Privacy Policy

1. Scope

This policy applies to personal information handled by CodeGenesis Pro in connection with our websites, product demonstrations, Microsoft Marketplace listing and subscriptions, software platform, professional services, support, sales and other business interactions.

It does not replace any customer agreement, data processing agreement, confidentiality agreement or privacy notice that applies to a specific engagement. If those documents provide stronger protections for Customer Content, those protections continue to apply.

In this policy, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable. Customer Content means content submitted to, connected to or processed by CodeGenesis Pro on a customer's behalf.

2. Information we collect

The information we collect depends on how you and your organisation interact with us.

Contact and business information

• Name, work email address, telephone number, employer, role and business location.
• Information included in enquiries, forms, meeting requests, proposals and correspondence.
• Preferences relating to demonstrations, events, product updates and marketing.

Account, subscription and transaction information

• User, administrator, organisation and tenant identifiers.
• Authentication, access-role and account-status information.
• Marketplace offer, plan, subscription, entitlement, order and activation details.
• Limited billing and transaction information supplied by Microsoft or another authorised channel. We do not ordinarily receive full payment-card details.

Product, support and technical information

• Service usage, feature interaction, configuration, audit, diagnostic and support records.
• Browser, device, IP address, operating system, timestamps, referring pages and security-event information.
• Feedback, survey responses, incident reports and communications with our team.

Customer Content

Depending on the engagement, Customer Content may include source code, application artefacts, technical documentation, architecture information, configuration, database and schema information, operational records, logs, requirements, prompts, generated outputs and support materials. Customer Content may contain personal information if the customer includes it in the connected material.

We do not intentionally collect sensitive information through our public website. Please do not provide sensitive information unless it is necessary, authorised and covered by an appropriate agreement or collection notice.

3. How we collect information

We may collect information:

• directly from you when you contact us, request a demonstration, create or activate an account, use the platform, attend a meeting or seek support;
• from your employer, organisation administrator or another person authorised to interact with us on your behalf;
• from Microsoft Marketplace, Microsoft identity services and other approved sales, identity or technology partners;
• automatically through service logs, cookies and similar technologies when you use our website or platform; and
• from publicly available sources and professional networks for legitimate business-to-business engagement.

Where practical, you may interact with us without identifying yourself. Some services, including subscriptions, secure platform access and support, cannot be provided anonymously.

4. How we use information

We use personal information where reasonably necessary to:

• respond to enquiries, assess requirements and provide demonstrations, proposals and services;
• create, authenticate, administer and secure customer accounts and subscriptions;
• deliver enterprise application intelligence, product functionality, onboarding, support and professional services;
• operate, maintain, monitor, troubleshoot, protect and improve our website and platform;
• communicate service notices, security information, product updates and relevant business information;
• manage invoicing, Marketplace transactions, contracts, suppliers and business records;
• detect or prevent fraud, misuse, security threats and unlawful conduct;
• comply with applicable laws, regulatory obligations, court orders and enforceable requests; and
• establish, exercise or defend legal rights and manage corporate transactions.

We may create aggregated or de-identified information for analytics, service improvement and business planning where the information no longer identifies a person.

5. Customer Content and AI processing

We process Customer Content to provide the functions selected by the customer, such as discovering application knowledge, generating artefacts, answering authorised questions, supporting analysis and delivering agreed outcomes. The customer determines what content is provided and is responsible for having the authority to provide it.

CodeGenesis Pro may use contracted cloud, search and artificial-intelligence service providers to process Customer Content. We apply the customer agreement, access controls, configured service settings and appropriate technical and organisational safeguards to that processing. We do not sell Customer Content or use it to train models made available to unrelated customers unless the customer expressly agrees.

Customers should avoid including personal information that is not necessary for the agreed purpose and should use available redaction, access-control and data-minimisation measures.

6. When we disclose information

We may disclose personal information to:

• cloud hosting, identity, security, analytics, communications, support, payment, professional-services and AI technology providers acting for us;
• Microsoft and other authorised Marketplace or channel partners where required to publish, sell, activate, administer, support or reconcile a subscription;
• our professional advisers, auditors, insurers and contractors who need the information to perform their duties;
• a prospective purchaser, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality protections;
• regulators, law-enforcement bodies, courts or other parties where required or authorised by law; and
• another party with your consent or at your direction.

We require service providers to handle information consistently with their contracts, applicable privacy and security obligations and the purpose for which it was disclosed.

7. Overseas handling

CodeGenesis Pro is based in Western Australia. Some contracted technology and service providers may process or store information in Australia, the United States and other countries in which those providers or their approved subprocessors operate. The specific locations may depend on the customer's selected deployment, region and services.

Before disclosing personal information overseas, we take reasonable steps required by applicable law and use appropriate contractual, technical and organisational safeguards. Customers may request further information about subprocessors and locations relevant to their service configuration.

8. Cookies and analytics

Our website and platform may use necessary cookies or similar technologies for security, authentication, session continuity, preferences and service operation. We may also use limited analytics to understand performance and improve the experience.

You can control cookies through your browser settings. Blocking necessary cookies may prevent sign-in, subscription activation or parts of the service from working correctly. Where required, we will request consent before using optional cookies.

9. Security and retention

We take reasonable technical and organisational steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include identity and access controls, encryption where appropriate, logging and monitoring, secure development practices, vendor assessment, personnel controls and incident-response procedures.

No system is completely secure. If an eligible data breach occurs, we will investigate and notify affected individuals and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme.

We retain information only for as long as reasonably necessary for the purpose for which it was collected, to provide the service, meet contractual and legal obligations, resolve disputes and maintain appropriate business records. We then delete, destroy or de-identify it where reasonably practicable and legally permitted. Customer Content retention and return or deletion are also governed by the applicable customer agreement and service configuration.

10. Access, correction and choices

You may ask us to give you access to personal information we hold about you or to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period and may need to verify your identity. If an exception allows us to refuse a request, we will explain the reason where the law permits.

You can opt out of marketing emails by using the unsubscribe link or contacting us. We may still send necessary service, security, transaction and account communications. Depending on where you live, you may have additional privacy rights under local law.

11. Privacy questions and complaints

If you have a privacy question or believe we have not handled your personal information properly, contact us using the details below. Please provide enough information for us to understand and investigate the matter. We will acknowledge the complaint and aim to provide a substantive response within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

12. Other important information

Children

Our services are designed for organisations and business users, not children. We do not knowingly solicit personal information from children through the public website or platform.

External links

Our website may link to third-party services. Their privacy practices are governed by their own notices, and we encourage you to review them.

Changes to this policy

We may update this policy as our services, practices or legal obligations change. The effective date at the top of this page identifies the current version. Material changes will be communicated where appropriate.