FIND AI NOW PTY LTD
ABN 67 686 241 814 | ACN 686 241 814
Jurisdiction: Victoria, Australia
1. Who we are
This Privacy Policy explains how Find AI Now Pty Ltd ("Find AI Now", "we", "us") collects, uses, shares, and protects personal information when you use the Find AI Now platform.
2. Scope
This policy applies to anyone who:
- • browses public pages on the Platform
- • creates an account, lists a tool or service, saves favourites, or books demos
- • communicates with us or with Agencies through the Platform
- • pays for Platform features or otherwise transacts through the Platform
3. Key definitions
| Term | Definition |
|---|---|
| Personal information | information that identifies or can reasonably identify a person. |
| Sensitive information | special categories such as health or biometrics. We do not seek this by default. |
| Agency | a service provider listing services on the Platform. |
| Tool provider | a software provider linked from the Platform. |
| Buyer | a user evaluating or purchasing a tool or service. |
| Platform Messages | messages, forms, bookings, chats, comments, attachments, and CTAs on the Platform. |
| Controller / Processor | as used in GDPR. We usually act as a controller for Platform data. |
4. What we collect
4.1 Information you provide
- • Account and profile: name, email, password (hashed), organisation, role or industry, preferences
- • Listings and content you provide: tool or service details, pricing, images, videos, case studies
- • Messages and forms: enquiries, demo bookings, support requests, reviews
- • Payments: we receive limited billing metadata. Card data is handled by our payment processor
4.2 Information we collect automatically
- • Usage and device data: IP address, device and browser type, pages viewed, clicks, timestamps
- • Cookies and similar tech: essential, analytics, and marketing cookies (see section 9)
4.3 Information from third parties
- • Payment processor confirmations and fraud signals
- • Analytics and anti-abuse providers
- • Public or partner sources to verify businesses and listings
5. Why we collect it
| Purpose | Typical data | Legal basis |
|---|---|---|
| Operate the Platform, provide features, authenticate users | Account, usage, cookies | Contract, Legitimate interests |
| Host listings, enable enquiries, connect Buyers and Agencies | Account, listings, messages | Contract, Legitimate interests |
| Process payments, prevent fraud, manage invoices | Billing metadata | Contract, Legitimate interests, Legal obligation |
| Communicate updates, newsletters, promotions | Contact details | Consent (opt in) |
| Improve security and performance, debug issues | Usage, device, logs | Legitimate interests |
| Comply with law, enforce Terms and Commission Terms | Any relevant | Legal obligation, Legitimate interests |
You can withdraw marketing consent at any time using the unsubscribe link or account settings. Where we rely on legitimate interests, we conduct a Legitimate Interests Assessment (LIA) to balance our interests with your rights and freedoms.
6. Security
We apply reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls, and least-privilege practices. See our Data Security & Compliance page for more detail. Where an eligible data breach occurs under Australia's Notifiable Data Breaches scheme, we will notify affected individuals and the OAIC as soon as practicable.
7. Retention
We keep data only as long as needed for the purposes above or to meet legal obligations, then delete or de-identify it.
| Data Type | Retention Period |
|---|---|
| Account and profile | 5 years after last login |
| Transactional and invoices | 7 years for tax and accounting |
| Analytics | up to 24 months |
| Marketing consent records | 2 years after opt out |
| Logs and anti-abuse signals | up to 12 months |
| Aggregated or de-identified data | may be kept indefinitely |
8. Who we share with
Agencies you contact through the Platform so they can respond to your enquiry or booking
Infrastructure and hosting providers
Payment processors
Analytics and anti-abuse services
Professional advisers and authorities where required by law
For tool listings with outbound links, clicking through takes you to the tool provider's website. We do not share your personal information with tool providers when you click an outbound link. Their privacy policy applies on their site.
We require service providers to protect personal information and use it only for our instructed purposes.
9. Cookies and tracking
Essential cookies are required for core features and security.
Analytics cookies help us understand usage and improve the Platform.
Marketing cookies personalise content and measure campaigns.
Manage preferences at any time via the Cookie Preferences panel. Disabling non-essential cookies does not block core features.
In regions where consent is not required, analytics and marketing cookies are on by default, and you can switch them off at any time on the Cookie Preferences page or by choosing Reject Non-essential in the cookie banner. In the European Union, the European Economic Area, the United Kingdom and Switzerland, or where we cannot tell where you are, they stay off until you turn them on. If your browser sends the Global Privacy Control signal, we treat that as switching them off everywhere.
10. International transfers
Your information may be processed in countries outside your own. Where required, we use safeguards such as Standard Contractual Clauses or equivalent mechanisms, plus contractual and technical controls. For transfers between the EU and the UK we use the EU Standard Contractual Clauses and, where required, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs. Overseas recipients may not have laws equivalent to those in your country. We take reasonable steps to ensure overseas recipients protect your personal information in accordance with the Australian Privacy Principles.
