Data Security & AI Compliance

At AI For Biz, we apply technical and operational safeguards to help keep your business data and customer conversations secure, private and handled in line with Australian requirements.

1. Data Encryption & Security

In transit: communication channels routed through our platform, including webchat, SMS, voice AI and social messages, are protected using industry-standard Transport Layer Security (TLS) encryption (version 1.2 or above).
At rest: client databases, CRM records and business knowledge bases are stored using industry-standard encryption (AES-256).
Workspace isolation: each client's CRM environment is provided as a separate, dedicated workspace with strict data partitioning. Your data is not visible to other clients.

2. Data Storage & Infrastructure Location

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

AI For Biz delivers its services through secure, enterprise-grade cloud infrastructure with data centres located in the United States. In line with Australian Privacy Principle 8 (APP 8) on cross-border disclosure of personal information, customer records and AI knowledge bases are stored on these US-based servers. Data is encrypted at rest and in transit regardless of geographic location, and our infrastructure providers are bound by contractual data processing obligations.

3. AI Data Privacy

Data isolation: your business data, pricing lists and customer chat histories are kept separate from other clients' data. Information you provide to configure your AI agent is used to deliver your service and is not shared with other clients.
Third-party AI providers: our AI features rely on enterprise-grade AI provider interfaces. Data processing by third-party AI providers is governed by the data processing terms in place with those providers.
Human-in-the-loop safeguards: business owners can monitor AI chat histories in real time. Your team can step in, take over live conversations, or override AI bookings through our mobile application.

4. Telecommunications & Anti-Spam Compliance

Our tools are designed to support compliance with Australian telecommunications law:

Spam Act 2003 (Cth): our messaging tools include automated opt-out handling (for example, "Reply STOP to opt out") to help your SMS and email campaigns meet Australian requirements. You remain responsible for having appropriate consent from recipients and for the content you send.
Do Not Call Register Act 2006 (Cth): you are responsible for ensuring your outbound calling lists comply with the Do Not Call Register rules. Our services must not be used for unauthorised cold calling or unsolicited messaging.
Recipients outside Australia: if you message or call people in other countries, such as the United States or Canada, you are responsible for complying with the laws that apply there.

5. Backups & Data Deletion

Backups: client data is backed up automatically on a regular basis to secure cloud servers to support disaster recovery. Backup copies may be kept for up to 12 months, as described in our Privacy Policy.
Deletion requests: you retain ownership of your data. You may request permanent deletion of your business data and all associated records at any time by contacting us. Verified requests will be actioned within 30 days, subject to the backup and legal retention periods in our Privacy Policy.

6. Contact & Compliance Enquiries

For any questions regarding our data security protocols or compliance frameworks, please contact us at aiforbiz.com.au/contact-us.