Privacy Policy

1. Our Commitment to Privacy

All In Code Pty Ltd ("we", "us", "our") is committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use Echo at echo.allincode.com.au.

2. What Information We Collect

2.1 Information you provide directly

• Email address — used for authentication, scan results, and reports
• Business name — used to configure your tracking profile
• Business domain/website URL — used to run scans and detect mentions
• Business location — used to generate relevant local search queries
• Target queries — the search terms you want Echo to track
• Competitor names or URLs — used to generate competitor comparison data

2.2 Information collected automatically

• Scan results — AI engine responses and mention data collected during nightly scans
• Usage data — pages visited, features used, scan frequency
• Device and browser information — browser type, operating system, IP address
• Session data — authentication tokens and session identifiers

2.3 Information from your website

When you submit your website URL for scanning, Echo fetches your publicly accessible homepage to extract business information (name, location, services, meta data). We only read content that is publicly visible — we do not access any content behind a login or password.

2.4 Payment information

Payment details (card number, billing address) are collected and processed directly by Stripe. All In Code never sees or stores your full card details. We retain only a record of your subscription status and billing history.

3. How We Use Your Information

We use your information to:

• Provide and operate the Echo service
• Run nightly AI citation scans on your behalf
• Generate fix recommendations and reports
• Send you scan results, reports, and service emails
• Process your subscription payments
• Respond to your support requests
• Improve the Echo product and fix bugs
• Comply with our legal obligations

We do not use your information for advertising purposes. We do not sell your data to third parties.

4. How We Share Your Information

4.1 Service providers

We use trusted third-party services to operate Echo. These providers access your data only as necessary to perform their function:

4.2 Legal requirements

We may disclose your information if required by law, court order, or government authority.

4.3 Business transfers

If All In Code is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Storage and Security

Your data is stored on Supabase infrastructure with the following protections:

• Encryption at rest — all data encrypted using AES-256
• Encryption in transit — all connections use HTTPS/TLS
• Row Level Security — database-level isolation ensures you can only access your own data
• Access controls — staff access to production data is strictly limited

While we take reasonable steps to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

6. Data Retention

7. Cookies

Echo uses cookies and similar technologies to:

• Maintain your authenticated session
• Remember your preferences
• Analyse usage patterns to improve the service

We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling cookies may affect your ability to use Echo.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access your personal information — request a copy of the data we hold about you
• Correct your personal information — request correction of inaccurate data
• Delete your personal information — request deletion of your account and data
• Complain about our handling of your information

To exercise any of these rights, contact us at paul@allincode.com.au. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Children's Privacy

Echo is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us immediately at paul@allincode.com.au.

10. International Data Transfers

Some of our third-party service providers are based outside Australia. By using Echo, you consent to your information being transferred to and processed in countries outside Australia, including the United States. We only use providers who maintain appropriate data protection standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email to your registered address. The updated policy will be posted at echo.allincode.com.au/privacy with the revised date.

12. Contact Us

For any privacy-related questions, requests, or complaints:

All In Code Pty Ltd
ABN 19 572 050 865
Gold Coast, Queensland, Australia
paul@allincode.com.au
+61 416 355 322

For complaints not resolved by us, contact the OAIC:
Office of the Australian Information Commissioner
oaic.gov.au | 1300 363 992