Privacy Policy

1. Introduction

Hyperlex AI Pty Ltd ("we", "us", "our", or "Hyperlex AI") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our artificial intelligence platform for M&A due diligence automation.

This Privacy Policy complies with the Australian Privacy Principles under the Privacy Act 1988 (Cth), Australian Consumer Law, and applicable international privacy regulations including the General Data Protection Regulation (GDPR) where applicable.

By using our services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name, email address, and contact details
• Company name and professional information
• Account credentials and authentication information
• Payment and billing information
• Communication records and support interactions
• Professional qualifications and industry experience

2.2 Business Information

In the course of providing M&A due diligence services, we may process:

• Financial documents and business records
• Legal documents and contracts
• Corporate structure information
• Transaction-related documentation
• Due diligence reports and analyses

2.3 Technical Information

• IP addresses and device identifiers
• Browser type and operating system
• Usage patterns and interaction data
• System logs and error reports
• Cookies and similar tracking technologies

3. How We Collect Information

We collect personal information through:

• Direct interactions when you register, use our services, or contact us
• Document uploads and processing through our platform
• Automated technologies including cookies and analytics tools
• Third-party integrations and business partners (with your consent)
• Public sources where legally permissible
• Professional networks and referrals

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Service Provision

• Providing AI-powered due diligence analysis and reporting
• Processing and analyzing uploaded documents
• Generating insights and risk assessments
• Managing your account and user preferences
• Providing customer support and technical assistance

4.2 Business Operations

• Processing payments and managing subscriptions
• Communicating about service updates and features
• Conducting research and development to improve our services
• Training and improving our AI models and algorithms
• Ensuring platform security and preventing fraud

4.3 Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Protecting our rights and interests
• Responding to legal requests and court orders
• Preventing and investigating security incidents

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform, including:

• Cloud hosting and infrastructure providers
• Payment processing services
• Analytics and monitoring services
• Customer support platforms
• Security and fraud prevention services

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Investigate potential fraud or security incidents
• Respond to government or regulatory requests

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.

6. Data Security

We implement robust security measures to protect your personal information:

• End-to-end encryption for data transmission and storage
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• SOC 2 Type II compliance and certification
• Employee security training and background checks
• Incident response and breach notification procedures

While we implement industry-standard security measures, no system is completely secure. We cannot guarantee absolute security of your information.

7. International Data Transfers

Your personal information may be transferred to and processed in countries outside Australia, including the United States and European Union. When we transfer your information internationally, we ensure:

• Adequate protection through approved transfer mechanisms
• Compliance with Australian Privacy Principles
• Appropriate safeguards such as Standard Contractual Clauses
• Data processing agreements with international service providers

8. Your Privacy Rights

Under Australian Privacy Law and applicable international regulations, you have the following rights:

8.1 Access and Correction

• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Obtain a copy of your personal information in a portable format

8.2 Deletion and Restriction

• Request deletion of your personal information (subject to legal obligations)
• Restrict or object to certain processing activities
• Withdraw consent where processing is based on consent

8.3 How to Exercise Your Rights

To exercise your privacy rights, contact us at privacy@hyperlexai.com. We will respond to your request within 30 days and may require identity verification to process your request.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory obligations
• Resolve disputes and enforce our agreements
• Improve our services and AI model performance

Specific retention periods:

• Account information: Retained while your account is active plus 7 years
• Transaction records: Retained for 7 years for tax and audit purposes
• Support communications: Retained for 3 years
• Marketing data: Retained until you opt out or withdraw consent

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

10.1 Types of Cookies

• Essential cookies: Required for platform functionality
• Performance cookies: Help us analyze usage and improve performance
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Provide insights into user behavior

10.2 Managing Cookies

You can control cookie settings through your browser preferences or our cookie management tool. Disabling certain cookies may limit platform functionality.

11. Third-Party Services

Our platform may integrate with third-party services that have their own privacy policies. We are not responsible for the privacy practices of these third parties. We recommend reviewing their privacy policies before using their services.

12. Children's Privacy

Our services are designed for business use and are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Providing notice through our platform

Your continued use of our services after the effective date of the updated policy constitutes acceptance of the changes.

14. Complaints and Contact Information

14.1 Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

For official correspondence, please contact us via email at support@hyperlexai.comto obtain our registered office details.

14.2 Privacy Complaints

If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable privacy laws, you may file a complaint with us. We will investigate your complaint and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

EU residents may also contact their local data protection authority if they believe their GDPR rights have been violated.

15. Governing Law

This Privacy Policy is governed by the laws of Victoria, Australia. Any disputes arising from this Privacy Policy will be subject to the exclusive jurisdiction of the courts of Victoria.