11. Agency lead sharing and roles
When you send an enquiry or booking to an Agency through Platform Messages, we share your contact details and message with that Agency so they can respond. Find AI Now and the Agency act as independent controllers for this lead data unless we state otherwise. Agencies must maintain a clear and lawful privacy notice and handle personal information in compliance with applicable law.
For avoidance of doubt, this section does not apply to tool listings with outbound links. See section 8.
12. Your rights
Your rights depend on where you live, but may include:
- • access, correction, deletion
- • restriction or objection to processing
- • portability of certain data
- • withdrawal of consent for marketing
- • complaint to a regulator
Australia
Australian Privacy Principles apply. You may complain to the Office of the Australian Information Commissioner (OAIC) if unresolved.
EU or UK (GDPR)
You may exercise GDPR rights listed above and complain to your local data protection authority. Where we rely on legitimate interests, you may object and we will consider your objection.
California (CPRA)
You may request to know, access, correct, or delete certain information. You may opt out of selling or sharing personal information for cross-context behavioral advertising via the Cookie Preferences panel. We do not use or disclose sensitive personal information for inferring characteristics.
13. Profiling and automated decisions
We do not use automated decision-making that produces legal or similarly significant effects. We may tailor content or recommendations using preferences or analytics. You can adjust this via cookie settings and account controls.
14. Children
The Platform is not directed to individuals under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data, contact us and we will delete it.
15. How to exercise your rights
Email privacy@findainow.com with:
- • the right you wish to exercise
- • enough information to identify your account
- • proof of identity if requested
We aim to respond within 30 days. If we cannot verify your request, we may ask for additional information.
16. Seller responsibilities
Sellers that receive Buyer leads from the Platform (for example, Agencies) must:
- • maintain an up-to-date privacy notice and comply with applicable privacy laws
- • use lead data only to respond to the enquiry and deliver services
- • implement reasonable security and delete data when no longer needed, subject to legal obligations
Agency breach notification. Agencies must promptly (within 72 hours of becoming aware) notify Find AI Now at privacy@findainow.com of any personal data breach affecting leads received from the Platform, provide relevant details, and co-operate in any notifications required by law. Agencies must not notify affected individuals referencing Find AI Now without first consulting us, unless required by law.
17. Changes to this policy
We may update this Privacy Policy. For material changes we will post a notice on the Platform and, where practicable, email registered users at least 30 days before changes take effect. Continued use after the effective date means you accept the updated policy.
18. Contact
Privacy Officer: Nathan
Email: privacy@findainow.com
19. California Notice at Collection
We collect the following categories of personal information for the purposes described in this Policy: Identifiers (e.g., name, email), Commercial information (transactions, invoices), Internet or network activity (usage data, device info), Geolocation (coarse), Inferences (preferences), and Professional information (role). Sources include: you, your device/browser, and service providers (payments, analytics, anti-abuse). We sell/share personal information for cross-context behavioral advertising only via Marketing cookies, which you can disable in Cookie Preferences or via the Global Privacy Control (GPC) signal. Retention periods are listed in §7. We do not use or disclose sensitive personal information to infer characteristics.
20. Audits, free checks, reports and marketing emails
When you order or request one of our own products, such as the AI Search Visibility Audit, we collect your email address, your name if you give it, and the business details you enter (business name, website, area served, category and any competitors or notes). We use them to take payment, run the checks, prepare and review the report, send it to you, answer your questions and keep records for tax and consumer law purposes.
To run the checks we send the business name, website and area you gave us, and questions built from them, to AI and search providers, including OpenAI, Google, Anthropic, Microsoft and Perplexity. We do not send your email address or payment details to the providers that answer the questions. Our team also uses AI tools, including Anthropic's Claude, to analyse the results and draft your report. Those tools may process the order details you gave us (including your email address and any notes) for that purpose, and they are used under the providers' business terms. We do not send your payment details to them. Payments are processed by Stripe, which receives your payment details directly; we do not see your card number.
The free AI visibility check. When you ask for a free check, we collect your email address, the business name, its website, its suburb or city, what the business does, and whether you want tips by email. If you are not signed in, we email you a link: using it confirms your address, creates your account (or signs you in to the one you have) and starts the check. We use these details to run the check, show you the result, email it to you, apply the daily limits and count how many checks each advert brings. To run the check we send only what the business does and its area, as two questions a customer might ask, to ChatGPT (OpenAI), Gemini (Google) and Claude (Anthropic). We do not send them the business name, the website or your email address. Our own server reads the website's home page and its robots.txt file. The assistants' answers are reused for 7 days by checks for the same kind of business in the same area; they name businesses as they appear in public, never the person who asked. A security check from Cloudflare (Turnstile) runs on the form to stop automated requests, and we keep a one-way hash of your IP address with the request to apply the limits. Your checks stay on your account until you ask us to delete it, and a request whose email link is never used is deleted after 30 days.
Reports are kept so that you can open them again, and are available to anyone who holds your private link. We keep order and report records for up to seven years for tax and legal reasons. A report can be deleted earlier on request, but financial records must be kept.
