Who this policy covers
LocallyAI operates under ABN 14 737 854 560. This policy applies when we collect or handle personal information through an enquiry, quote, order, installation, support request, complaint or another service we provide.
A customer's use of its own appliance is generally controlled by that customer. The customer decides who can use it, which documents are loaded, how long records are kept and whether a connected feature is enabled. Its own notices, policies and legal duties still apply.
This website
We do not currently run advertising trackers or website analytics cookies. The site's hosting and security services may still process an IP address, browser details, request time and similar technical metadata needed to deliver and protect the site.
The enquiry form asks for a name, business, phone or email and a short message. Your browser sends those fields to Web3Forms, which forwards the enquiry to our email. Web3Forms' current documentation says its servers are in the United States, that form submissions are processed and forwarded rather than stored as submissions, and that server logs containing personal information may be kept for up to two months.
Do not put passwords, recovery keys, health records or confidential client files in the public form. Email hello@locallyai.com.au first so we can agree on a suitable way to receive sensitive material.
What we may collect
- Contact and business details used to answer an enquiry, prepare a quote and manage a customer relationship.
- Order and account records such as quotes, accepted scope, invoices, payments, warranty and service history.
- Installation and support records including the approved configuration, authorised contacts, diagnostics, access logs and correspondence.
- Customer content only when it is needed and authorised for a scoped migration, support, testing, fine-tuning or other agreed service.
- Recording or transcript material only where the relevant people and organisation have authorised that handling.
- Feedback, complaint and incident information needed to investigate and respond.
We use this information to answer enquiries, quote and supply work, provide support, meet record-keeping duties, secure our services and deal with complaints or incidents. We do not sell personal information or add an enquirer to a marketing list they did not ask for.
The appliance privacy boundary
In the base offline configuration, prompts, documents, recordings and model inference remain on the customer's appliance. We do not receive those items merely because the customer uses the Harness.
Some work changes that boundary. Web research, Harness or model updates, an external integration, remote support and off-site fine-tuning can require a temporary connection or send approved data to another system. The quote and configuration record should identify each enabled exception.
Applying Harness updates needs a temporary connection while the update is fetched and checked. Normal local work returns to the appliance once the update is done.
Remote support and fine-tuning
Remote access occurs when the customer asks for or approves support. We limit the session to the work needed, avoid copying content unless it is necessary and authorised, and keep an appropriate service record.
Off-site fine-tuning or testing with customer content needs a separate written data schedule. It must name the authorised material, purpose, processing location, people or providers with access, security, retention, deletion and the rights attached to the deliverable. We do not reuse customer-specific confidential material for another customer or a general training dataset without separate informed written permission.
Who may receive information
We share only what is reasonably needed with authorised personnel and contractors; website, form, email, accounting, storage, support and security providers; hardware suppliers or repair providers; professional advisers and insurers; or a regulator, court or other person where law requires or authorises it.
Website, email, support and customer-enabled integration providers may process information outside Australia. Web3Forms is one current example. For a customer appliance, the agreed configuration should record the provider, data and country for each connected path.
Security, retention and deletion
We use controls suited to the information and work, which may include restricted access, multi-factor authentication for relevant business services, encryption, secure credential handling, backups, logging and incident response. No connected system can be promised completely secure.
We keep information while it is reasonably needed for the purpose, a support or warranty record, a complaint or incident, or a legal, tax, insurance or accounting requirement. Project copies and support diagnostics follow the written job scope. When information is no longer required, we take reasonable steps to delete or de-identify it, allowing for legal holds and normal backup ageing.
Access, correction and complaints
You can ask what personal information we hold about you, request a correction or raise a privacy complaint by emailing hello@locallyai.com.au. We may need to verify your identity and authority before giving access or changing a record. We will explain any lawful reason we cannot meet a request.
We use the Australian Privacy Principles as a practical baseline. Where the Privacy Act 1988 applies, rights and complaint routes under that Act remain available. If you are not satisfied with our response and the Act applies, you may be able to complain to the Office of the Australian Information Commissioner. NSW health information can involve a separate, fact-specific route.
Data breaches and significant decisions
We assess suspected privacy and security incidents promptly and follow the Notifiable Data Breaches scheme where it applies. Report an issue using hello@locallyai.com.au, without placing unnecessary sensitive information in the first message.
LocallyAI does not use website enquiry information to arrange a computer program to make a decision expected to significantly affect a person's rights or interests. A customer using AI in its own decision process needs its own assessment, oversight and notices. Relevant privacy-policy duties for covered automated decisions change from 10 December 2026; our general guide explains the change.
Changes and contact
We update this page when our business, providers or data handling changes. The review date above identifies the current version. A material new use of information needs its own lawful basis and notice; changing this page does not create permission by itself.
LocallyAI · ABN 14 737 854 560 · hello@locallyai.com.au