Legal

Privacy Policy

Last updated: 19 August 2026

GeckoAi respects your privacy and is committed to protecting the personal information we collect, hold, use and disclose.

This Privacy Policy explains how GeckoAi handles personal information in connection with our website, products and services, including Karli, our AI-powered business platform.

1. About GeckoAi

GeckoAi provides artificial intelligence software and related technology services to businesses. Our services include Karli, an AI-powered platform that enables organisations and their authorised users to interact with, search, analyse and work with business information.

For privacy enquiries, requests or complaints, contact:

GeckoAi
Email: damien@geckoai.com.au
Website: https://geckoai.com.au

2. Information we collect

Depending on how you interact with GeckoAi and Karli, we may collect or process information including:

  • your name, email address, telephone number, job title and organisation;
  • account and authentication information;
  • communications with GeckoAi, including enquiries and support requests;
  • information you or your organisation provide when using Karli;
  • prompts, queries and other content submitted through our services;
  • information retrieved from systems or data sources that your organisation chooses to make available to Karli;
  • technical information such as browser, device, IP address, access logs and service usage information; and
  • other information reasonably necessary to provide, secure, support and improve our services.

When Karli is provided to an organisation, that organisation determines what business information is made available to Karli and which users are authorised to access and use the service.

3. How we collect information

We may collect personal information:

  • directly from you;
  • from the organisation you work for or represent;
  • when you create or use an account;
  • when you communicate with us;
  • through our websites and services;
  • through systems and data sources that you or your organisation choose to connect or make available to our services; and
  • from service providers and business partners where appropriate.

Where practical, you may interact with us without providing personal information. However, some information may be necessary for us to provide particular services or respond to requests.

4. How we use information

We may use personal information to:

  • provide, operate and support GeckoAi products and services;
  • authenticate users and manage authorised access;
  • process requests and perform functions initiated by users;
  • enable Karli to retrieve, analyse and work with information made available to it by authorised users and organisations;
  • communicate with customers and users;
  • provide technical and customer support;
  • maintain the security, reliability and performance of our services;
  • investigate errors, misuse or security incidents;
  • improve and develop our products and services;
  • comply with applicable laws and legal obligations; and
  • protect the rights, property and security of GeckoAi, our customers and users.

5. Karli and artificial intelligence

Karli uses artificial intelligence to help authorised users interact with, search, analyse and work with business information.

Karli may process user prompts, queries and authorised business information to generate responses and perform functions requested by users.

The production Karli service uses Azure OpenAI services hosted in Australia for artificial intelligence processing.

Karli is designed to assist users by providing information and supporting business workflows. Karli does not make automated decisions that have legal or similarly significant effects on individuals.

Artificial intelligence-generated information may not always be complete or accurate. Users should exercise appropriate judgement when relying on AI-generated outputs.

6. Customer data

Customers retain responsibility for the information they choose to provide to, connect to or otherwise make accessible through Karli.

Where GeckoAi processes personal information on behalf of a business customer, we process that information for the purpose of providing the services requested by that customer and in accordance with applicable agreements and legal obligations.

Access to customer information is limited to authorised users, systems and service providers as reasonably necessary to provide, secure and support the service.

GeckoAi does not sell personal information.

7. Service providers and disclosure

GeckoAi uses third-party technology service providers where necessary to operate and provide our products and services.

Karli’s production environment is hosted on Microsoft Azure in Australia, including the storage and processing of customer data. Artificial intelligence processing is performed using Azure OpenAI services hosted in Australia.

We may also use service providers for functions such as authentication, security, monitoring, communications, customer support and other technology services required to operate our business.

Information is disclosed to service providers only where reasonably necessary for them to provide services on our behalf.

We may also disclose personal information:

  • where required or authorised by law;
  • in response to lawful requests from government, regulatory or law enforcement authorities;
  • where reasonably necessary to investigate fraud, security incidents or misuse of our services; or
  • where reasonably necessary to protect the rights, property or safety of GeckoAi, our customers, users or others.

GeckoAi does not sell personal information.

8. Data location and processing

Karli’s production environment is hosted in Microsoft Azure data centres in Australia.

Customer data stored by Karli is hosted in Australia, and artificial intelligence processing performed through Azure OpenAI is configured to occur within Australia.

GeckoAi uses appropriate technical and organisational controls designed to protect customer and personal information throughout its storage and processing.

GeckoAi does not transfer customer data outside Australia as part of Karli’s normal production storage or artificial intelligence processing.

9. Security

GeckoAi takes reasonable technical and organisational measures designed to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

These measures may include:

  • access controls;
  • authentication and authorisation controls;
  • encryption;
  • monitoring and logging;
  • infrastructure and application security controls; and
  • other security practices appropriate to the nature of the information and services involved.

While we take reasonable steps to protect information, no internet-connected service or method of electronic storage can guarantee absolute security.

10. Data retention and deletion

We retain personal information for as long as reasonably necessary to:

  • provide our products and services;
  • fulfil the purposes for which the information was collected;
  • meet our contractual obligations;
  • maintain appropriate business, operational and security records; and
  • comply with applicable legal requirements.

Information that is no longer reasonably required will be deleted, de-identified or otherwise handled in accordance with applicable legal obligations and our operational requirements.

Customers may contact GeckoAi regarding the deletion of information associated with their use of our services.

11. Access and correction

You may request access to personal information GeckoAi holds about you or ask us to correct information that you believe is inaccurate, incomplete or out of date.

To make a request, contact: damien@geckoai.com.au

We may need to verify your identity before processing a request.

In some circumstances, applicable law may permit or require us to decline an access or correction request. If this occurs, we will provide an explanation where required.

12. Privacy complaints

If you believe GeckoAi has mishandled your personal information or breached an applicable privacy obligation, please contact us at: damien@geckoai.com.au

Please provide sufficient information for us to understand and investigate your concern. We will review privacy complaints and respond within a reasonable period. If you are not satisfied with our response, you may have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC).

13. Cookies and website information

Our websites and services may use cookies and similar technologies to provide functionality, maintain sessions, understand service usage and improve the security and performance of our services.

You can control certain cookies through your browser settings. Disabling cookies may affect the availability or operation of some functionality.

14. Third-party systems and integrations

Karli may allow customers to connect, access or work with third-party applications, systems and data sources.

Customers determine which third-party systems and information they choose to make available to Karli and are responsible for ensuring they have the appropriate authority to do so.

Third-party services may have their own privacy policies and terms. GeckoAi is not responsible for the independent privacy practices of third-party services selected or controlled by a customer.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our products, technology, legal obligations or information-handling practices.

The current version will be published on our website and will identify the date on which it was last updated.

We encourage users to review this Privacy Policy periodically.

16. Contact us

For questions about this Privacy Policy, requests concerning your personal information, or concerns about GeckoAi’s handling of personal information, please contact:

GeckoAi
Email: damien@geckoai.com.au
Website: https://geckoai.com.au