Privacy Policy

1.1 This Privacy Policy explains how Your AI Workshop Pty Ltd (ABN 72 702 230 377) (Company, we, us and our) collects, holds, uses and discloses personal information.

1.2 We handle personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs).

1.3 This Privacy Policy applies to personal information we collect through youraiworkshop.ai (Website), the enrolment and application process, the Program, the Platform, the Community, Direct Message Support, Weekly Calls, and any other dealings you have with us.

1.4 This Privacy Policy forms part of, and should be read with, our Terms and Conditions (Terms). Capitalised terms used but not defined in this Privacy Policy have the meanings given in the Terms.

1.5 Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined in the Privacy Act.

2.1 The personal information we collect depends on how you deal with us. It may include:

1. (a) identity and contact details, such as your name, email address, phone number, business name, role and location;
2. (b) enrolment and application details, such as the size and type of your business, the tasks you want to automate, your goals for the Program, and the tier you enrol in;
3. (c) payment and billing details, such as transaction records, the amount and date of payments and instalments, and the last four digits and type of your card. Full card details are collected and processed by our payment processor, not stored by us;
4. (d) account and Platform details, such as your Platform username, profile information, login activity, lesson progress and quiz results;
5. (e) Customer Content, such as posts, comments, questions, files and direct messages you send in the Community or through Direct Message Support;
6. (f) recordings, being the recordings of Weekly Calls, which may include your name, image, voice and anything you say or share during the call;
7. (g) communications, such as emails, support requests, refund claims, feedback and survey responses;
8. (h) technical and usage information, such as your IP address, browser and device type, pages visited and referring website, collected through cookies and similar technologies; and
9. (i) marketing preferences, such as whether you have subscribed to or unsubscribed from our communications.

2.2 If you do not provide the personal information we request, we may not be able to enrol you in the Program, process your payment or provide parts of the Program to you.

3.1 We do not intend to collect sensitive information (as defined in the Privacy Act), such as information about health, racial or ethnic origin, political opinions, religious beliefs or criminal record.

3.2 Please do not share sensitive information about yourself or anyone else in the Community, in direct messages or during Weekly Calls. If you choose to share sensitive information with us, you consent to us collecting and handling it in accordance with this Privacy Policy.

3.3 Please do not share personal information about your own customers, staff or other third parties in the Community or during Weekly Calls unless you are authorised to do so. Where you share examples from your business, we recommend you remove names and other identifying details first.

4.1 We collect personal information directly from you where it is reasonable and practicable to do so, including when you:

1. (a) visit the Website or complete a form on it;
2. (b) book an enrolment or application call, or speak with us on that call;
3. (c) enrol in the Program and make a payment;
4. (d) create a Platform account and use the Program, the Community or Direct Message Support;
5. (e) attend a Weekly Call; or
6. (f) contact us, make a refund claim or subscribe to our communications.

4.2 We may also collect personal information about you from third parties, including our payment processor, the Platform, our booking and scheduling provider, and, for a business enrolment, the person who enrolled you as a Participant.

4.3 If we receive personal information that we did not ask for, we will decide whether we could have collected it under the APPs. If we could not, we will destroy or de-identify it where it is lawful and reasonable to do so.

5.1 We collect, hold and use personal information to:

1. (a) assess applications and enrol you in the Program;
2. (b) provide the Program, including access to the Course Content, the Community, Direct Message Support and Weekly Calls, according to the tier you purchased;
3. (c) process payments and instalments, issue receipts and manage failed payments;
4. (d) respond to enquiries, support requests and refund claims;
5. (e) record Weekly Calls and make recordings available to members of the relevant cohort;
6. (f) administer and enforce the Terms, including investigating breaches, chargebacks and payment disputes;
7. (g) maintain the security and integrity of the Website, the Platform and our systems;
8. (h) improve the Program and our services, including by analysing how the Course Content is used;
9. (i) send you information about the Program and related offerings, in accordance with clause 6;
10. (j) comply with our legal obligations, including tax and accounting record-keeping; and
11. (k) any other purpose you consent to, or that is required or authorised by law.

5.2 We will not use or disclose your personal information for a purpose other than the purpose for which it was collected, unless you consent, you would reasonably expect us to use it for a related purpose, or an exception under the Privacy Act applies.

6.1 We may use your contact details to send you information about the Program, future cohorts, our other courses and services, and events, where you have consented or would reasonably expect to receive it.

6.2 We comply with the Spam Act 2003 (Cth). Every marketing email we send will include a functional unsubscribe link.

6.3 You may opt out of marketing communications at any time by using the unsubscribe link or by emailing us. We will process your request within 5 Business Days. We will continue to send you service communications about any Program you have enrolled in.

