivalent certifications at this time.

10. Your rights (Australian Privacy Principles)

Under the Australian Privacy Act you have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or outdated information;
• request deletion of your information (subject to legal obligations);
• complain about how we handle your information.

To exercise any of these rights, email us at hello@cruxinator.ai. We will respond within 30 days.

If you are unsatisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC).

11. Changes to this policy

We may update this policy. Material changes will be communicated by email to registered users at least 14 days before taking effect. The current version is always available on this page.

12. Contact

Privacy enquiries: hello@cruxinator.ai
CRUXINATOR Pty Ltd, New South Wales, Australia.