Privacy Policy

Last updated: 14 August 2026 · KOLO AUSTRALIA PTY LTD, ABN 73 652 827 337. We handle personal information under the Australian Privacy Principles. Plain language, no surprises.

1. What we collect

• Chat & lead details — what you tell our assistant: your name, company, industry, team size, needs, and your work email (verified with a code we send you).
• Account & billing — your plan and subscription status. Card payments go directly to Stripe; we never see or store card numbers.
• Instance operations — technical data about your instance: health checks, backup status, active user counts, and storage size. This is operational metadata; we don't browse the business records inside your Odoo.
• Email interactions — which lifecycle emails we've sent you and your unsubscribe status.

The landing page sets no tracking cookies and runs no third-party analytics. The chat keeps its transcript in your own browser tab.

2. How we use it

• To provide the service: build your demo, deliver credentials, keep the instance healthy, back it up.
• To email you about your trial and subscription — verification codes, credentials, a couple of trial-progress emails, expiry and billing notices. Every non-essential email carries a working unsubscribe link, and opting out stops all of them.
• To follow up on questions you asked us. We don't sell or rent your details, run ad retargeting, or send third-party marketing.

3. Who else touches your data

• Chat processing — messages you type to the assistant are processed by our AI providers (Anthropic, and/or Groq) to generate replies. Don't paste passwords or sensitive personal data into the chat.
• Stripe — payments, subscriptions, invoices (their privacy policy applies to card data).
• Resend — delivers our transactional emails.
• Cloud infrastructure (AWS) — hosts our servers, in the Australia region. Your Odoo instance and its database run in isolated containers, never shared with other customers.

4. How long we keep it

• Demo instances: deleted at expiry (72 h); a final backup is kept 7 days, then deleted.
• Instance backups: rolling 7 days.
• Lead and email records: kept while relevant to our relationship; ask and we'll delete them.
• Subscription/billing records: kept as long as Australian tax law requires.

5. Your rights

Email hello@erpforge.app to access, correct, export, or delete your personal information — we respond within 30 days, usually much faster. If you believe we've mishandled your information, contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

6. Security

Every instance runs in its own containers behind TLS, databases are never exposed publicly, access to servers is key-based, and backups run nightly. No system is perfectly secure — if a breach ever affects your data, we'll notify you promptly as the Notifiable Data Breaches scheme requires.

7. Changes and contact

If this policy changes materially we'll email subscribers before it takes effect. Questions: hello@erpforge.app.