Privacy policy

Who we are

Brain-Stem AI Pty Ltd (ABN 37 696 622 661) operates this website, brain-stem.ai. This policy explains how we handle personal information collected through the site, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If anything here is unclear, or you want to ask about your information, reach us through the contact page.

What we collect

Browsing

You can read every page of this site without telling us who you are. The site sets no cookies and loads no third-party trackers, advertising pixels, or social media embeds. The infrastructure that serves the site keeps standard technical logs (IP address, browser type, the pages requested, and when) which we use to keep the site secure and running.

Analytics

We measure how the site is used with an analytics tool we host ourselves, in Amazon Web Services' Sydney region, running in cookieless, anonymised mode. It counts pages and journeys in aggregate rather than identifying individuals, and its data stays on our infrastructure: nothing is shared with an analytics vendor, because there is not one. This is also why there is no cookie banner on this site: there are no tracking cookies to ask consent for.

Enquiries and briefings

When you send a message through the contact page or book a briefing, we collect what the form asks for: your name, your work email, your company (for a briefing), and what you write. The submission also records the page it was sent from, the page that referred you, and any campaign tags in the address you arrived on, so we know what prompted the enquiry. Our server records the sending IP address and browser identifier and uses them to filter spam.

The AI maturity assessment

Your answers to the assessment are stored so it can produce your result. You can complete it without identifying yourself. If you book a briefing from your result, that request is handled the same way as any other briefing, and it records the assessment as its origin.

Why we collect it

We collect personal information to:

• respond to your enquiry, or arrange the briefing you asked for;
• route your message to the right team;
• filter spam so the forms stay usable;
• understand, in aggregate, how the site is used and which campaigns bring people here;
• keep the site secure.

We do not sell personal information, and we do not share it with anyone for advertising.

Where it lives and who sees it

The site is delivered through a content delivery network; what you submit through a form is captured and stored in Amazon Web Services' Sydney region (ap-southeast-2). A form submission also sends an email notification to the relevant Brain-Stem inbox so a person can respond. Enquiries that clear our spam filter are recorded in our customer relationship management system, which is where our team works them. Beyond the providers that make those steps work, we disclose personal information only where the law requires it.

Some providers may process information outside Australia. Where that happens, we take reasonable steps to make sure it is handled consistently with the Australian Privacy Principles.

How long we keep it

We keep enquiry records while the conversation or relationship they belong to is live, and delete or de-identify them once they are no longer needed for the purpose they were collected for. Technical logs rotate on a short cycle.

The assessment is kept to three separate rules, because a single number would not be true of all of it. Your answers, and anything you write in your own words, are kept for 90 days after you finish and are then deleted. An assessment you start and do not finish expires 90 days after you last worked on it, and starts fresh rather than resuming after that. Your report is kept indefinitely, so a link to it keeps working: it holds your scores and your tier, never the answers behind them, and that is why it outlives them.

Access, correction, and complaints

You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it, through the contact page. We will respond within 30 days. If you believe we have mishandled your information and we cannot resolve it with you, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

When our practices change, this policy changes with them, and the date at the top moves. Significant changes will be called out on this page rather than made quietly.