PRIVACY POLICY

Fulcrum AI - Privacy Policy Last updated: 3 June 2026

This Privacy Policy explains how Cory Nathan, ABN 20 105 440 978, trading as "Fulcrum AI" ("we", "us", "our"), collects, uses, discloses and protects personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

By using the Service, you consent to the collection and use of your information as described in this Policy.

1. What we collect

Information you give us:

• Account details: name, email address, password (stored hashed by our authentication provider).
• Billing details: processed and stored by Stripe - we do not store full card numbers. We receive limited billing metadata (e.g. subscription status, last 4 digits, billing country).
• The website URL(s) and business information you submit for analysis.
• Any third-party account access you grant (e.g. Google Search Console via OAuth) and the data returned by those connections.
• Communications you send us (support emails, feedback).

Information we collect automatically:

• Usage data: log data, actions in the app, audit history.
• Technical data: IP address, browser/device type, timestamps.
• Cookies and similar technologies used for authentication and basic analytics.

Information from your connected sources:

• Publicly accessible content from the website(s) you submit (via automated crawling).
• Search performance data from Google Search Console where you have connected it.

2. How we use it

We use personal information to:

• provide, operate and deliver the Service (run audits, generate content, measure AI visibility);
• create and manage your account and authenticate you;
• process payments and manage your subscription (via Stripe);
• communicate with you about the Service, including service notices and support;
• improve and secure the Service, including using de-identified, aggregated data; and
• comply with our legal obligations.

We rely on your consent, the performance of our contract with you, and our legitimate business interests as the bases for handling your information.

3. AI processing and disclosure to third parties

3.1 To deliver the Service, content and data you submit (including website content and business information) are processed by third-party AI providers, including Anthropic (Claude) and Perplexity, and by our hosting and infrastructure providers. This processing happens so the AI agents can generate analysis and content for you.

3.2 We use the following categories of third-party service providers ("sub-processors"):

3.3 We do not sell your personal information.

3.4 We may disclose information where required by law, to enforce our Terms, to protect our rights or safety or those of others, or in connection with a sale or restructure of our business (subject to this Policy).

4. Overseas disclosure

Some of our providers store and process data outside Australia (including in the United States). By using the Service you acknowledge that your information may be processed overseas. We take reasonable steps to ensure providers handle information consistently with the APPs, but where information is held overseas it may be subject to foreign laws.

5. Data from Google Search Console

If you connect Google Search Console, we access your search performance data (such as impressions, clicks, queries and positions) only to generate your audits and reports. We use this data solely to provide the Service to you. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time via your Google account permissions or by disconnecting in the app.

6. Security

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access - including encryption in transit, access controls, and using reputable infrastructure providers. No system is perfectly secure; we cannot guarantee absolute security.

7. Retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for as long as reasonably necessary to meet legal, accounting or reporting obligations. You may request deletion (see clause 9). Some de-identified, aggregated data may be retained indefinitely.

8. Cookies

We use cookies and similar technologies for authentication, security, and basic analytics. You can control cookies through your browser settings, but disabling them may affect how the Service works.

9. Your rights

Under the APPs you may:

• request access to the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your account and associated personal information (subject to legal retention obligations); and
• withdraw consent or disconnect connected accounts at any time.

To exercise these rights, email admin@fulcrumai.com.au. We will respond within a reasonable time (and within timeframes required by the Privacy Act).

10. Complaints

If you believe we have breached the APPs, contact us at admin@fulcrumai.com.au. We will investigate and respond. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes

We may update this Policy from time to time. The "Last updated" date reflects the latest version. Material changes will be notified by email or in-app.

12. Contact

Email: admin@fulcrumai.com.au