Privacy Policy

We respect your privacy and are committed to protecting it. This Privacy Policy ("Policy") describes how Forensic Systems Analysis Pty Ltd (ABN 99 621 027 183), trading as SensorClean.ai ("we", "us" or "our"), collects, holds, uses and discloses your personal information through the sensorclean.ai website ("Website") and any related products and services (collectively, "Services"). It also describes the choices available to you regarding our use of your personal information and how you can access and correct it.

Our commitment to the Australian Privacy Principles

We are an Australian company. Although we may fall within the small business exemption under the Privacy Act 1988 (Cth), we have chosen to handle personal information in accordance with the Australian Privacy Principles ("APPs") set out in that Act. This Policy explains how we do so.

Where our Website is visited by people located in the European Economic Area or California, additional rights may apply under the General Data Protection Regulation ("GDPR") or the California Consumer Privacy Act ("CCPA"). These are described later in this Policy.

What personal information we collect

You can access and browse the Website without telling us who you are. The only personal information we collect through the Website is:

1. your name; and

2. your email address,

which you provide when you subscribe to our quarterly newsletter. We may also hold any personal information you choose to include if you correspond with us directly.

You can choose not to provide us with your personal information, but you will then be unable to subscribe to the newsletter. If you have any questions about this, you are welcome to contact us.

How we use your personal information

We collect, hold and use your personal information for the following purposes:

• to deliver our products and services;

• to run and operate the Website and Services;

• to respond to your enquiries;

• to send newsletters and other updates, where you have subscribed or would reasonably expect to receive them;

• to comply with our legal obligations.

We do not use personal information for purposes unrelated to those above without your consent, unless otherwise required or permitted by law.

Marketing communications and the Spam Act

Our newsletter and any marketing emails are sent in accordance with the Spam Act 2003 (Cth). This means:

• we only send marketing communications to people who have subscribed, consented, or with whom we have an existing business relationship such that the communication would reasonably be expected;

• every marketing email identifies us as the sender and includes our contact details;

• every marketing email contains a functional unsubscribe facility.

You may unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly. Once you unsubscribe, your email address will be removed from our mailing list.

Disclosure of personal information

We do not sell personal information, and we do not share personal information with unaffiliated third parties for their own marketing purposes.

We may disclose personal information to service providers we rely upon to operate the Website and Services — such as website hosting, email, document storage and email marketing platforms. These service providers are only given the information they need to perform their designated functions, and they are not authorised to use or disclose your information except as necessary to perform services on our behalf or to comply with legal requirements.

We may also disclose personal information if required or permitted by law — for example, to comply with a subpoena or similar legal process, or where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a lawful government request.

Overseas disclosure

Some of the service providers we use — including website hosting and cloud productivity platforms — store data on servers located outside Australia, including in the United States. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the recipient handles the information in a manner consistent with the Australian Privacy Principles, including by selecting reputable providers that are subject to privacy and data protection frameworks in their own jurisdictions.

Retention of personal information

We retain your personal information only for as long as it is needed for the purposes for which it was collected, to comply with our legal obligations, to enforce our agreements and to resolve disputes. If you subscribe to our newsletter, we retain your email address until you unsubscribe.

When personal information is no longer required, we take reasonable steps to destroy it or ensure it is de-identified. We may continue to use aggregated, de-identified data that cannot reasonably identify you.

Security of personal information

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. This includes administrative, technical and physical safeguards appropriate to the nature of the information.

However, no data transmission over the Internet can be guaranteed to be completely secure. While we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.

Notifiable data breaches

We are committed to responding to data breaches in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner ("OAIC") as required by law, and we will take reasonable steps to contain and remediate the breach.

Access and correction

You have the right to request access to the personal information we hold about you, and to request that it be corrected if it is inaccurate, out of date, incomplete or misleading. To make a request, please contact us using the details below. We may ask you to verify your identity before responding to your request. We will respond within a reasonable period and, in most cases, will not charge a fee for access.

Cookies, analytics and social media features

The Website may use cookies and similar technologies to support basic functionality and to help us understand how the Website is used. Our Website may also include social media features, such as sharing buttons. These features may collect your IP address and the page you are visiting, and may set a cookie to function properly. Your interactions with these features are governed by the privacy policy of the respective provider.

The Website may contain links to external resources that are not owned or controlled by us. We are not responsible for the privacy practices of those resources, and we encourage you to read the privacy statements of any website you visit.

Some browsers incorporate a "Do Not Track" feature. As there is not yet a uniform standard for interpreting these signals, the Website does not currently respond to Do Not Track signals. We nonetheless limit our collection and use of personal information as described in this Policy.

Privacy of children

Our Website and Services are directed at businesses and professionals, and we do not knowingly collect personal information from children under the age of 18. If you believe that a child has provided personal information to us, please contact us and we will take reasonable steps to delete it.

Additional rights for visitors in the European Economic Area

If you are located in the European Economic Area, the GDPR provides you with certain rights in relation to your personal data, including the right to:

• access the personal data we hold about you and obtain a copy of it;

• have inaccurate or incomplete personal data corrected;

• request erasure of your personal data in certain circumstances;

• restrict or object to the processing of your personal data in certain circumstances;

• receive your personal data in a structured, commonly used and machine-readable format (data portability);

• withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing before the withdrawal;

• lodge a complaint with your local data protection authority.

Where we process personal data of individuals in the EEA, we do so on the legal bases of consent, performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and promoting our business.

Additional rights for California residents

If you are a California resident, the CCPA provides you with certain rights, including the right to request information about the categories and specific pieces of personal information we have collected about you, the right to request deletion of your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. We will not discriminate against you for exercising your rights under the CCPA.

How to exercise your rights

Requests to exercise any of the rights described in this Policy can be directed to us using the contact details below. We may ask you to verify your identity before responding, and where a request is made by an authorised representative, we may request evidence of their authority. Please include sufficient detail to allow us to properly understand and respond to your request.

Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first using the details below. We take complaints seriously and will investigate and respond within a reasonable period.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner:

• Website:www.oaic.gov.au

• Phone: 1300 363 992

If you are located in the EEA, you may instead lodge a complaint with your local data protection authority.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the updated date at the bottom of this page and, where the changes are material, we may provide additional notice such as through the contact information you have provided. We will not use your personal information in a manner materially different from what was stated at the time it was collected without your consent.

Contacting us

If you have any questions, concerns or complaints regarding this Policy or the personal information we hold about you, or if you wish to exercise your rights, please contact us:

Forensic Systems Analysis Pty Ltd (trading as SensorClean.ai)

ABN 99 621 027 183

https://sensorclean.ai/contact

We will make every reasonable effort to resolve complaints and honour your requests as quickly as possible, and in any event within the timescales provided by applicable privacy laws.

This document was last updated on 2 July 2026.