Privacy policy

1. Who we are

AI Economy Index is published by Media Mantra, ABN 89 594 851 152, of Gold Coast, Queensland, Australia. In this policy "we", "us" and "our" mean Media Mantra trading as AI Economy Index.

Contact for anything on this page: hello@aieconomyindex.com.au.

A note on whether the Privacy Act applies to us. Australian businesses under $3 million annual turnover are generally not bound by the Privacy Act 1988 (Cth) unless an exception applies. We are not going to hide behind that. We handle personal information as though the Australian Privacy Principles applied to us in full, because we would not buy compliance documents from someone who did otherwise.

2. What we collect

If you just read the site

Nothing that identifies you personally. We run Google Analytics 4, which counts visits and tells us which pages get read, roughly where in the world readers are, and what brought them here. It sets a cookie in your browser to tell a returning visit from a new one. It records a truncated IP address rather than the full one, and we have turned off every setting that would share the data with Google for advertising, benchmarking or product development.

We do not know who you are from this. There is no name, no email and no account attached to it, and we make no attempt to work out who any individual visitor is.

Our web host also keeps standard server logs, as every web host does, which include full IP addresses.

If you would rather not be counted, any content blocker or a browser set to block trackers will stop it, and the site works exactly the same. We do not detect or discourage that.

If you use the readiness check

The readiness check saves your answers so we can understand what Australian businesses are finding difficult. Each submission records:

• your answers to the questions, and the score and band they produce
• your industry, organisation size and state, if you chose them
• the date and time of submission
• your email address, only if you typed one in and ticked the box asking for your result: it is optional, and the check works without it

We do not ask for your name, your business name, your phone number or your address, and there is nowhere to enter them.

If you use the enquiry form or the quick AI check

The enquiry form asks for your name, email address and message, and your organisation and phone number if you choose to give them. The quick AI check pop-up asks four questions, works out a score, and asks for your email address (and first name, if you want) so we can send your result. We use these details to reply to you and to email you your score.

When you send either one, the details are emailed to our business inbox and a copy is kept in a private file on our web host, outside the public part of the site. If you ticked the box asking for updates, we may send you occasional AI compliance updates. Reply "unsubscribe" at any time to stop them.

Readiness check submissions and customised pack enquiries are also emailed to the same inbox, so we can respond to them.

If you buy the governance kit

Payment is processed by Stripe. Your card details never reach our website or our database. After Stripe confirms a payment we record the Stripe session and payment reference, which product was bought, the amount and currency, the email address you gave Stripe at checkout, when the files were first delivered, and how many times they were downloaded.

If you email us

We keep the email, which means we keep whatever you chose to put in it.

3. Why we collect it

• Readiness check answers: to see, in aggregate, which obligations Australian businesses are unclear about, so we can write about the right things. We report this only as totals and patterns, never as anything identifying a business or a person.
• Your email, if you gave it: to add you to the AI Economy Index briefing list, and to reach you if we later find an error in the check that affected your result. We do not email the readiness result itself. You download that from the page.
• Customised pack enquiries: to work out what your business needs, to quote the job, and, if you go ahead, to write the documents. This is the form at pack.html and it includes your business details, the AI tools you tell us about, the kinds of information those tools touch, and the decisions you tell us they affect.
• Order records: to deliver the files you paid for, to re-issue your download links if you lose them, to send the updates included with your purchase, and to meet our tax and record-keeping obligations.

We do not use any of it for profiling, scoring, or building a picture of you or your business beyond what the check itself asks.

4. What we don't do

• We do not use advertising pixels, remarketing tags, or social media trackers.
• We do not run Google Ads, and the Analytics property is not linked to any advertising account.
• We set no cookies of our own beyond the one Google Analytics uses to count visits, and we store nothing in your browser that identifies you.
• We do not attempt to identify individual visitors, and we do not combine analytics data with anything you have told us.
• We do not sell, rent, licence or trade personal information to anyone, for any purpose, ever.
• We do not buy mailing lists, and we do not send unsolicited marketing.
• We do not put anything you send us into a public generative AI tool.

5. Where it is stored

Readiness check submissions and order records are held in a Supabase database in the Sydney region (ap-southeast-2). The data stays in Australia.

The files you buy sit in private storage in the same Sydney region. They are never publicly accessible. Each download is a signed link that expires after seven days.

The website itself is static HTML served by our web host. Enquiry form and quick AI check submissions are kept in a private file on that host, outside the public part of the site, and are emailed to our business inbox, which runs on Google Workspace.

