Customer-facing notice | Global website and AI-generated services
Effective: 12 October 2026
HyndeAI (Pty) Ltd (Hynde AI), registered in Queensland, Australia, operates hyndeai.com and determines how customer personal information is used for its own services. Privacy enquiries, access/correction requests and complaints: support@hyndeai.com. Postal address: 21 Loowa St, Kallangur, QLD 4503, Australia. Where Hynde AI processes data only on a business customer's documented instructions, the business customer may be the controller and Hynde AI may be its processor.
Our services are intended for a global audience. Users under 18 should involve a parent or legal guardian. Hynde AI must implement appropriate age screening and parental authorisation where required by applicable law. We do not knowingly seek to collect personal information directly from children where lawful consent is absent. If we learn this has occurred, we will take appropriate steps to remove it and address the account.
We may collect: name, email, business name, account identifiers and contact details; billing and transaction references (payment-card details are handled by payment processors, not the company); support requests and correspondence; prompts, uploaded content, requested website copy, generated deliverables and feedback; IP address, device/browser details, security logs and cookie preferences; marketing preferences. Only collect categories actually used in production.
We use information to provide ordered digital products, create AI outputs, process payments, provide support, prevent fraud, secure accounts, manage customer relationships, comply with law and, where lawful, send marketing. For individuals in the EEA/UK, relevant legal bases may include contract necessity, legitimate interests, legal obligation and consent. Consent is used where required, especially for non-essential cookies and certain marketing. No purpose is a blanket permission to use private customer prompts to train public AI models.
Customer prompts and uploaded content may be transmitted to approved AI infrastructure vendors solely as necessary to produce requested outputs, subject to the actual vendor terms and settings. Do not upload third-party personal data or confidential information unless authorised. Hynde AI should configure data-retention, training opt-out and access controls with each vendor; actual settings must be verified and disclosed before launch. AI-generated outputs may contain errors and require human review before publication.
Information may be shared with contracted hosting/cloud providers, AI model/API providers, payment processors, email/customer-support services, analytics/cookie tools, security vendors and professional advisers where necessary. The current approved vendor list, functions, countries and data categories must be recorded in the accompanying Vendor & Subprocessor Register. Hynde AI does not sell personal information for money; any advertising disclosures or "sale/share" classifications under applicable state privacy laws must be assessed against actual tracking practices.
Because Hynde AI serves customers globally and may use overseas vendors, personal information may be transferred or accessed outside Australia. Before transfers, Hynde AI will assess applicable Australian Privacy Principle 8 obligations and, where required, EU/UK transfer safeguards such as adequacy arrangements or standard contractual clauses. Actual recipient countries must be added after vendor due diligence; they must not be guessed.
We use reasonable organisational and technical safeguards appropriate to the data, such as access controls, MFA, encryption in transit, secure credentials, vendor diligence, backups and incident procedures, as implemented. We retain account and order records for as long as needed for service, legal and accounting requirements; prompts and generated assets for the disclosed product retention period of 3 years; support logs for 1 year; cookie consent records for the initial period. Data is deleted or de-identified when no longer required, subject to lawful retention.
Depending on location and applicable law, customers may request access, correction, deletion, portability, restriction, objection to certain processing, withdrawal of consent and information about automated processing. Requests can be sent to support@hyndeai.com. We may verify identity and apply lawful exceptions. Australian individuals may seek access/correction and complain to the OAIC if unresolved. EEA/UK users may complain to their local supervisory authority where applicable.
Marketing messages will contain an unsubscribe option where required. Non-essential analytics, advertising and personalisation cookies will be disabled until valid consent where applicable; users can reject them as easily as accept them and change choices through a persistent "Cookie settings" link. See the separate Cookie Notice & Controls document.
If a data incident occurs, Hynde AI will investigate, contain and assess it, and notify regulators and affected people when required by the Australian Notifiable Data Breaches scheme or applicable overseas law. Privacy complaints should be sent to support@hyndeai.com; we aim to acknowledge within 5 business days and respond substantively within 30 calendar days, or explain delays.
We will post changes on hyndeai.com and notify users where legally required. External websites have their own privacy practices. This notice must be reconciled with the actual technology stack and data flows before publication.