1. Introduction

Alira is operated by Luke David Morgan trading as Alira (ABN 73 121 725 408), a sole trader based in Perth, Western Australia (“Alira”, “we”, “us”, “our”). We operate the AI-powered productivity and workflow platform at usealira.ai for Australian real estate professionals. This policy explains how we handle personal information.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

·      Account information you provide: name, work email, phone, agency or business name, role, billing details.

·      Content you input: property details, listing copy, draft communications, prompts, uploaded documents, integration data.

·      Usage information collected automatically: IP address, browser type, pages visited, timestamps, cookies and similar technologies for authentication, security and analytics.

·      Information from connected services you authorise via Pipedream, only the data scopes you approve.

We do not request sensitive information (as defined in the Privacy Act) and ask that you do not input it.

3. Third-party personal information you input

You may input personal information about clients and prospects (buyers, tenants, vendors, landlords, contacts in your CRM). Where you do:

·      You are the data controller and remain responsible for your obligations under the Privacy Act and APPs, including any required notice to and consent from those individuals.

·      Alira acts as a data processor, handling that information only to deliver the service you direct.

4. Why we collect personal information

To provide and operate the platform, generate AI outputs you request, authenticate you and secure your account, process payments and subscriptions, support you, improve the product using de-identified analytics, send service communications, and meet legal obligations. With your consent, we may also send marketing.

5. AI processing

Alira uses Anthropic’s Claude models via Anthropic’s paid API for generating AI outputs, and OpenAI’s API for generating embeddings used for memory and intent search.

·      We do not use customer data to train AI models, and will not do so unless you expressly agree otherwise in writing.

·      Under Anthropic’s paid-API terms, your inputs and outputs are not used to train Anthropic’s models and are not shared with other customers.

·      Under OpenAI’s standard API terms, your inputs are not used to train OpenAI’s models.

·      Anthropic and OpenAI process data in the United States and retain it only in line with their respective data processing terms.

See our AI Disclaimer for limits on AI outputs.

6. Sharing your information

We share personal information only with the sub-processors below, to comply with law, to protect rights or safety, or in connection with a corporate transaction. We do not sell your personal information.

·      Supabase (on AWS) — Database, file storage, authentication. Sydney, Australia (ap-southeast-2).

·      Anthropic — AI model processing (Claude), paid API. United States.

·      OpenAI — Embeddings for memory and intent search. United States.

·      Vercel — Application hosting and backend processing. Global (edge).

·      Pipedream — OAuth and third-party integrations. United States.

·      Firecrawl — Web search and content retrieval. United States.

·      Stripe — Payment processing and billing. United States.

By using Alira you acknowledge that information may be processed outside Australia by Anthropic, OpenAI, Vercel, Pipedream, Firecrawl and Stripe. Core customer database content is hosted in Sydney via Supabase. We rely on contractual data protection terms with each provider and take reasonable steps consistent with the APPs.

7. Data security

We implement reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure:

·      Encryption in transit (TLS 1.2+) and at rest (AES-256).

·      Australian-hosted core database (Supabase, ap-southeast-2).

·      Role-based access controls and least-privilege staff access.

·      Logging, monitoring and incident response.

See our Data & Security page for details.

If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

8. Data retention and deletion

We retain personal information only for as long as needed to provide the service, meet legal obligations, or resolve disputes.

On account cancellation, account-level data is deleted or de-identified within 90 days, except where retention is required by law (financial records, generally seven years). You may request earlier deletion of specific content at any time via hello@usealira.ai.

9. Your rights

Under the Privacy Act and APPs you may:

·      Access the personal information we hold about you.

·      Correct inaccurate or out-of-date information.

·      Withdraw consent for marketing.

·      Request deletion where we no longer have a lawful reason to keep it.

To exercise any right, email hello@usealira.ai. We respond within 30 days.

If you are a third-party individual whose data was input by an Alira customer, please contact that customer (the data controller) directly. We will assist them in responding.

10. Complaints

If you believe we have mishandled your personal information, contact hello@usealira.ai. We will investigate and respond within 30 days.

If you are unsatisfied with our response, you may complain to the OAIC at oaic.gov.au or 1300 363 992.

11. Relationship to our Terms

This Privacy Policy should be read together with our Terms and Conditions, which govern your use of Alira. If there is any inconsistency between this Privacy Policy and the Terms and Conditions, the Terms and Conditions prevail to the extent of the inconsistency.

12. Contact and updates

Luke David Morgan trading as Alira (ABN 73 121 725 408) Perth, Western Australia hello@usealira.ai

This policy is governed by the laws of Western Australia. Disputes are subject to the exclusive jurisdiction of the courts of Western Australia.

We may update this policy from time to time. The effective date above reflects the latest version. Material changes will be notified by email or in-app notice.