Privacy Policy

Aquafruit Media Pty Ltd (ABN 72 126 463 434)

Registered office: Suite 151, 139 Cardigan Street, Carlton VIC 3053, Australia

Contact: [email protected]

This Privacy Policy explains how Aquafruit collects, uses, discloses and protects personal information through the aquafruit.io website — including the contact form, the Talora AI chat assistant, and site analytics.

Scope. This policy covers visitors to the aquafruit.io website — enquiries and contact form submissions, Growth Audit requests, and Talora interactions on this website. It does not cover platform or account data held in the Aquafruit Growth Engine client platform.

If you are a Growth Engine customer, or your organisation submits data into the platform, that processing is governed by the separate Growth Engine Privacy Policy, with the subscription itself governed by the Growth Engine Subscription Terms.

Contact form. When you submit our contact form, we collect your name, email address, and the content of your message.

Talora chat interactions. When you talk to Talora, our AI assistant, we collect:

• The full text of your messages and Talora's replies (conversation transcripts).
• A per-session identifier and timestamp for each message.

Talora is instructed not to collect payment details, credentials, or identity-document information. Please don't paste this kind of information into the chat.

Site analytics. Once you've given cookie consent, we collect aggregate usage data — page views, scroll depth, and similar — through Google Analytics 4. Analytics does not load before consent is granted.

Growth Audit and enquiry requests. If you request a free Growth Audit or similar review, we collect what you provide us to prepare and deliver it (typically your name, email, company, and information about your business), and use it to follow up and, where you've agreed, to send related marketing communications. You can unsubscribe at any time.

We use this information to: operate and improve the website and Talora; respond to your enquiries; prepare and deliver Growth Audits; send marketing communications where you've opted in; understand how the site is used; and meet our legal obligations.

Data in transit is encrypted (TLS 1.2 or above). Access to contact form submissions, Talora transcripts and site administration is restricted to authorised Aquafruit staff and is logged. Full detail on our security practices is available on our Security page.

We use a limited number of vetted third-party subprocessors to operate this website, including:

• Zoho CRM — to store and manage contact form submissions and enquiries.
• Lovable AI Gateway and Google Gemini — to power Talora's responses and AI-assisted article generation.
• ElevenLabs — text-to-speech and speech-to-text for Talora voice features.
• Google Analytics 4 — for aggregate site analytics, loaded only after consent.
• Google Ads — for conversion tracking and remarketing, loaded only after consent.

We do not sell your personal information. We do not use identifiable Talora conversation data to train third-party foundation models. The complete, current subprocessor list — including purpose, data categories and processing location for each — is published on our Subprocessors page.

Where Talora is enabled with voice input or voice output, additional processing applies on top of the text-based handling described above. Voice features only activate when you explicitly initiate them (for example, by holding the microphone button in the chat widget) and stop when you end the interaction.

• Microphone capture. A short audio clip of your speech is captured in your browser only while you are actively recording. Aquafruit does not open your microphone in the background and does not record ambient audio.
• Speech-to-text. The audio clip is transmitted over an encrypted connection to our voice processor, ElevenLabs, for transcription. The resulting text is treated as a Talora chat message.
• Voice synthesis. Talora's text replies may be sent to the same processor to be synthesised into speech and streamed back to your device.
• Retention. Aquafruit does not store raw audio recordings. Only the transcribed text and the corresponding Talora reply are retained, on the same basis as other Talora chat interactions.

Consent and third-party voices. You should only use voice features to share information you are entitled to share. In Victoria and other Australian states, laws such as the Surveillance Devices Act 1999 (Vic) may require the consent of all parties to record a private conversation. Do not hold a voice conversation with Talora that captures another person's voice, or discuss identifiable third parties, without their knowledge and consent. Before your first voice session in the chat widget, we ask you to confirm this consent notice.

Your rights. You can continue to use Talora entirely by text at any time. Access, correction and deletion rights apply equally to any transcript created from a voice interaction.

• Talora chat transcripts are retained for 12 months from the date of the conversation, then automatically deleted — unless a specific conversation needs to be kept longer for an active dispute or security investigation.
• Contact form and enquiry data is retained for as long as needed to respond to you and, where you've consented to marketing, until you unsubscribe or ask us to delete it.
• Analytics data is retained in accordance with Google Analytics' standard retention settings.

Once a retention period expires, the data is deleted and cannot be recovered.

Under the Australian Privacy Principles, you have the right to:

• Ask what personal information we hold about you and request a copy.
• Ask us to correct information that's inaccurate or out of date.
• Ask us to delete your personal information (including Talora transcripts), subject to any legal obligation we have to keep it.
• Withdraw consent to marketing communications at any time.
• Lodge a complaint with us, or with the Office of the Australian Information Commissioner (OAIC), if you're not satisfied with how we've handled your information.

To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days.

This website uses cookies for two purposes:

Strictly necessary — to run the site correctly (e.g. maintaining your session, remembering cookie preferences). These don't require consent.

Analytics — Google Analytics 4, used to understand how visitors use the site. This only runs after you've given consent via our cookie banner, and you can withdraw that consent at any time through your cookie preferences or your browser settings.

We also use cookies for advertising and remarketing — specifically Google Ads conversion tracking, which connects Google Ads campaign activity to actions taken on this site. Like Analytics, these tags only load after you've given cookie consent via our cookie banner, and you can withdraw that consent at any time through your cookie preferences or your browser settings. See our Subprocessors page for full detail.

This site does not respond to "Do Not Track" browser signals.

Where a data breach involving your personal information is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner, in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Some of our subprocessors are located overseas (see our Subprocessors page for details); where your data is transferred outside Australia, we take reasonable steps to ensure it continues to be protected consistently with the APPs.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page. We recommend checking back periodically.

Questions about this Privacy Policy, or requests relating to your personal information, can be sent to:

Aquafruit Media Pty Ltd
Suite 151, 139 Cardigan Street, Carlton VIC 3053, Australia
Email: [email protected]