MLAI Privacy Policy

Last updated: 30 April 2026

MLAI Aus Inc ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our websites, attend our events, use our applications, or use MLAI Founder Tools, including Vibe Raising monthly updates.

By accessing and using our website and services, you agree to the terms of this Privacy Policy.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Create or sign in to an MLAI account
• Register for events or workshops
• Subscribe to our newsletter or mailing list
• Contact us through our website or email
• Apply to volunteer with our organization
• Participate in surveys or feedback forms
• Provide startup, company, workspace, or team profile details
• Upload or enter materials, URLs, notes, documents, or other content into our applications

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on our site
• Referring website

Founder Tools and Connected Accounts

If you use Founder Tools, Vibe Raising, or related software features, you may choose to connect third-party accounts or provide source materials so MLAI can generate user-requested outputs such as monthly updates, summaries, metrics, timelines, and drafts.

Depending on the features you enable, the information we collect and process may include:

• Google/Gmail: Gmail metadata, senders, recipients, subjects, dates, snippets, cleaned message or thread text, attachment metadata, and extracted attachment text where enabled and authorized by you.
• Slack: workspace and channel identifiers, selected channel names, public or private channel indicators, message text, thread context, timestamps, and related message metadata from channels you select or authorize.
• Xero: organization, tenant, invoice, payment, contact, account, report, profit and loss, balance sheet, and metric information permitted by the scopes granted to MLAI.
• Linear: workspace, project, issue, comment, status, assignee, cycle, label, and delivery context where a Linear integration is enabled.
• Notion and Google Drive: page, file, document, folder, metadata, and extracted text where these connectors are enabled and authorized.
• Manual materials: source URLs, short summaries, recorded notes, uploaded files, pasted text, and other materials you add directly.
• Startup profile and generated outputs: company profile details, monthly update drafts, generated sections, extracted events, metrics, evidence, recommendations, and review results.

Google API Data and Limited Use

MLAI’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For Google and Gmail data:

• We do not sell Google or Gmail data.
• We do not use Google or Gmail data for advertising, retargeting, or creditworthiness decisions.
• We do not use Google or Gmail data to train generalized AI models or foundation models.
• We use Google and Gmail data only to provide, maintain, secure, and improve the user-requested features that depend on your connection.
• Human access is limited to cases such as security, abuse prevention, support you request, legal compliance, or where you have given explicit permission.

How We Use Your Information

We use the information we collect to:

• Organize and manage events, workshops, and meetups
• Send newsletters and updates about MLAI activities
• Respond to your inquiries and provide customer support
• Authenticate users and operate MLAI accounts and workspaces
• Provide Founder Tools features, including connector sync, monthly update generation, timelines, summaries, metrics, drafts, and evidence review
• Classify, extract, summarize, draft, and review user-requested outputs from connected sources and manual materials
• Improve our website and services
• Comply with legal obligations
• Coordinate volunteer activities and opportunities

AI Processing

Some MLAI features use automated systems and AI service providers, including Valley and model providers such as OpenAI, to classify, extract, summarize, draft, and review outputs that you request. We may send connected-source data, manual materials, generated drafts, extracted metrics, and evidence to these providers only as needed to provide the requested feature, maintain service quality, and keep the service secure. We do not use Google or Gmail data to train generalized AI models or foundation models.

Email Communications and Newsletter

If you subscribe to our newsletter or mailing list, we will send you periodic updates about:

• Upcoming events and workshops
• Community news and announcements
• Educational content related to AI and machine learning
• Volunteer opportunities

Unsubscribe Options

You can unsubscribe at any time by clicking the unsubscribe button included in every email we send. You may also:

• Contact us directly at hi@mlai.au to request removal from our mailing list
• Update your email preferences through the link provided in our emails
• Opt out of specific types of communications while remaining subscribed to others

Once you unsubscribe, we will process your request promptly and you will stop receiving marketing emails within 5-10 business days. Please note that you may still receive transactional emails related to events you have registered for or other essential communications.

Information Sharing and Disclosure

We do not sell your personal information. We do not share connected account data for advertising or retargeting. We may disclose information only as needed for the following purposes:

• Event management platforms (e.g., Humanitix, Eventbrite) when you register for events
• Service providers who assist us in operating our websites, applications, infrastructure, security, analytics, email, support, and AI processing
• Third-party services you choose to connect, as needed to complete the action you requested
• When required by law or to protect our rights and safety

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures may include access controls, logging, encrypted transport, and protected storage for OAuth tokens and other sensitive connection data where supported. No method of transmission or storage is completely secure.

Data Retention

We retain personal information only for as long as reasonably necessary to provide the Services, maintain account history, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and keep the Services secure.

For connected accounts, we may retain OAuth tokens while your connection is active. Source artifacts, extracted text, generated drafts, metrics, timeline events, evidence, and review results may be retained while your account or workspace is active, until you delete them where product controls are available, or until you request deletion. Deletion may be subject to legal, security, audit, and backup retention requirements.

Disconnecting Accounts and Deleting Data

You can disconnect third-party accounts in the product where controls are available, and you can also revoke access directly through the third-party provider, such as your Google Account permissions page. Disconnecting a connector stops future sync for that connector but may not automatically remove historical generated outputs, source artifacts, metrics, or evidence already created from that connection.

To request deletion of data associated with a connector, generated monthly update, or MLAI account, email us at hi@mlai.au. Please include the email address associated with your MLAI account and, where relevant, the third-party account you connected.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to correct or update your information
• The right to delete your information
• The right to restrict processing of your information
• The right to data portability

Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: