ConsentIQ · Legal

    Privacy Policy

    Last updated:

    This policy explains what personal information ConsentIQ collects, why, and how we protect it, in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

    1. Who this policy covers

    • Members: people who create an account and pay for a ConsentIQ subscription.
    • Participants: people who join a consent session by scanning a member's QR code or opening their link. Participants don't need an account.
    • Visitors to our website.

    2. What we collect

    From members

    • Name, email address and login details.
    • Phone number, if you give one.
    • Subscription and billing records. Card payments are handled by Stripe; we never see or store your full card number.
    • Session details: the names entered, and the date and time of each session.

    From participants

    • The name the member enters, and your phone number if it is provided.
    • The short video you record yourself, including your image and voice.
    • Your Yes or No choice.
    • The results of our AI checks on your video: a transcript, a consent assessment with a confidence score, and reasoning for that assessment.

    From website visitors

    • Standard technical information such as IP address, browser type, pages visited and the referring site, used for security and visitor statistics.
    • Cookies used by our payment provider (Stripe) and our affiliate program (PromoteKit).

    3. Why we collect it

    • To run consent sessions and show both people the result.
    • To assess the spoken consent in a recording and identify recordings that cannot be verified.
    • To manage memberships, billing and support.
    • To keep the service secure and prevent misuse.
    • To meet our legal obligations.

    We don't sell personal information, and we don't use recordings for advertising.

    4. Recording and consent

    A participant records their own video on their own phone. A participant can choose No, and that choice is recorded just as clearly. A No ends the session.

    Consent can be withdrawn at any time, including after a session. A recording shows what was said when it was made. It does not cover anything after consent is withdrawn.

    5. AI checks

    We use Google's Gemini AI service to transcribe the spoken words in the video and assess whether consent was clearly given. The assessment includes a confidence score and reasoning. These checks are assessments, not legal findings, and they can be wrong.

    The current AI consent assessment does not estimate a participant's age or perform a separate check that the spoken words match the participant's Yes or No button choice. A technical failure or an unclear recording is not evidence that consent was refused.

    6. Who can see recordings

    • Recordings are stored in a private, secure vault and are never publicly available.
    • Members and participants cannot view, play or download any recording. Nobody using the service has access to recordings.
    • Both people see only a text result on screen: consent granted, or denied.
    • Recordings are sent to Google Gemini only for the AI check described in this policy.
    • We release a recording to police only after we have verified with them that it is needed for an investigation.
    • We will also release a recording where the law requires us to, such as under a valid court order or subpoena, and only what is required.

    7. How we store and protect information

    Recordings are encrypted and kept in private storage with no public access. We use these service providers:

    • Supabase (database and file storage)
    • Replit and Google Cloud (hosting)
    • Google Gemini (AI checks)
    • Stripe (payments)

    Some of these providers store or process information outside Australia, including in the United States. We only share what each provider needs to do its job.

    8. How long we keep information

    • Recordings are kept securely while your subscription is active. When your subscription ends, your recordings and results are permanently deleted within 30 days. Resubscribe before then to keep them.
    • Billing records are kept for as long as Australian tax law requires.
    • Account and ownership details needed to preserve the connection between recordings and their sessions are retained. Account details are not automatically deleted when a membership ends.

    9. Your rights

    You can ask to access or correct the personal information we hold about you by emailing joseph@consentiq.tech. We'll reply within 30 days.

    Recordings are kept as a record of what was agreed between two people. Because of that, we don't delete a recording at the request of one person while the member's subscription is active, except where the law requires us to.

    If you are in the European Union or the United Kingdom, you have rights under the GDPR, including to access, correct, restrict and object to processing. We may keep a recording where it is needed to establish, exercise or defend legal claims.

    If you're not happy with how we handle your information, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

    10. Age

    ConsentIQ is only for people aged 18 and over. We don't knowingly collect information from anyone under 18. Age eligibility is declared, not verified by the current AI consent assessment. Members and participants must comply with the age requirement.

    11. Changes to this policy

    We'll post changes on this page and update the date at the top. We'll email members about significant changes.

    12. Contact

    ConsentIQ (Joseph Ellul, ABN 92 119 275 454), New South Wales, Australia

    Email: joseph@consentiq.tech

    13. Who we are and how to contact us

    ConsentIQ is a business operated by Joseph Ellul (ABN 92 119 275 454), trading as ConsentIQ, in New South Wales, Australia ("ConsentIQ", "we", "us"). This policy explains what personal information we collect, why, and how we protect it. It covers consentiq.tech and the ConsentIQ app.

    Privacy questions: joseph@consentiq.tech