Vertile.ai / Legal

Privacy Policy — Vertile AI Pty Ltd

Policies and terms presented as clear, readable source documents.

Document
Company privacy policy

Last updated: 16 July 2026

Vertile AI Pty Ltd (ABN 11 688 480 499) (“Vertile AI”, “Vertile”, “we”, “us”, “our”) is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains what information we collect, how we use and share it, and the choices you may have when you:

  • visit https://vertile.ai (the “Website”);
  • create an account or communicate with us; and/or
  • use our products, services, software, APIs, and integrations (collectively, the “Services” or “Platform”).

In this Privacy Policy, “personal information” generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Product-specific policies

Some Vertile products have additional privacy disclosures that apply to that product’s data practices. For the local Tokenless Playwright runtime, see the Tokenless Privacy Policy and the Tokenless Terms of Service. Where a product-specific privacy policy is more specific about that product’s local or Provider-page handling, that product policy controls for those practices.

1. The short version

  • We collect information you provide (like your name, email, and business details) and information collected automatically (like IP address and usage logs) when you use the Website or Services.
  • When you use integrations and connect third‑party services, we process information on your instructions to provide the Services (for example, to run workflows, send data between tools, and show logs or results).
  • We use information to operate, secure, support, and improve the Services, and to communicate with you.
  • We share information with trusted service providers who help us run the Services (hosting, analytics, payment processing, support). We do not sell personal information.
  • We may disclose information where required by law, to protect our users, or in connection with a business transaction (like a merger or acquisition).

2. What information we collect

The information we collect depends on how you interact with us.

2.1 Information from Website visitors

If you browse the Website, we may collect basic information that many websites collect, such as:

  • browser type and language preference;
  • device information and operating system;
  • referring pages and pages viewed;
  • date/time of requests; and
  • IP address and approximate location derived from IP address.

We may also collect information you choose to submit via the Website (for example, when you request a demo, subscribe to updates, or contact us), such as your name, email address, phone number, business information, and the content of your message.

2.2 Account, profile, and communications

If you create an account or contact support, we may collect:

  • name, email address, and contact details;
  • organisation and role information;
  • authentication-related information (for example, identifiers needed to sign you in);
  • support requests, feedback, and communications; and
  • preferences (for example, marketing preferences).

2.3 Platform, integration, and “Customer Data”

When you use the Platform (including integrations), we may process and store information you or your organisation provide, upload, generate, or transmit through the Services (“Customer Data”). This can include:

  • prompts or queries you submit and the resulting AI-generated outputs;
  • files or documents you upload or provide to the Platform;
  • configuration data for workflows and integrations;
  • metadata about integration connections (for example, which third‑party service is connected, timestamps, and status); and
  • logs relating to runs, errors, and performance.

Third‑party accounts and content. If you connect third‑party services (for example, via OAuth, API keys, or webhooks), we may process data from those services on your instructions. That data may include personal information of you or others, depending on what you connect and how you configure the integration.

AI and model improvement. We may use usage information (including logs and performance metrics) to secure, maintain, and improve the Services. We do not use Customer Data to train public models unless you explicitly consent. Where we use data for improvement, we aim to use aggregated or de‑identified information where appropriate.

2.4 Payment and billing information

If you purchase paid Services, payments are processed by third‑party payment processors. We may receive billing details and transaction metadata (for example, billing contact, plan, invoice history, partial card details like last four digits, and payment status), but we do not intentionally collect or store full payment card numbers ourselves.

2.5 Cookies, analytics, and similar technologies

We use cookies and similar technologies (such as local storage and pixels) to operate the Website/Services, remember preferences, improve performance, and understand usage. See Section 6 for more.

3. How we use your information

We use information we collect for purposes including:

  • Providing the Services (including running integrations and workflows on your instructions);
  • Account management (authentication, user support, responding to enquiries);
  • Billing and administration (payments, invoicing, customer relationship management);
  • Security and fraud prevention (monitoring, auditing, access control, abuse prevention);
  • Improving and developing the Services (debugging, analytics, feature development, quality assurance);
  • Communications (service messages, updates, and where permitted, marketing you can opt out of); and
  • Legal compliance (meeting obligations, resolving disputes, enforcing our terms).

Marketing choices. Where we send marketing communications, you can opt out at any time using the “unsubscribe” link in the message or by contacting us.

4. Our role (controller vs processor)

This section is provided to reflect common “integration service” privacy concepts. The labels may not apply in every jurisdiction, but they help explain how we handle data.

  • Customer Data. When we process Customer Data through the Platform (including via integrations), we generally do so on behalf of the customer (for example, your organisation). In this context, the customer determines what data is processed and how (subject to configuration), and Vertile acts as a service provider/processor.
  • Corporate data. When we collect information for our own business purposes (for example, to run the Website, manage accounts, billing, sales, or marketing), Vertile generally acts as the organisation responsible for that processing.