We send you marketing emails about these products only if you ask us to (for example by ticking the box when you order). Every marketing email has an unsubscribe link, and you can also write to privacy@findainow.com. Emails about your order, such as receipts and the report link, are not marketing emails.
When marketing cookies are on (by default in regions where consent is not required, or once you accept them), we use the Meta Pixel and the TikTok Pixel in your browser, and Meta's Conversions API and TikTok's Events API from our server, to measure our advertising. When you start an order or pay for one, our server tells Meta and TikTok what happened (for example that an order was paid, and the amount). With it we send hashed copies of your contact details: your email address and, where we have them, your name and the city, state, postcode and country of your billing address. Hashing turns each detail into a fixed code, so Meta can match it to its own users without receiving the detail itself. TikTok receives only your hashed email address. We also send each platform's browser cookie and ad click IDs, your IP address and your browser type as they are, because they need them to match the event, and we keep them with your order record for that purpose. When you ask for a free check, our server tells Meta and TikTok in the same way, and again if its email link creates your account, with a hashed copy of your email address; the browser details sent with it are not kept with your check. If marketing cookies were off at the time, we send Meta and TikTok nothing about your order or your check. You can switch marketing cookies off in Cookie Preferences, or by using the Global Privacy Control signal.
21. Visits, accounts and Top Picks
When you visit. We record how the site is used so we can see which pages and sources help people find the right tools and experts. Where the rules of your region allow it, or once you accept analytics, this includes a random visitor ID and session ID stored in two cookies (fan_vid, which lasts up to 13 months, and fan_sid, which ends after 30 minutes without activity), your country and region taken from your connection (we do not store your IP address in these records), your device type, operating system and browser, where you came from and the first page you landed on, and what you do on the site: pages and tools you view, searches you run, tools and agencies you save, links you follow to a tool's website, and messages you start. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, we set none of this until you accept analytics. In other places it is on until you decline. If your browser sends the Global Privacy Control signal, we treat that as a decline everywhere. When you follow a link to a tool's website, or view a shared tool stack while signed out, we count it. Those two counters keep your IP address for 30 days, to avoid counting the same person twice, and then remove it.
If you have an account. We store your name and email, the answers you give to our questions (your stage with AI, your main goal, industry, company size, main blocker, what help you want, how soon, and your budget), and what you told us you came to do (find tools or experts, or list a tool or agency). We ask how you heard about us once, and we keep that answer as given and do not let it be changed afterwards, so that our figures stay honest. We use your answers to choose the six tools and agencies shown as your Top Picks. The picks are chosen by rules running on our own servers, using your answers and the information on each listing. They are not decided by an AI model, and your answers are not sent to one. We do not share your answers with a tool or agency. If you message an agency, they receive your name, your email and your message.
Who receives your data. Supabase hosts our database (in Sydney, Australia) and handles sign-in. Vercel hosts and serves the site from Sydney, San Francisco and London. Stripe processes payments. Anthropic, which is based in the United States, processes text you type into site search, the goal you type into the tool comparison box (with public details of the tools you chose, and nothing that identifies you), and the messages you write in AI mode on the search page, so it can write the replies. We do not store AI mode conversations: they are kept in your browser tab until you close it, and we count only how many messages you send so we can apply the daily limits. Your account answers and Top Picks are never sent with them. OpenAI, also in the United States, receives the text you type into site search so it can be matched against listings. For a free AI visibility check, OpenAI, Google and Anthropic receive only what the business does and its area, and our own server reads the business's website (section 20). This means some personal information is disclosed to recipients overseas, and for visitors in the EU and UK it is transferred internationally. We do not sell your data, and we do not use these records for advertising. Advertising measurement, if you accept the marketing category, is described in section 20 and in Cookie Preferences.
| What | How long we keep it |
|---|---|
| Activity records (pages and tools viewed, searches, saves, links followed, messages started) | 24 months |
| What you typed into search | 90 days |
| The raw browser details (user agent) on a visit record | 90 days. The rest of the visit record stays |
| Records from a browser that never signed in to an account | 13 months |
| Your IP address on the tool link and shared stack counters | 30 days, then removed |
| Your account, answers, saved lists and Top Picks | While your account is active, for the period in section 7, or until you ask us to delete it |
| Your free AI visibility checks and their results | With your account, as above |
| A free check request whose email link was never used | 30 days |
| The assistants' answers used by free checks (they name businesses, never the person who asked) | 90 days |
| A note that a privacy request was handled (no personal details) | Kept |
Your choices. You can download your data in Profile, under "Your data". You can correct your answers in Profile, under "Your answers" (the answer to how you heard about us cannot be changed). To delete your account and the data tied to it, email hello@findainow.com from the address on your account. We reply within 2 business days, and we finish the request within the time the law requires, which is 30 days at most. You can stop us recognising your browser by declining analytics in Cookie Preferences, or by turning on the Global Privacy Control signal in your browser; both take effect on your next page load. If you are not happy with how we handle your information, you can complain to the Office of the Australian Information Commissioner or, in the EU or UK, to your local data protection authority.
FIND AI NOW PTY LTD
ABN 67 686 241 814
ACN 686 241 814