Privacy Policy

1. Introduction

NAATIFY ("we", "us", or "our") is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our website and related services (collectively, our "Services").

We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where applicable.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. What is Personal Information?

In this Privacy Policy, "personal information" has the meaning given in the Privacy Act 1988 (Cth). Generally, it means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

3. Information We Collect

Depending on how you use NAATIFY, we may collect the following information.

Personal Information

We may collect:

• Full name
• Email address
• Password (stored securely using industry-standard hashing)
• Preferred language
• Account profile information

Practice Data

To provide our Services, we may collect:

• Audio recordings submitted during practice
• AI-generated transcripts
• Pronunciation analysis
• AI-generated scores and feedback
• Learning progress
• Assessment history

Payment Information

Subscriptions and payments are securely processed by Stripe.

We do not collect or store your credit or debit card details.

We may retain limited payment-related information, including:

• Subscription status
• Transaction reference
• Payment date
• Billing history

Technical Information

We may automatically collect information such as:

• IP address
• Browser type
• Device information
• Operating system
• Website usage information
• Log files
• Cookie information

Communications

If you contact us, we may retain copies of:

• Emails
• Customer support requests
• Feedback
• Other communications

4. How We Use Your Information

We use your personal information to:

• Create and manage your account.
• Deliver AI-powered practice sessions & mock test.
• Generate transcripts, pronunciation analysis, scores, and feedback.
• Track your learning progress.
• Process subscriptions and billing.
• Respond to customer enquiries.
• Provide technical support.
• Improve our Services and user experience.
• Maintain platform security.
• Detect, investigate, and prevent fraud or misuse.
• Comply with legal obligations.
• Send important services, security, and billing communications.

If you choose to receive marketing communications, we may also send newsletters, product updates, promotional offers, and other marketing materials. You may unsubscribe at any time using the unsubscribe link included in our emails.

5. AI Services

NAATIFY uses trusted artificial intelligence (AI) service providers to provide transcription, pronunciation analysis, language processing, scoring, and personalized feedback.

Your practice recordings and related content are processed solely for the purpose of providing the AI-powered features you request.

Where available, we use business AI services that do not use customer data to train or improve their general AI models.

AI-generated transcripts, pronunciation analysis, scores, and feedback are automatically generated and may not always be accurate. They are intended solely for educational and practice purposes and are not official for NAATI assessment results or professional advice.

6. Audio Recordings

Practice recordings are used only to provide speech transcription, pronunciation analysis, AI-generated scoring, and learning feedback.

Recordings are retained only for as long as reasonably necessary to provide our Services or until they are deleted in accordance with our retention practices or following account deletion, unless we are required by law to retain them.

7. Third-Party Service Providers

We use trusted third-party service providers to help us operate, maintain, secure, and improve our Services.

These providers may assist with services such as:

• Payment processing
• Artificial intelligence and language processing
• Cloud hosting and data storage
• Website analytics
• Email delivery and communications
• Customer support
• Security and fraud prevention
• Monitoring and system reliability

These providers receive only the information reasonably necessary to perform their services on our behalf and are required to protect your personal information in accordance with applicable privacy laws and their own privacy policies.

8. Disclosure of Personal Information

We may disclose personal information:

• To trusted service providers that assist us in operating our Services.
• Where required or authorised by law.
• To comply with legal obligations, court orders, or lawful requests from government authorities.
• To protect our legal rights, users, or the security of our Services.
• With your consent or where otherwise permitted by law.

We do not sell your personal information to third parties.

9. Business Transfers

If NAATIFY is involved in a merger, acquisition, investment, corporate restructuring, sale of assets, or other business transaction, your personal information may be transferred as part of that transaction, subject to applicable privacy laws.

10. Overseas Disclosure

Some of our service providers may process or store personal information outside Australia, including in the United States and other countries where they operate.

Where personal information is disclosed overseas, we take reasonable steps to ensure recipients protect your information in accordance with applicable privacy laws.

11. Cookies

We use cookies and similar technologies to:

• Keep you securely signed in.
• Maintain user sessions.
• Remember your preferences.
• Improve website functionality.
• Analyse website traffic.
• Enhance security.
• Improve overall user experience.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

12. Data Security

We implement reasonable technical and organisational security measures designed to protect your personal information, including:

• HTTPS encryption for data transmitted over the internet.
• Secure password storage using industry-standard hashing.
• Secure cloud infrastructure.
• User authentication and access controls.
• Protection against common web attacks.
• Rate limiting and abuse prevention.
• Regular monitoring and security reviews.
• Access to personal information on a need-to-know basis.

While we take reasonable precautions to safeguard your information, no method of electronic transmission or storage is completely secure.

13. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide our Services.
• Maintain your account.
• Comply with legal obligations.
• Resolve disputes.
• Enforce our agreements.
• Protect our legitimate business interests.

When information is no longer required, it is securely deleted or permanently de-identified where appropriate.

If you request deletion of your account, we will delete or de-identify your personal information within a reasonable period, except where we are legally required or permitted to retain certain information.

14. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Download or obtain a copy of your account data.
• Request closure of your account.
• Withdraw your consent to receive marketing communications.
• Update your account information.

To exercise these rights, please contact us at:

support@naatify.com.au

15. Data Breaches

If a data breach involving your personal information is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches Scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC), where required by law.

16. Privacy Complaints

If you believe we have not handled your personal information appropriately, please contact us.

We will investigate your complaint and respond within a reasonable time.

If you are not satisfied with our response, you may lodge a complaint with the:

Office of the Australian Information Commissioner (OAIC)
Website: https://www.oaic.gov.au

17. Children's Privacy

NAATIFY is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from anyone under 18.

If we become aware that personal information has been collected from an individual under 18, we will take reasonable steps to delete that information as soon as practicable unless we are required by law to retain it.

If you believe a person under 18 has provided us with personal information, please contact us at:

support@naatify.com.au

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page together with an updated Last Updated date.

Where required by law, we will notify registered users of significant changes by email or through our Services.

Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

19. Contact Us

If you have any questions about this Privacy Policy or our handling of your personal information, please contact us.

NAATIFY
Email: support@naatify.com.au

If applicable, you may also contact us using the business address published on our website.