Privacy policy

1. Who we are, and what this covers

ECO Systems Holdings Pty Ltd is an Australian company at Suite 4360, 470 St Kilda Road, Melbourne VIC 3004. We build software platforms and run diagnostic and build engagements for businesses.

This policy covers ecosysai.app and the enquiries people send us through it. It covers nothing else. Fix Your Bill ↗ runs on its own domain under its own privacy policy, and that policy governs what it collects. What we hold once you become a client is governed by your engagement letter and the data handling statement issued with it, not by this page.

2. The standard we hold ourselves to

We hold ourselves to the Australian Privacy Principles in the Privacy Act 1988 (Cth). We have adopted them as our standard and we apply them to everything set out below.

3. What we collect, and why

Visiting a page. Two things happen. Our hosting provider receives what any web server receives: your IP address, the page you asked for, your browser and device type, and the site you came from. It holds that briefly to serve the page and keep the service secure. Google Analytics also records the visit, and that has a section of its own below.

Sending the contact form. The form asks for your name, your email address, your business name if you choose to give it, which of the three options you picked, and your message. It posts that to our server, which checks it and answers your browser. This site keeps no copy: there is no database behind it and nothing is written to disk. What reaches us reaches our mailbox as an email, and it sits there with the rest of our correspondence. We use it to read what you sent and to reply to you, and for nothing else. There is no marketing list, we do not sell or share what you send for advertising, and we do not build a profile of you.

Arranging a call. A call is arranged by email off the back of an enquiry. We take what you tell us so we can set a time and be useful when we speak. There is no booking tool on this site, and no calendar of yours that we can see.

Becoming a client. Work we do for you is covered by your engagement letter and by the data handling statement issued with it. Those documents, not this page, set out what we hold, where it sits, who can reach it and when it is deleted.

4. Analytics and cookies

We use Google Analytics 4, loaded through Google Tag Manager. It records the pages you view, your approximate location to city level, your device and browser, the site you came from, how far down a page you scroll, and clicks on links that leave the site. Google Analytics 4 anonymises IP addresses as part of how it works. We do not switch on Google Signals or any advertising feature, we run no remarketing, and none of it is tied to your name.

Google Analytics sets two cookies. _ga tells a returning visitor apart from someone who has not been here before, and _ga_<id> holds a session for this one property. Neither carries your name or your email address. They are the only cookies on this site: we set none of our own and we store nothing else in your browser. You can block them in your browser settings, or install Google’s opt-out browser add-on ↗, and the site works the same either way.

5. Where your information is held

These providers sit behind this site, and some of them hold information outside Australia. This is the whole list.

• Vercel, a United States company, hosts the site and holds its request logs. Pages are served from equipment in Sydney.
• Google, a United States company, holds the analytics data, and holds our mailbox through Google Workspace, so it holds anything you email us.
• Cloudflare, a United States company, answers domain name queries for ecosysai.app. The records resolve only, so your page requests do not pass through it.

There is no database behind this site, no account and no sign-in, so there is nothing else holding what you send.

6. How long we keep it

Analytics. Google Analytics 4 holds event data for two months, its default retention setting.

Enquiries. We keep an enquiry while we are in conversation with you, and for two years after the last message so we can pick up where we left off. Then we delete it.

Hosting logs. Our hosting provider holds request logs for a short period under its own retention settings, then discards them.

7. Artificial intelligence

Nothing you send through this site is used to train a model. Not your message, not your email address, not what you tell us on a call.

8. If something goes wrong

If personal information we hold is lost, or reached by someone who should not have it, and there is a real risk of serious harm to you, the Notifiable Data Breaches scheme obliges us to tell you and to tell the Office of the Australian Information Commissioner. We would do that. We would tell you what happened, what of yours was caught up in it, and what we are doing about it, in enough detail for you to act on. We do not publish a deadline we have not tested.

9. Access, correction and complaints

Email hello@ecosysai.app and ask what we hold about you, ask us to correct it, or ask us to delete it. There is no charge, and we answer within 30 days. If our answer does not satisfy you, take it to the Office of the Australian Information Commissioner at oaic.gov.au ↗, which handles privacy complaints against Australian organisations.

10. Children

This site is for businesses. We do not seek information from anyone under 18 and we do not knowingly collect it. If you believe a child has sent us something, email us and we will delete it.

11. Changes to this policy

When we change this policy we change the date at the top of the page. That date is the only claim this page makes about how up to date it is, and we keep it accurate.

12. How to reach us

Email hello@ecosysai.app, or use the contact form. ECO Systems Holdings Pty Ltd, ABN 24 697 054 327, Suite 4360, 470 St Kilda Road, Melbourne VIC 3004.