Effective Date: 16 May 2026 · Antigravity Pty Ltd · privacy@zeai.com.au
Antigravity Pty Ltd operates the ZeAI / Xpert Sourcing platform. This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the platform, you acknowledge this policy.
| Category | Examples | Source |
|---|---|---|
| Account identity | Name, work email, agency name | You, at signup |
| Usage data | Pages visited, features used | Automatically collected |
| Platform content | Briefs, properties, invoices, AI conversations | You, during use |
| Technical data | IP address, browser type | Automatically collected |
We do not collect sensitive information (e.g. health data, financial account credentials, government identifiers) unless you voluntarily include it in your platform content. We do not store passwords — authentication is via magic link only.
Your clients' data. If you input personal information about your own clients, you are the data controller for that information. We process it on your behalf as a service provider.
We do not use your personal information to train AI models. AI processing via Google Gemini operates on your inputs at the time of your request only.
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| Supabase | Database | Sydney, AU | AU data residency |
| Vercel | Platform hosting | USA | Vercel DPA |
| Google (Gemini) | AI processing | USA / Global | Google Cloud DPA |
| Resend | Transactional email | USA | Resend DPA |
| Oracle Cloud | Disaster recovery backup | Melbourne, AU | AU data residency |
We do not sell personal information. We do not share it for third-party marketing. We may disclose it if required by Australian law or a regulatory authority.
Your platform data is stored in Supabase's Sydney (ap-southeast-2) data centre, with disaster recovery backup in Oracle Cloud Melbourne. All production and backup data remains in Australia.
Security measures in place:
In the event of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.
| Data type | Retention |
|---|---|
| Account and platform data | Subscription term + 30 days after termination |
| Audit logs | 7 years (legal compliance) |
| Disaster recovery backups | Up to 90 days after production deletion |
| Support correspondence | 3 years |
Under the Australian Privacy Act (APP 12), you have the right to:
Contact us at privacy@zeai.com.au. We will respond within 30 days. If unsatisfied, you may lodge a complaint with the OAIC at www.oaic.gov.au.
We use session cookies for authentication — these are strictly necessary and cannot be disabled without breaking the platform. We use aggregated, non-identifying analytics to understand platform usage. We do not use advertising cookies or cross-site tracking.
All platform emails are transactional (magic links, system notifications, invoices). They are not commercial electronic messages under the Spam Act 2003 (Cth). If we introduce marketing communications in future, we will obtain your express consent first and include a clear unsubscribe mechanism in every message.
We may update this policy from time to time. We will notify you by email and update the effective date. Material changes will be notified at least 14 days in advance.
Antigravity Pty Ltd
Privacy enquiries: privacy@zeai.com.au
General: support@zeai.com.au