5. How we share information

We may share information as follows:

5.1 Service providers (subprocessors)

We may share information with third‑party vendors that help us operate and improve the Services, such as providers of:

  • cloud hosting and infrastructure;
  • databases and storage;
  • integration services (for example, workflow/integration providers we use to operate parts of the Platform);
  • analytics and performance monitoring;
  • customer support tooling;
  • email delivery and communications; and
  • payments, accounting, and invoicing.

These vendors are authorised to process information only as necessary to provide services to us and consistent with this Privacy Policy.

Depending on what we’re using at the time, examples of vendors may include cloud/infrastructure providers (such as AWS, Vercel, and Supabase) and integration/workflow providers (such as Pipedream).

5.2 Professional advisers

We may share information with professional advisers such as lawyers, auditors, and accountants where necessary for our legitimate business purposes.

5.3 Legal requirements and protection

We may disclose information if we believe in good faith that disclosure is reasonably necessary to:

  • comply with applicable laws, regulations, legal process, or lawful government requests;
  • protect the security or integrity of the Services;
  • prevent fraud or abuse; or
  • protect the rights, property, or safety of Vertile, our users, or others.

5.4 Business transfers

If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets, information may be disclosed as part of that transaction, subject to standard confidentiality protections.

6. Cookies and tracking

We use cookies and similar technologies for:

  • Essential operations (for example, authentication and security);
  • Preferences (remembering settings);
  • Performance and analytics (understanding how the Website/Services are used); and
  • Communications (for example, measuring email engagement where enabled).

You can manage cookies through your browser settings. If you disable cookies, some parts of the Services may not function properly. Where non-essential cookies or similar technologies require consent under applicable law, we will seek that consent through an appropriate mechanism when we implement it for the relevant region.

We do not currently respond to browser “Do Not Track” signals.

7. Data storage, security, and confidentiality

Your data may be stored in Australia and/or in locations where our service providers operate (for example, the United States or other regions). We use a combination of administrative, technical, and organisational measures designed to protect information against unauthorised access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is 100% secure.

If Vertile becomes aware of an eligible data breach involving personal information we hold, we will assess and respond in accordance with applicable law, including the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth) where it applies.

8. Data retention

We retain information for as long as reasonably necessary to:

  • provide the Services and maintain your account;
  • comply with legal and regulatory obligations;
  • resolve disputes; and
  • enforce our agreements.

Typical retention patterns (subject to change and legal holds) include:

  • Account and billing records — for the life of the account and a further period needed for tax, accounting, and dispute resolution;
  • Support communications — for as long as needed to resolve the enquiry and for a reasonable follow-up period;
  • Security and access logs — for a limited period needed to detect abuse, investigate incidents, and maintain platform integrity; and
  • Marketing preferences — until you opt out or we no longer run that campaign.

If you request deletion of your account or Customer Data, we will take reasonable steps to delete or de‑identify information, subject to legal retention requirements and legitimate security/audit needs (for example, retaining certain logs to detect fraud or ensure platform integrity).

Local-first products (such as Tokenless visible-session workflow data stored on your device) are governed by the relevant product privacy policy for deletion on your device.

9. International transfers

Where personal information is disclosed to, stored with, or processed by recipients outside Australia, we take reasonable steps to ensure the recipient handles the information in a manner consistent with the APPs (or as otherwise required by applicable law).

10. Your rights and choices

10.1 Australia

You may request access to, or correction of, personal information we hold about you. You may also request deletion where applicable. To make a request or complaint, contact us using the details in Section 12 (email subject: “Privacy request”).

We may need to verify your identity before acting on a request. We aim to respond within 30 days. We will not charge for making an access or correction request except where a charge is permitted by applicable law and disclosed in advance. If we refuse a request, we will explain the reason and available complaint mechanisms where required by law.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

10.2 Other regions

Depending on where you live, you may have additional rights in relation to your personal information (for example, rights to object, restrict processing, withdraw consent, or request deletion/portability). If such rights apply to you, contact us and we will respond in accordance with applicable law. We do not currently operate a dedicated EU/UK representative; if that changes, we will update this policy.

We do not use personal information for automated decision-making that produces legal or similarly significant effects about you without human involvement, except where required to operate account security or fraud controls you have requested.

11. Children’s privacy

Our Services are not intended for individuals under 18, and we do not knowingly collect personal information from children under 18. If you believe we have collected personal information from a child under 18, contact us and we will take reasonable steps to delete it.

12. Contact us

  • Privacy contact: Privacy Officer
  • Company: Vertile AI Pty Ltd
  • ABN: 11 688 480 499
  • Email: hello@vertile.ai
  • Website: vertile.ai
  • Location: South Australia, Australia

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Website and update the “Last updated” date above.

Where a change materially affects how we handle personal information, we will provide additional notice where practical and where required by law (for example, a website notice or email if we have your address) before the changed practice applies. If you do not agree to an update, stop using the affected Services and contact us to close any Account. Continued use after a stated effective date constitutes acceptance of the updated policy, except where applicable law requires a different form of acceptance.