Privacy policy
How Mergical handles personal information collected through this website.
This is a structure with the right headings and honest placeholder text, not a finished policy. It is not legal advice and it has not been reviewed by a lawyer.
Every section below marked with a dashed box needs Rezz to fill in the real detail. This page must be finished before any Google Ads or Meta Ads traffic is sent to start.html, because that page collects personal details from Australians and both ad platforms require a working privacy policy. See DEPLOY.md.
Who we are
Mergical is an Australian business owned and operated by Reza Davaee. We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth) to the extent they apply to us.
Confirm the registered entity name and whether it is a sole trader or a company, and confirm the ABN. Confirm whether the Privacy Act applies to Mergical based on annual turnover, and if it does not, state that we choose to follow the Australian Privacy Principles anyway.
What we collect
Through this website we collect:
- Contact form. Your name, email address, phone number if you give one, and what you write about your business.
- Chat assistant. The messages you type. These are sent to our AI provider to generate a reply.
- Server logs. Standard request information kept by our hosting provider, including IP address, which is used to rate limit the contact form and the chat assistant so they cannot be abused.
We do not use tracking cookies or analytics on this site at the time of writing.
The moment the Google Ads or Meta Pixel tags in start.html are switched on, this section becomes wrong. Update it to describe the advertising cookies, what each platform collects, and how consent is obtained before anything fires.
How we use it
- To reply to your enquiry and arrange the free 30 minute call.
- To answer your questions through the chat assistant.
- To keep the website working and protect it from abuse.
We do not sell your information. We do not add you to a marketing list from a website enquiry.
Who else sees it
We use third party services to run this site and to reply to you. The relevant ones are our hosting provider, our transactional email provider, and the AI provider behind the chat assistant. Each only receives what it needs to do its job.
Name each provider explicitly once they are settled: the host (Cloudflare), the email provider, and the AI provider. State which country each stores data in, and note that the AI provider is used under business terms that do not permit your messages to be used for model training.
How long we keep it
Set a real retention period for enquiry emails and say it here. For example: enquiries kept for two years, then deleted. Also state how long chat messages are retained, which currently is only as long as the conversation is open in your browser, since nothing is stored on our side.
Security
The site is served over HTTPS. Enquiries go to an email account protected by multi-factor authentication. API keys are held as environment variables on the server and are never present in the code your browser downloads.
Access, correction and complaints
You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@mergical.com.au and we will respond within a reasonable time.
If you are not satisfied with how we have handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Add the response timeframe you are willing to commit to, and name a contact person for privacy enquiries.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date below.
Last updated
Put the real date here when the policy is finished, and update it whenever the policy changes.