Who we are
Datagras (Brand under Kekal Pty Ltd) is an Australian registered company headquartered in Victoria. We build enterprise AI accountability software, including SAVI (AI Spend Intelligence).
This Privacy Policy applies to your use of datagras.com and the product marketing site for SAVI (together, 'the Sites'). It explains what personal information we collect, why we collect it, how we store and protect it, and your rights as an individual.
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where you are a resident of New Zealand, we also respect the Privacy Act 2020 (NZ) and the Information Privacy Principles that apply to you.
What personal information we collect
We collect personal information only when you provide it to us voluntarily through the Sites. The information we may collect includes:
- Contact and demo enquiry form fields: full name, email address, phone number, company name, team size, estimated monthly AI spend band, country, role/job title, message content, and your marketing consent preference (opt-in checkbox).
- Newsletter subscription: email address only.
- Basic technical logs: IP address and user-agent string, collected automatically by our hosting provider (Cloudflare) as part of normal web infrastructure operation.
Why we collect personal information
We collect and use personal information for the following purposes:
- To respond to your enquiry or contact form submission.
- To provide a requested product demo, audit, or assessment.
- To send you product updates, newsletters, or marketing communications - but only where you have given us explicit consent (by ticking the marketing consent checkbox, or by subscribing to our newsletter).
- To improve the Sites and our services by understanding how visitors engage with our content.
Storage, security, and disclosure
All personal information submitted through our forms is stored in Cloudflare D1 (a serverless SQL database) on Cloudflare's infrastructure. Cloudflare operates globally, which means your personal information may be processed or stored on servers located outside Australia. We take reasonable steps to ensure that any overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles, as required by APP 8.
We do not sell, rent, or trade your personal information to third parties for their own marketing or advertising purposes. We do not use third-party advertising trackers or ad-network cookies on our Sites.
We may share your personal information with a limited set of trusted service providers, strictly for the purpose of operating the Sites:
- Cloudflare Inc. - hosting, infrastructure, and database services.
- Email delivery provider - for sending transactional and, where consented, marketing emails.
Your rights
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and - for New Zealand residents - under the Privacy Act 2020 (NZ), you have the following rights in relation to your personal information:
- Access: you may request a copy of the personal information we hold about you.
- Correction: you may ask us to correct personal information that is inaccurate, incomplete, or out of date.
- Deletion: you may ask us to delete personal information we hold about you, subject to any legal obligations we have to retain it.
- Complaint: you may make a complaint if you believe we have mishandled your personal information.
How to exercise your rights
To exercise any of the above rights, or to make a privacy complaint, please contact us by email at privacy@datagras.com. We will respond to your request within a reasonable time, and in any case within 30 days.
If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or - if you are a New Zealand resident - to the New Zealand Privacy Commissioner at privacy.org.nz.
Data retention
Contact form submissions are retained for as long as they are relevant to the enquiry or ongoing relationship. Once an enquiry is resolved and there is no ongoing relationship, we will delete the associated personal information within a reasonable time.
Newsletter subscriber email addresses are retained until you unsubscribe. Every marketing email we send includes an unsubscribe link.
Changes to this policy and contact
We may update this Privacy Policy from time to time to reflect changes to our practices or applicable law. We will flag material changes on this page, including updating the 'Last updated' date at the top.
For any privacy-related questions or concerns, please contact us at privacy@datagras.com.