Privacy Policy

Last updated · 20 May 2026

PassCtrl.AI ("we", "us", "our") respects your privacy. This policy explains what we collect, how we use it, and the rights you have under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. What We Collect

• Your name and email address
• Your business name and website URL
• The answers you provide in the readiness questionnaire
• Payment data — processed entirely by Stripe; we never see or store card numbers
• Usage analytics (page views, A/B variant) to help us improve the product

2. How We Use It

• To generate your AI readiness report
• To deliver your report by email
• To improve the assessment and the product over time
• To produce aggregate, de-identified analytics about how the product is used

3. Third-Party Services

We rely on a small set of trusted providers to deliver the service:

• OpenAI — generates the narrative analysis of your report
• Stripe — processes payments; cardholder data never touches our servers
• Resend — sends transactional emails
• Firecrawl — scans the public pages of the website you submit
• PostHog — product analytics for page views and A/B testing

4. Data Retention

Submissions and the reports generated from them are retained for two (2) years from the date of submission, after which they are deleted. You can request earlier deletion at any time — see section 5.

5. Your Rights

You have the right to access, correct, or request deletion of the personal information we hold about you. These rights are protected under the Privacy Act 1988 (Cth). To exercise them, email hello@passctrl.ai and we will respond within 5 business days.

6. Cookies

We use one cookie: passctrl_ab, which assigns you to an A/B test variant so we can improve the assessment flow. We do not use third-party tracking cookies, advertising pixels, or cross-site trackers.

7. Contact

Questions, requests, or complaints can be sent to hello@passctrl.ai. We respond within 5 business days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).