Privacy Policy

Last updated: 30 June 2026 · This policy is under legal review

QuoVio AI Pty Ltd ("QuoVio AI", "we", "us", "our") is committed to protecting your privacy and the privacy of the businesses that use our platform. This policy explains what information we collect, how we use it, where it is stored, and your rights under the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

It covers both visitors to our website at quovioai.com and customers who use the QuoVio AI platform (the "Platform").

1. Who we are

QuoVio AI Pty Ltd is an Australian proprietary company based in Victoria, Australia. We provide an AI-powered business intelligence platform that turns accounting and sales data into analytics, reports, and forecasts. Our contact point for privacy enquiries is [email protected].

2. Information we collect

  • Website enquiries: when you contact us or request a demo, we collect your name, business name, email address, and any message you send.
  • Account information: when you are set up as a Platform user, we hold your name, email address, login credentials, and assigned role.
  • Customer business data: to deliver the service, the Platform processes business data that a customer uploads or connects — for example, accounting exports from Xero, sales transactions, customer lists, and product data. This data is provided and controlled by the customer.
  • Technical logs: our hosting infrastructure records standard request metadata (IP address, browser type, pages accessed, timestamps) for security monitoring and service reliability.
  • Cookies: the Platform uses functional session cookies required to keep you securely logged in. We do not currently use marketing or advertising cookies.

3. How we use information

We use the information we collect to:

  • provide, operate, and secure the Platform;
  • generate the analytics, reports, and forecasts our customers ask for;
  • respond to enquiries and provide support;
  • administer accounts, billing, and our agreement with each customer;
  • maintain and improve the reliability and security of the service.

We do not sell personal information, and we do not use customer business data for any purpose other than providing and improving the service to that customer.

4. Customer data — our role

For business data uploaded or connected to the Platform, the customer is the owner and controller of that data, and QuoVio AI processes it on the customer's behalf to deliver the service. Each customer's data is logically isolated from every other customer's data. We do not disclose one customer's data to another customer, and we do not use it to build products for third parties.

5. Where your data is stored and processed

The Platform and customer business data are hosted in Australia, in the Sydney region of our cloud infrastructure provider. Data is transmitted over encrypted connections (HTTPS) and protected by access controls and per-customer isolation.

AI-powered features. Some Platform features (such as plain-English querying) send the text of your question and the relevant results to a third-party AI provider to generate a response. This processing may occur outside Australia. We limit what is sent to what is needed to answer the request, and our AI provider does not use this content to train its models. [Confirm exact provider, data flow, and cross-border wording with legal review before publishing — see note to Brendan.]

6. Disclosure and service providers

We do not sell, rent, or trade personal information. We share information only with service providers that help us operate the Platform, and only to the extent needed:

  • Cloud hosting (Australia): hosts the Platform and stores customer data in the Sydney region.
  • AI processing: powers plain-English querying and AI-generated insights (see section 5).
  • Email delivery: sends transactional and notification emails.
  • Accounting data source: where a customer authorises it, we connect to their accounting system (e.g. Xero) to import data.

Beyond these, we do not disclose personal information unless required or authorised by law.

7. Data security

We take reasonable steps to protect information from misuse, loss, and unauthorised access, including encryption in transit, access controls, per-customer data isolation, and regular backups. No method of transmission or storage is completely secure, but we work to protect your information using practices appropriate to its sensitivity.

8. Data retention

We retain customer business data for as long as the customer maintains an active service agreement with us, and for a reasonable period afterwards unless the customer asks us to delete it sooner. Website enquiry records are kept only as long as needed to respond and maintain a reasonable correspondence record.

9. Your rights

Under the Australian Privacy Principles you have the right to:

  • request access to the personal information we hold about you;
  • request correction of any inaccurate or out-of-date information;
  • request deletion of your personal information, subject to our legal obligations.

To exercise these rights, contact us at [email protected]. We will respond within a reasonable time, and within 30 days where practicable. If you have a concern about how we have handled your information, you may also contact the Office of the Australian Information Commissioner (OAIC).

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with a revised "last updated" date.

11. Contact

For any privacy enquiry, please contact [email protected].