Privacy Policy
Last updated: [INSERT DATE ON PUBLISH]
1. Who this policy covers
This policy explains how [Pratham Technologies Pty Ltd, ACN/ABN: INSERT] ("PrathamAI", "we") collects, uses, stores, and protects personal information when you use our platform. It covers two groups of people: (a) you, the business owner using PrathamAI ("Customer"); and (b) end customers of the stores our Customers operate ("your customers") — data we process on a Customer's behalf as their service provider, not as the party who decides why it's collected.
2. What we collect
From you (the Customer)
- Account details: name, email, password (hashed, never stored in plain text), business name and category.
- Billing information: handled directly by Stripe — PrathamAI does not receive or store your full card number.
- Usage data: how you use the platform (pages visited, actions taken, agent activity) — used to operate, secure, and improve the service.
On your behalf, about your customers
- Order data: names, shipping addresses, email addresses, and order details your customers provide at checkout.
- We process this data solely to operate your store as you've configured it (fulfilling orders, sending order confirmations) — we do not use it for our own marketing, and we do not sell it.
3. How we use it
- To provide, maintain, and secure the platform.
- To process payments and manage your subscription.
- To send transactional emails (welcome, password reset, billing notices, growth-playbook nudges you've opted into via a notification email).
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
We do not sell personal information, and we do not use your customers' data to build profiles for advertising.
4. Who we share it with
We use the following third-party processors to operate the platform. Each only receives the data it needs to perform its function:
| Processor | Purpose | Data involved |
|---|---|---|
| Stripe | Payment processing, subscription billing | Billing details, card data (Stripe never shares full card numbers with us) |
| Resend | Transactional email delivery | Email address, message content |
| Hetzner (hosting) | Infrastructure hosting | All platform data, encrypted at rest and in transit |
| CJ Dropshipping / connected suppliers | Product sourcing, order fulfillment | Order shipping details, only for orders you route through them |
| Marketplaces you connect (Amazon, etc.) | Listing/order sync, if you enable them | Product and order data, only if you connect that integration |
We may also disclose information where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of PrathamAI, our Customers, or others.
5. AI processing
The platform's AI agents process your business data (product catalogs, pricing, order history, market trends) to source products, set prices, and generate content on your behalf. This processing happens within our infrastructure and connected AI providers under the same security controls as the rest of the platform; it is not used to train models on your specific data for any purpose beyond operating your own store, and is not shared with other Customers.
6. Data retention
- Account and business data is retained for as long as your account is active.
- On termination, data is retained for a limited recovery window (see the Terms of Service) before permanent deletion, so you can recover an accidentally-terminated account.
- We retain billing records for as long as required by Australian tax law.
7. Your rights
Depending on your location, you may have the right to access, correct, or request deletion of your personal information, and to object to or restrict certain processing. To exercise these rights, contact privacy@pratham.au. If you are in Australia, you also have rights under the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and may complain to the Office of the Australian Information Commissioner if you believe we have mishandled your information.
8. Security
We use industry-standard measures to protect your data, including encryption in transit (TLS), hashed passwords, and network isolation between different Customers' businesses. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Cookies
We use a minimal, first-party-only tracking mechanism (a randomly generated identifier stored in your browser's local storage, not a third-party cookie) to measure signup funnel performance. It carries no personal information and is not used for cross-site tracking or advertising.
10. Children's privacy
The platform is intended for business use by adults. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this policy from time to time. Material changes will be notified via the email associated with your account or an in-app notice.
12. Contact
Questions about this policy or your data: privacy@pratham.au
This document is a working draft prepared to describe our actual data practices accurately. It has not yet been reviewed by a qualified lawyer and should not be treated as legal advice until that review is complete.