Privacy policy
Last updated 6 November 2026
This policy explains what personal information FireAI.AU (“FireAI”, “we”, “us”) collects when you use fireai.au, how we use and share it, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Information we collect
- Account details: your email address and password (stored by our authentication provider in hashed form), or your name and email from Google if you sign in with Google. You can also give us your name, position, company, years in the industry, primary state and a profile picture.
- Questions and chats: the questions you ask, FireAI’s answers and your chat history, which we store so it follows you across devices. Feedback you send on answers.
- Reports you upload: the files you upload to Report Audit, the text extracted from them, the findings and remarks on them, and your audit style-guide preferences. Reports can contain information about your clients and their buildings, so only upload reports you are allowed to share with us.
- Team information: if you are part of a company account, your company name, your role and account type, and invitations. The company owner, team managers and admin-only accounts can see the report audits of the team members they manage and add remarks to them.
- Uptick connection: if you connect Uptick, your Uptick site address and username, encrypted sign-in tokens, the properties you link and a history of the changes you approved and sent to Uptick. We never store your Uptick password.
- Inspect: if you use FireAI Inspect, the projects you create (name, address, client, notes, inspection date and inspector), the floor plans you upload, the assets you pin and the details, results, remarks and photos you add to them, your asset types, and the report formats FireAI reads from sample reports you upload (layout, headings, fixed wording and logo; the sample file itself isn’t kept). Projects created from a company account are shared with that company’s team.
- Australian Standards you upload (My Standards): the PDFs you upload in Account settings → My Standards, their Standard number, title and size, and the text we extract from every page. FireAI reads this text so it can answer questions from your Standards and open them from source links. If you are part of a company account, the Standards you upload go into your company’s library: everyone in your company can open and search them, and FireAI uses them when answering any member’s questions.
- Billing: payments are handled by Stripe. We receive your Stripe customer and subscription details and plan status, but not your full card number. To stop repeated free trials, we keep a one-way scrambled (hashed) version of the card’s fingerprint.
- Usage and device information: your IP address (used for security and rate limiting), session cookies that keep you signed in and enforce device limits, a guest cookie that counts free questions before you sign up, daily usage counts, and records of searches and product events that help us measure and improve FireAI. Your browser’s local storage keeps settings such as your theme and a copy of your chats.
- Choices you make: whether you agreed to the reference-information disclaimer, whether you want product news, and your AI-improvement setting (see below).
We don’t use advertising trackers, and we don’t sell personal information.
How we use it
- To provide FireAI: answering questions, auditing reports, sending corrections you approve to Uptick, running team accounts and syncing your chats.
- To answer questions from Australian Standards you or your company uploaded: FireAI searches their text and sends the relevant excerpts, with your question, to our AI providers. We don’t add them to FireAI’s shared library, show them to other customers, or use them to improve our AI.
- To bill you and manage your plan.
- To keep FireAI secure, enforce plan limits and prevent abuse.
- To measure and improve answer quality, search accuracy and cost.
- To email you about your account and audits, and, only if you opted in, about product news. You can opt out at any time.
- Improving our AI: while the setting “Allow FireAI to use anonymised excerpts and images from my reports to improve our AI” is on, we may use anonymised excerpts and images from your reports to improve FireAI. The setting is on by default, and you can turn it off at any time in your account settings.
Who we share it with
We share personal information only with service providers that help us run FireAI, and only as needed for that purpose:
- Supabase: database, sign-in and file storage.
- Fly.io: application hosting. Our servers run in Sydney.
- Anthropic and OpenAI: AI models that process your questions, report content and excerpts from Australian Standards you or your company uploaded, to produce answers and audit findings.
- Google (Gemini API): AI model that analyses photos you take or upload in photo mode (beta).
- LlamaIndex (LlamaCloud and LlamaParse): document search and extracting the text from reports you upload.
- Stripe: payments and subscriptions.
- Our email delivery provider: account, team and audit emails.
- Google: only if you choose to sign in with Google.
- Uptick: only if you connect it, and only the changes you approve.
- AI apps you connect to FireAI (for example Claude or ChatGPT): only if you connect one. It receives the library excerpts it searches for. We record each search (your account, company, the app, the query and the documents returned) to run and improve the connector and prevent misuse.
Within a company account, the people described under “Team information” can see your report audits, and everyone in the company can see the Australian Standards uploaded to the company’s library. We may also disclose information when the law requires it, or to protect the rights, safety and security of FireAI and its users.
Storage outside Australia
Some of these providers store or process information outside Australia, including in the United States.
Security
All traffic to FireAI is encrypted with HTTPS. Uptick sign-in tokens are encrypted before we store them, and access to your reports is checked on every request. No system is completely secure, so please contact us straight away if you think your account has been misused.
How long we keep it
We keep your information while your account is open. You can delete a report audit at any time. When you delete your account (see below), we delete your profile, chats, reports, audit findings, Uptick connection, your personal Inspect projects (with their plans and assets), the Australian Standards you uploaded privately and sign-in. Inspect projects and Standards belonging to a company stay with that company until it removes them. We keep only:
- usage and search records, with the link to you removed;
- the hashed card fingerprint that prevents repeated free trials;
- records Stripe and we must keep for tax and legal reasons;
- backup copies, for a limited time until they are overwritten.
Your choices and rights
- Access and correction: you can view and update your details in Account settings, or email us for a copy of the personal information we hold about you.
- Deleting your account: go to Account settings → Delete account. This cancels any subscription you pay for and permanently deletes your data. If you own a company account with other members, you’ll need to remove them first or email us to transfer ownership. If you joined through a company account, your company owner can also remove your account.
- Marketing emails: opt out using the link in the email, or contact us.
Children
FireAI is a professional tool for people 18 and over. We don’t knowingly collect information from children.
Complaints and contact
Email support@fireai.au with any privacy question or complaint. We’ll respond within 30 days. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy as FireAI changes. We’ll change the date at the top, and tell you by email or in the app about any significant change.