Privacy Policy & Data Protection Framework

01. Australian Privacy Principles (APPs) Framework

Strivant Systems Pty Ltd ("Aizo", "we", "us", or "our") is an Australian proprietary company incorporated in New South Wales, Australia. We are committed to upholding the highest standards of data privacy and confidentiality.

We strictly comply with the Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs), the Telecommunications (Interception and Access) Act 1979 (Cth), and the Privacy Amendment (Notifiable Data Breaches) Act 2017 (Cth). This Privacy Policy sets out in a comprehensive and transparent manner how we collect, hold, process, disclose, and safeguard your personal information across our voice telephony services (+61 Australian lines), WhatsApp assistant, SMS gateway, web applications, and customer portal.

02. Categories of Information We Collect

We collect information only where reasonably necessary to provide our intelligent AI assistant and call screening platform. The categories of information collected include:

03. Zero AI Model Training Guarantee

Aizo was engineered from inception with strict data segregation principles. We recognize that personal communications, enterprise conversations, and financial receipts require absolute confidentiality.

• No Model Training: Your data is never fed into training sets for public foundation models (such as public LLMs, open-source weights, or commercial training pools).
• Isolated Inference: AI inference is stateless and ephemeral. The model processes the provided context window solely to generate the immediate requested outcome (e.g. screening a call or scheduling a reminder) and retains no residual memory of your data.
• Enterprise Confidentiality: All underlying AI compute gateways operate under enterprise zero-data-retention agreements conforming to Australian sovereign privacy requirements.

04. Purposes of Collection, Holding & Use

We collect and use personal information strictly for legitimate commercial and operational purposes, including:

• Provisioning dedicated Australian telephone lines (+61 numbers) and routing calls to your AI assistant.
• Screening incoming callers, taking structured messages, and dispatching instant summaries via WhatsApp and SMS.
• Storing, categorizing, and indexing your documents, receipts, tasks, and notes within your Pinboard and Vault.
• Enabling real-time natural language query and search across your stored records.
• Processing subscription billing, pro-rated refunds, top-ups, and sending tax invoices.
• Detecting, preventing, and mitigating fraudulent, abusive, or unlawful telecommunications activity.

05. Sovereign Australian Data Hosting & Storage

Data sovereignty is fundamental to our architecture. All primary databases, telephony relays, audio transcript archives, and document vault storage clusters are hosted in Tier III/IV data centres located in Sydney, Australia (leveraging AWS Asia Pacific Sydney and Google Cloud Australia regions).

Our infrastructure maintains SOC 2 Type II compliance, ISO/IEC 27001 certification, and aligns with the Australian Cyber Security Centre (ACSC) Information Security Manual (ISM) guidelines.

06. Security Architecture & Encryption Standards

We implement rigorous defense-in-depth technical and organizational security measures:

07. Data Retention & Cryptographic Purge Lifecycle

• User-Initiated Deletion: You can delete any individual conversation thread, audio recording, or pinboard item at any time. Deleted records are immediately subjected to cryptographic erasure from active production systems.
• Configurable Call Audio Retention: By default, raw audio waveforms are retained for 30 days before automatic purge, unless pinned to your permanent Vault by your instructions. Transcripts remain available in your portal until deleted.
• Account Termination: Upon account closure, all associated personal records and stored documents are permanently purged following a 30-day grace period, except where statutory retention is mandated by Australian tax or corporate law.

08. Disclosures to Third Parties

Strivant Systems Pty Ltd does not sell, rent, or trade your personal information to third parties or advertising networks. We disclose information solely to authorized service providers under strict confidentiality agreements for the following functions:

• Licensed Australian Telecommunications Carriers: For routing inbound and outbound voice calls and SMS across Australian networks under ACMA regulations.
• WhatsApp Business Infrastructure (Meta Platforms Ireland Ltd): For transmitting real-time assistant messages over your designated WhatsApp connection.
• PCI-DSS Compliant Payment Gateways (Stripe Payments Australia Pty Ltd): For secure tokenized credit card and direct debit processing.
• Law Enforcement & Legal Mandates: Where strictly required under valid Australian court orders, search warrants, or statutory notices issued by Australian law enforcement agencies.

09. Cross-Border Data Flows (APP 8)

While all primary storage is located in Australia, select transient AI inference or communications routing may utilize enterprise cloud gateways with global presence. In accordance with APP 8 (Cross-border disclosure of personal information), we take all reasonable steps to ensure that overseas recipients do not breach the APPs and process data under enforceable contractual standards matching Australian law.

10. Your Rights: Access, Correction & Portability

Under the APPs, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate, out-of-date, incomplete, or misleading information.
• Export your conversation records, audio transcripts, and vault files in standard formats (.json, .pdf, .csv).
• Opt out of any non-essential service notifications.

11. Notifiable Data Breaches (NDB) Scheme

We maintain an active security monitoring program. In the unlikely event of an unauthorized access, disclosure, or loss of personal information that is likely to result in serious harm (an "Eligible Data Breach" under Part IIIC of the Privacy Act 1988), we will promptly conduct an assessment, notify affected individuals, and report the breach to the Australian Information Commissioner in accordance with our statutory obligations.

12. Privacy Officer Contact & OAIC Complaints

If you have questions, feedback, or wish to lodge a privacy grievance, please contact our designated Privacy Officer:

We endeavor to investigate and respond to all formal privacy complaints within 30 days. If you are not satisfied with our resolution, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC):