1. Scope
This Privacy Policy explains how Svraign handles personal information in connection with our website, enquiries, deployment applications, technical reviews, and private AI systems.
Svraign is designed so customer operational data, including sensitive participant, client, staff, service, incident, reporting, and audit evidence data, remains within the customer's controlled environment unless the customer gives separate written instructions for another arrangement.
Core privacy position: Svraign does not need access to sensitive customer operational data to run a standard on-premises or customer-controlled deployment. Sensitive data is processed by the secure AI system inside the customer's environment. It is not sent to third-party AI platforms, public AI services, or external third-party processing servers.
2. Information Svraign may collect
Svraign may collect limited business contact information when someone contacts us, applies for deployment, requests a technical review, books a call, or sends us an email. This may include:
- name, role, organisation, email address, and phone number;
- general information about the organisation's reporting, workflow, security, or deployment needs;
- messages, enquiries, and support requests sent to Svraign;
- basic website interaction information, depending on the hosting and analytics setup used for the public website.
Public website forms and emails should not be used to send participant records, health information, incident details, case notes, support notes, staff files, or other sensitive operational data.
3. Customer operational data
Customer operational data belongs to the customer. In a standard Svraign deployment, that data remains inside the customer's premises, private infrastructure, or agreed customer-controlled environment.
Svraign does not routinely access, copy, host, sell, mine, train on, or disclose customer operational data. The customer controls user access, source systems, approved data flows, review rules, and export rules.
If a customer asks Svraign to assist with technical support, diagnostics, implementation, or review that could involve access to customer data, that access should be scoped, approved, time-limited, and handled under the customer's written instructions.
4. Secure portal and transmission
Where Svraign uses a secure portal, the portal is intended to provide controlled transmission between authorised users and the customer's Svraign environment. Sensitive operational data should travel only through approved secure pathways configured for the customer.
Svraign does not transmit sensitive customer operational data to third-party AI services, public AI tools, external model APIs, advertising platforms, or unrelated third-party servers for processing.
5. AI processing
Svraign's AI processing is designed to occur on the secure AI system deployed for the customer. The system may draft reports, summaries, flags, checklists, evidence packs, and workflow outputs from approved customer-controlled context.
AI outputs remain subject to human review. Svraign does not design the system to make final care, clinical, legal, compliance, financial, or employment decisions without human approval.
6. How Svraign uses business contact information
Svraign may use business contact information to:
- respond to enquiries;
- assess deployment fit;
- prepare technical review conversations;
- provide quotes, proposals, onboarding information, or support;
- maintain business records and manage legal, security, and operational obligations.
Svraign does not sell personal information.
7. Disclosure
Svraign may disclose business contact information only where reasonably needed to operate the business, respond to the person who contacted us, comply with law, obtain professional advice, or protect security and legal rights.
Svraign does not disclose sensitive customer operational data to third-party AI providers, analytics providers, advertising networks, or external processing services as part of the standard private AI reporting system.
8. Storage and security
Svraign takes reasonable steps to protect information we hold from misuse, interference, loss, unauthorised access, modification, and disclosure.
For customer operational data, the primary security model is customer-controlled storage and processing. The system is designed so the customer's sensitive data remains in the customer's environment, with access controls, approval boundaries, and auditability configured for the deployment.
9. Data retention
Svraign retains business contact information only for as long as needed for the purpose for which it was collected, including enquiries, deployment assessment, customer relationship management, security, legal, accounting, or operational record-keeping.
Customer operational data retention is controlled by the customer within the customer's own systems and Svraign deployment configuration.
10. Access and correction
A person may contact Svraign to request access to, or correction of, personal information Svraign holds about them. Svraign may need to verify the request before responding.
Requests about customer operational data should usually be directed to the customer organisation, because that organisation controls the relevant system and records.
11. Privacy complaints
If a person has a privacy concern, they can contact Svraign using the details below. Svraign will review the concern and respond within a reasonable time.
If the concern relates to records held by a customer organisation inside that customer's Svraign deployment, Svraign may direct the person to the customer organisation that controls those records.
12. Data incidents
If Svraign becomes aware of a suspected unauthorised access, disclosure, or loss involving personal information that Svraign holds, Svraign will assess the incident and take appropriate steps. Where required, Svraign will support relevant notification obligations.
For customer-controlled deployments, the customer remains responsible for its own operational data governance and incident response unless a separate agreement states otherwise.
13. Changes to this policy
Svraign may update this Privacy Policy as the product, legal requirements, or deployment model changes. The updated version will be published on this page with a new date.
14. Contact
For privacy questions, access or correction requests, technical review requests, or complaints, contact:
Svraign
Email: hello@svraign.com.au