Privacy Policy

• Accounts: your name, email address, profile details you choose to add, and your password (stored only as a secure hash). If you sign in with Google, we receive your name and email address from Google. If you turn on two-factor sign-in, we store the setting needed to check your codes.
• Sign-in history: the time, IP address and approximate country of each sign-in, to protect accounts from misuse.
• Chat assistant: the messages you and the assistant exchange, whether or not you are signed in, with the IP address and approximate country of the first message and the amount of text processed. We use this to answer you, follow up on your enquiry, prevent abuse and improve our service.
• Enquiries: the name, email address, phone number and message you give us through our contact form or the chat assistant, with the IP address and approximate country the enquiry came from.
• Phone calls: calls to our phone line are answered by an AI assistant. Calls are recorded, transcribed and summarised, and we keep your phone number, the recording, the transcript and any booking details. If you book a meeting, we add it to our calendar with the name and email address you give. We remember your name and a short summary of your recent calls against your phone number, so you don't have to repeat yourself when you call again.
• Security checks: to stop automated abuse, we may ask your browser to complete a Cloudflare Turnstile check, which sends technical information about your browser to Cloudflare.

We use the cookies needed to keep you signed in and to run security checks. We also use the Google Ads tag, which sets cookies so we can tell when someone who clicked one of our ads sends us an enquiry. Google receives technical information about your visit for this. You can turn off personalised ads in your Google account at adssettings.google.com.

We use personal information to provide and secure the website, answer your questions, respond to enquiries and bookings, send account emails (such as confirming your email address or resetting your password), and keep records of our dealings with you. We do not sell personal information, and we do not post it on social media. Our AI News social media posts contain only our own articles.

We use trusted service providers to run the site. They handle personal information only to provide their service to us:

• DigitalOcean (website hosting, Sydney) and Supabase (database and sign-in, Sydney region).
• NVIDIA (the AI model that writes the chat assistant's replies).
• Retell AI and Twilio (the AI phone assistant, call recording and transcripts).
• Google Gemini, which writes the Python course's AI teacher replies and explanations. When a learner uses the AI teacher, we send it their message, their code and its output. We keep the chat for 90 days so the learner can carry on where they left off, and learners can clear it at any time.
• Homework help, which we switch on only for some learners, also uses Google Gemini. When a learner adds homework (a photo, PDF, typed text or an email forwarded to their Tisso AI homework address from a sender they have approved), we send it to Gemini to read the tasks and due date, and again when they ask the homework helper for help. The files are kept in private storage in Sydney and deleted, with the chat, 90 days after the homework is marked done, or straight away when the learner deletes it. Practice questions the learner gets wrong are kept for review until they delete their account. The helper also keeps a few short notes on what the learner is good at and still learning (never personal details), which the learner can see and clear at any time.
• Google (Google sign-in, our email and calendar, and Google Ads conversion tracking), Resend (sending our emails) and Cloudflare (security checks).

Our website data is stored in Australia. Some of these providers are based overseas, mainly in the United States, so information you send through the chat assistant, the phone line or our emails may be processed there. We choose providers with strong security and privacy commitments. We may also disclose information where the law requires it.

Access to personal information is limited to our administrators and protected by secure sign-in. Data is encrypted in transit, and our database only lets each person see their own account information. We keep personal information only as long as we need it for the purposes above or as the law requires, and then delete or de-identify it.

You can use most of the website without an account. You can view and update your profile on your account page. You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account, chats or call records by emailing info@tissoai.com.au. We will respond within 30 days.

If you have a question or a complaint about how we handle personal information, email info@tissoai.com.au or call 03 4829 3646. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy as our services change. The date at the top shows when it last changed.