Privacy Policy

Noema Consulting Pty Ltd (ACN 152 516 642) ("noema", "we", "us", or "our") operates the noema AI Voice Assistant platform, accessible at noema.au and related subdomains.

We are committed to protecting your personal information and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains what information we collect, why we collect it, how we use and disclose it, and your rights in relation to it.

In this policy, "you" refers to both our customers (businesses that subscribe to noema) and, where relevant, individuals whose information we process on behalf of those customers (such as callers to a noema-powered phone line).

We use the information we collect to:

• —Provide, operate, and maintain the noema platform
• —Process and route inbound phone calls on your behalf
• —Generate AI-powered responses and conversation transcripts
• —Display call history, leads, and contacts in your dashboard
• —Process payments and manage your subscription
• —Send transactional emails (account verification, billing receipts, call summaries)
• —Respond to support requests and resolve disputes
• —Detect and prevent fraud, abuse, and security incidents
• —Improve our AI models and service quality using aggregated, de-identified data
• —Comply with our legal obligations

We will not use your information for purposes other than those listed above without first obtaining your consent, unless we are required to do so by law.

We engage the following third-party service providers to operate the platform. Each receives only the data necessary to perform their function.

We do not sell your personal information to any third party. We do not share your information with advertisers.

The noema platform records telephone calls and processes the audio using AI services. The following applies to this activity:

Customer responsibility: As a noema customer, you are responsible for ensuring your use of call recording complies with the laws applicable to your location and industry. Recording laws vary by state and territory. We recommend seeking independent legal advice if you are unsure of your obligations.

AI processing: Call audio is transmitted to Deepgram for transcription and the resulting text is sent to Anthropic to generate AI responses. Audio is also sent to ElevenLabs to synthesise speech. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own model training without separate consent.

No emergency services: The noema AI Voice Assistant is not capable of detecting or responding to emergencies. It must not be relied upon to contact emergency services. Callers requiring emergency assistance should be directed to call 000.

You may request earlier deletion of your personal information at any time by contacting us at [email protected]. We will action deletion requests within 30 days except where retention is required by law.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• —Encryption of data in transit using TLS 1.2 or higher
• —Hashed storage of passwords (bcrypt)
• —Access controls limiting staff access to personal data on a need-to-know basis
• —Short-lived JWT authentication tokens with automatic refresh
• —Hosting on Railway infrastructure with industry-standard physical security

No method of transmission over the internet or electronic storage is 100% secure. If you believe your information has been compromised, please contact us immediately at [email protected].

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the following rights in relation to your personal information:

To exercise any of these rights, contact us at [email protected]. We may ask you to verify your identity before fulfilling a request.

Our service providers (listed above) are based in the United States. By using noema, your personal information will be transferred to and processed in the United States, which may not have privacy laws equivalent to Australia's.

Before disclosing personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy Principles, including entering into data processing agreements with our service providers.

Under APP 8.1, you acknowledge that where we have taken such reasonable steps, we are not liable for a breach of the APPs by an overseas recipient.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by email or by displaying a prominent notice in the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

Your continued use of noema after the effective date of any change constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to make a privacy complaint, please contact our Privacy Officer:

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):