6. Who else can see it

Access to the database is restricted to the service credentials used by our own code and to the director of Media Mantra. There is no public read access to either table: the readiness check can write a submission but cannot read any, including its own.

The third parties involved in running this site are:

• Supabase: database, file storage and the code that verifies your payment. Sydney region.
• Stripe: payment processing. Stripe collects your card and billing details directly and handles them under its own privacy policy. We never see your card number.
• Google Analytics: counts visits and page views. Property AI Economy Index, run by Media Mantra. Data sharing with Google for product improvement, benchmarking and sales recommendations is switched off. Event-level data is kept for 14 months and then deleted.
• Our web host: serves the pages, keeps standard server logs, and holds the private file of enquiry form and quick AI check submissions.
• Google Workspace: our business email. Enquiries, quick AI check results and email copies of readiness check and customised pack submissions arrive there.
• Google Fonts: the typefaces on this site load from fonts.googleapis.com and fonts.gstatic.com. That request necessarily tells Google your IP address and browser. We use no other Google service. If this matters to you, a content blocker will stop it and the site will still work, in a different typeface.

7. Overseas disclosure

Four of the above involve information leaving Australia, and we would rather say so plainly than bury it.

• Stripe is a United States company and processes payment information overseas, including in the United States and Ireland.
• Google Analytics is operated by Google, a United States company, and visit data is processed on Google servers outside Australia.
• Google Fonts is served from Google's global network, so the request that fetches the typeface may be handled outside Australia.
• Google Workspace, our business email, is operated by Google, a United States company, so emails, including copies of form submissions, may be stored and processed outside Australia.

The database copies of your readiness check answers, your customised pack enquiry and your order record stay in Sydney. The email copies of those submissions, and enquiry form and quick AI check submissions, pass through Google Workspace as described above.

8. How long we keep it

• Readiness check submissions: kept for two years, then deleted. If you gave an email address and later ask us to remove it, we delete the email address and keep the anonymous answers.
• Customised pack enquiries: kept for two years if you do not go ahead, then deleted. If you do go ahead they become part of your order record and follow the line below. Ask us and we will delete an enquiry sooner.
• Enquiry form and quick AI check submissions: kept for two years, then deleted. Ask us and we will delete yours sooner.
• Order records: kept for seven years, because Australian tax law requires business records to be retained for five years and we would rather keep a margin.
• Emails: kept while the conversation is useful, then deleted.

9. Access, correction and deletion

Email hello@aieconomyindex.com.au and tell us what you want:

• A copy of everything we hold about you.
• A correction, if something we hold is wrong.
• Deletion. We will delete what we are not legally required to keep, and tell you what we had to keep and why.

We aim to respond within five business days and will always respond within thirty days. There is no charge. We may need to ask a question to confirm you are who you say you are, usually just the email address the record is under.

10. Security and breaches

The database has row-level security enabled with no public read policy on either table holding personal information. Product files are private and delivered only through short-lived signed links. Payment authorisation is verified directly with Stripe rather than trusted from the browser.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a data breach occurs that is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme, and we will do that whether or not the scheme legally binds us.

11. Children

This site is for businesses. It is not directed at children and we do not knowingly collect information from anyone under 18. If you believe we have, tell us and we will delete it.

12. Complaints

If you are unhappy with how we have handled your information, email us first. Most things are a misunderstanding and can be fixed the same day. Tell us what happened and what you would like done about it, and we will respond within thirty days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints or on 1300 363 992.

13. Automated decision-making

We do not use computer programs to make, or to substantially assist in making, any decision about you that could reasonably be expected to significantly affect your rights or interests. Nothing on this site decides anything about you.

The readiness check does calculate a score from your answers, and it is worth being precise about what that is: arithmetic in your own browser that tells you what you just told it. It does not decide anything, it does not affect anything, and no person or system acts on it.

We say this here because from 10 December 2026 organisations covered by the Privacy Act that do use automated decision-making must disclose it in their privacy policy. If we ever start, this section is where you will find it.

14. Changes to this policy

If we change this policy we will update the version and date at the top of the page. If a change materially affects information we already hold about you, we will email you about it where we have an address for you, rather than quietly changing the page.

Version 1.2 · Effective 13 October 2026 · Media Mantra, ABN 89 594 851 152 · This policy describes our actual practice as at that date. If you find something on this site that contradicts it, that is a bug and we want to hear about it.