Privacy Policy

Who we are

This website is operated by Crux Labs Pty Ltd (ACN 695 264 629), a software firm based in Melbourne, Victoria, Australia (“Crux Labs”, “we”, “us”). We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy applies to information we collect through cruxlabs.com.au, including our AI Workflow Sprint pages, and when you contact us directly. It does not cover third-party websites we link to, which have their own policies.

Information we collect

We only collect what we need to respond to you and run our business.

Our contact form. When you submit it or email us, we collect the details you provide: your name, email address, phone number, your industry, what you need, and what you tell us about your business.

AI Workflow Sprint applications. When you apply, we collect your name, work email, mobile number and business website (optional). We also collect your answers about the business: what it does, how many people work in it, its approximate annual revenue, its most repetitive task and the hours it takes each week, whether you have tried AI tools, and whether you make the decision on the spend. We use these answers to judge whether the Sprint is a fit.

How you arrived. When you arrive on our site from an ad, a tagged link or another website, we keep a short record of how you got there: your first visit, and your latest visit from an ad or tagged link. We send it with your enquiry or application. The cookie section below explains when each part is set and what it holds. With a Sprint application we also store your browser’s user agent, the short line your browser sends that names the browser and device type.

Information collected automatically. Like most websites, our hosting provider records standard technical data such as your IP address, browser type, and the pages you visit, in server logs used for security and reliability. We do not use this to build advertising profiles.

We do not knowingly collect sensitive information (such as health, financial, or government identifiers) through this website. Please do not include sensitive information in your enquiry.

How we use your information

We use your information to:

• respond to your enquiry and provide the information you asked for;
• assess a Sprint application and reply to it;
• scope, quote, and deliver work if we go on to work together;
• send you a confirmation that we received your message or application;
• understand which of our ads and links bring enquiries, so we spend on the ones that work;
• keep records, and improve our website and services;
• meet our legal and regulatory obligations.

We will only use your information for a purpose you would reasonably expect, or for a related purpose, unless you have consented otherwise or the law requires or permits it. We do not send marketing emails without your consent, and any that we do send will include an easy way to opt out.

How we store and protect it

Our website, and the database that stores the enquiries and applications you submit, are hosted by DigitalOcean on servers in Sydney, Australia. Encrypted backups of that database are kept in DigitalOcean Spaces, also in Sydney. Transactional emails (your confirmation and our internal notification) are sent through Resend. These providers act as our service providers and process data on our behalf under their own security and privacy commitments.

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, including encryption in transit, access controls, and limiting who can see enquiry data to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Sharing and disclosure

We do not sell your personal information. We share it only with the service providers named above so they can perform their function, and where we are required or authorised by law, or to protect our rights, safety, or property.

Overseas disclosure

Some of our service providers store or process data on servers located outside Australia. Where that happens, we take reasonable steps to ensure the information is handled consistently with the APPs. By submitting your information, you consent to this handling. If you would like to know more about where your data may be processed, contact us using the details below.

Cookies and tracking

We keep this simple. Crux Labs does not use advertising or third-party tracking cookies, and we do not run analytics that profile you across the web. Our site may set strictly necessary cookies required for security and basic functionality.

Two first-party cookies. cl_attr and cl_attr_paid are set when a page on cruxlabs.com.au loads and the link you arrived by carries campaign tags or an ad click id, or you came from another website (such as a search engine). A visit typed in directly, or a click from one of our own pages to another, sets nothing. Each holds the campaign tags in the link (UTM source, medium, campaign, content and term), the ad click id if there is one (Google’s gclid, gbraid or wbraid, or the fbclid that Facebook and Instagram ads add), the page you landed on, the website that referred you, which version of a Sprint page you saw, and the time. cl_attr records your first visit, and later visits do not overwrite it. cl_attr_paid records your latest visit from a link with campaign tags or an ad click id, and the next such visit replaces it, so an ad you click after first finding us through a search is not lost. We keep the same records in your browser’s local storage, and each record is kept for 90 days from when it was set. They stay in your browser unless you send our contact form or a Sprint application: then both are sent with it, together with the ad page that sent you to the form if there was one, so we know what brought you. We do not share them with advertisers or any other third party, and no advertising pixel or third-party script runs on our pages.

You can control or clear cookies and local storage through your browser settings. Blocking them does not stop you contacting us or applying.

How long we keep it

We keep enquiry and application information for as long as needed to respond to you, to manage any resulting relationship, and to meet our legal and record keeping obligations. When we no longer need it, we take reasonable steps to delete or de-identify it.

Your rights

Under the Australian Privacy Principles, you can:

• ask what personal information we hold about you and request access to it;
• ask us to correct information that is inaccurate or out of date;
• ask us to delete information where we are not required to keep it;
• withdraw consent to marketing at any time.

To make a request, email hello@cruxlabs.com.au. We will respond within a reasonable time and may need to verify your identity first.

Children’s privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children.

Complaints

If you believe we have mishandled your personal information, please contact us first so we can put it right. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the “last updated” date at the top. Significant changes will be reflected here.

Contact us

Crux Labs Pty Ltd, Melbourne, Victoria, Australia.
Email: hello@cruxlabs.com.au
Phone: +61 450 046 310