Privacy Policy

FIMALU Pty Ltd (ABN 46 674 338 839) trades as Evolaition. In this policy, "we", "us" and "our" mean FIMALU Pty Ltd. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and how you can access it, correct it or complain.

Level 7, 570 St Kilda Road, Melbourne VIC 3004
Email: info@evolaition.ai
Phone: 03 9000 0195

Information we collect for ourselves. When you use our website, chat with our agent, call our phone line, book a meeting or email us, we decide how that information is used, and this policy covers it.

Information we handle for our clients. When we build and run AI agents for a client, we handle personal information on that client's behalf and only on their instructions. If your request is about information a client of ours holds, please contact that client. We will help them respond.

• Website forms: your name, email or phone number, company, and what you tell us. We store it in our systems in Sydney and email a copy to our own inbox.
• Website chat: If you chat with our AI agent on this website, the conversation is stored so we can follow up and improve our service, and deleted after 90 days. If you give us your contact details in a chat, we keep them as an enquiry for up to 12 months.
• Our phone line: If you call our own AI agent, the call is recorded and transcribed, and we tell you at the start; you can ask for it not to be recorded. We keep call recordings and transcripts for 90 days, then delete them. If you ask us to follow up, the details you give are kept as an enquiry for up to 12 months. If you book a time with the agent, your name, email and the time go to our booking provider to make the booking.
• Bookings: your name, email address and the time you booked.
• Email: your email address and what you send us.
• Website visits: our hosting provider logs technical data such as your IP address, browser and the pages you request. Our analytics and advertising tools record how you use the site, but only if you accept cookies. If you arrive from an ad or campaign link, our forms store the advertising click identifier (gclid, wbraid or gbraid) and the campaign (UTM) tags from that link with your enquiry. If you accept cookies, the site also keeps them in a cookie for 90 days, and our advertising provider may receive a hashed (one-way scrambled) copy of the email address or phone number you enter in a form, to measure ad results; it may process it outside Australia. If you decline, our advertising tags may still send basic signals that store nothing on your device. We also count visits ourselves, without cookies: each day we keep only totals of the pages viewed and where visitors came from (the referring website's domain and any campaign tags), for 25 months, never your IP address, your browser or a record of your visit. To know which page or campaign led to an enquiry, the site keeps the referring domain, your first page and any campaign tags in your browser for that tab's visit only (session storage, not a cookie, cleared when you close the tab) and sends them only with an enquiry, along with your answer if you tell us how you heard about us. If your browser sends Do Not Track or Global Privacy Control, neither the count nor the session storage happens.

We do not take payments through this website. Clients pay through our payment provider or by bank transfer, and we do not store card details.

• To answer your enquiry, call or message
• To arrange calls and meetings
• To provide and improve our services
• To keep spam off our forms
• To measure which ads and pages bring enquiries
• To keep records the law requires
• To send you marketing, only where you have agreed. Every marketing email has an unsubscribe link and you can opt out at any time.
• If you're a client and give us a testimonial or confirm a result through the client portal, we publish only what you've permitted, with the name, title and company you choose, and remove it within minutes if you withdraw.

We share personal information only with the service providers below, and only so they can do their part of the job. We never sell it. We may also disclose it where the law requires.

A list of our service providers is available to clients on request.

If you use our client portal, we keep your name, work email, company, role and portal permissions, and the settings you save there (your quick-reply templates and conversation labels), and which change-request updates you have seen. Sign-in runs on our sign-in provider in Sydney: it holds your email, your password (we never store or log it) and your authenticator-app setting (required). Our sign-in provider may process its check for compromised passwords outside Australia. We keep a record of each sign-in attempt, successful or not, including the IP address, in our audit trail for 7 years. Your account and settings are kept while the account exists. Removing your access disables the account and signs you out everywhere straight away.

Security logs: when you use our client portal or our staff systems, we record the time of each request, the action requested (not its content), the result, your IP address and your browser type, to keep the service secure and investigate misuse. These logs are encrypted, kept for 90 days and seen only by Evolaition's operations team.

Some of our providers process personal information in the United States: our email and office software, analytics and advertising (including ad measurement on a professional networking site), booking, website hosting, spam protection and payment providers. That affects website forms (including, if you accept cookies, the hashed email or phone our advertising provider may receive), email, bookings, website visits and payments.

Our sign-in provider may process the client portal's compromised-password check outside Australia.

• Website chat conversations: 90 days
• Call recordings: 90 days
• Call records (transcripts and summaries): 90 days
• Enquiry emails: 90 days
• Leads: 12 months from last contact
• Enquiries taken by our phone agent: Up to 12 months
• Client portal accounts and their settings: While the account exists
• Client portal sign-in records (with IP address, in our audit trail): 7 years
• Security logs for the client portal and staff systems (time, action requested, result, IP address, browser type): 90 days
• Records the law requires us to keep, such as tax records: As long as the law requires

After that, it is deleted.

We use technical and access controls to protect the personal information we hold. Our Security & Data page sets out those controls and where your information lives.

Notices for the open-source software this website uses are in our third-party licences file.

You can ask to see the personal information we hold about you, or ask us to correct or delete it. Email info@evolaition.ai. We may need to confirm who you are first, and we will respond within 30 days.

We may refuse a request where the law allows, for example where giving access would affect someone else's privacy or relates to legal proceedings. If we refuse, we will tell you why in writing and how to complain.

To make a privacy complaint, email info@evolaition.ai and tell us what happened. We will acknowledge it within 5 business days and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

See our Cookie Policy for the cookies this site uses.

We may update this policy. The date at the top of the page shows when it last changed.