6.4 We do not sell your personal information.

7.1 We may disclose personal information to:

1. (a) our payment processor, to process payments, instalments, refunds and chargebacks;
2. (b) the Platform provider, to host the Course Content, the Community and your account;
3. (c) our booking and scheduling provider, to manage enrolment and application calls;
4. (d) providers of email, file storage, video conferencing, transcription and other business software we use to operate the Program;
5. (e) Instructors, contractors and staff who help create or deliver the Program, who are required to keep it confidential;
6. (f) our professional advisers, such as accountants, lawyers and auditors;
7. (g) other members of your cohort, to the extent you post in the Community or take part in a Weekly Call;
8. (h) a purchaser or prospective purchaser of all or part of our business, subject to appropriate confidentiality obligations; and
9. (i) government authorities, regulators, courts and law enforcement bodies, where required or authorised by law.

7.2 We require our service providers to handle personal information only for the purposes for which we provide it and to protect it appropriately.

7.3 Mark Bouris, as a co-founder of the Company, does not take part in delivering the Program and does not have routine access to Customer Content, direct messages or Weekly Call recordings.

8.1 Some of our service providers, including our payment processor, the Platform, and our email, scheduling, storage and video conferencing providers, store or process information outside Australia. As at the date of this Privacy Policy, those locations include the United States and may include other countries where those providers or their data centres are located.

8.2 Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs, including by using reputable providers that are bound by contractual data protection and security obligations.

9.1 Posts and comments in the Community can be seen by other members of your cohort and by Company personnel. Please consider what you share.

9.2 Direct messages sent through Direct Message Support can be seen by Nick Mihailou and, where clause 5.6 of the Terms applies, by another Instructor.

9.3 Weekly Call recordings are made available to members of the relevant cohort. By attending a Weekly Call, you consent to being recorded, as set out in clause 5.5 of the Terms. If you do not want to appear in a recording, you may keep your camera off and use the chat or a display name instead of your full name.

9.4 We will not use Customer Content or recordings that identify you in marketing or promotional material without your prior written consent.

10.1 We do not use computer programs to make decisions, or to substantially and directly assist in making decisions, that could reasonably be expected to significantly affect your rights or interests. Decisions about enrolment, refund claims and the suspension or termination of access are made by a person.

10.2 We may use AI and other software tools to help us operate the Program, such as drafting communications, transcribing or summarising Weekly Calls, and organising support requests. Where we do, personal information is handled in accordance with this Privacy Policy.

10.3 When you use Third-Party Tools as part of the Program, such as Claude, GitHub or Base44, your information is handled by those providers under their own privacy policies, not this one. You are responsible for the data you connect to those tools, as set out in clause 11.5 of the Terms.

11.1 The Website and the Platform use cookies and similar technologies to operate, remember your preferences, measure traffic and understand how visitors use them.

11.2 You can set your browser to refuse or delete cookies. Some parts of the Website or the Platform may not work properly if you do.

12.1 We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include using reputable service providers, access controls, multi-factor authentication on our accounts where available, and limiting access to people who need it.

12.2 No method of transmitting or storing information is completely secure. You are responsible for keeping your Platform login details secure, as set out in clause 10.5 of the Terms.

13.1 We keep personal information for as long as we need it for the purposes in clause 5, including for the Access Period and for as long as we are required to keep records by law, such as tax and financial records.

13.2 When we no longer need personal information and are not required to keep it, we take reasonable steps to destroy it or de-identify it.

14.1 We comply with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

14.2 If we suspect a data breach, we will act promptly to contain and assess it. If an eligible data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Privacy Act.

15.1 You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

15.2 To make a request, email us using the details in clause 19. We may need to verify your identity before acting on the request.

15.3 We will respond within 30 days. We do not charge for making a request or for correcting information. We may charge a reasonable fee for giving access where the request requires significant work, and will tell you the amount first.

15.4 If we refuse a request, we will give you written reasons and tell you how to complain, except where it would be unreasonable to do so.

16.1 You may make a general enquiry without identifying yourself or by using a pseudonym.

16.2 It is not practicable for us to enrol you in the Program, process your payment or provide Direct Message Support without knowing who you are. You may use a display name in the Community and during Weekly Calls.

17.1 The Program is designed for business owners and managers. It is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from them.

18.1 If you have a concern about how we have handled your personal information, please email us using the details in clause 19 with the subject line “Privacy complaint”, describing the issue.

18.2 We will acknowledge your complaint within 5 Business Days and aim to give you a written response within 30 days.

18.3 If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner:

1. (a) website: www.oaic.gov.au;
2. (b) phone: 1300 363 992; or
3. (c) post: GPO Box 5288, Sydney NSW 2001.

19.1 For privacy enquiries, requests and complaints, contact our Privacy Officer:

20.1 We may update this Privacy Policy from time to time, including to reflect changes in the law or in how we operate. The current version will be published on the Website with its effective date.

20.2 This Privacy Policy is effective from 14 October 2026.