Privacy Policy — Coutari.ai

1. Information We Collect

We collect information that you provide directly to us, including:

Name and email address
Account credentials
Business information
Payment information (processed securely through Stripe)

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send technical notices and support messages
Respond to your comments and questions

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We share your information only with the sub-processors we use to operate the platform, when required by law or to protect our rights, or with your consent. Our current sub-processors are:

Vercel — application hosting and content delivery.
Supabase — database, authentication, and file storage.
Stripe — payment and subscription processing (PCI-DSS Level 1).
Sentry — error and performance monitoring.
Resend — transactional email delivery.
Twilio — SMS and one-time-passcode delivery.
Anthropic — AI-assisted features.
Upstash Redis — session storage, caching, and rate limiting.
PostHog — product analytics. Analytics cookies are set only after you accept them in the consent banner. We also record a limited set of cookie-free, server-side service events (for example, that a booking request or a subscription change occurred, keyed to your account ID — never your email or message content) as part of operating, securing, and improving the service.

Each sub-processor is bound by a data-processing agreement and may process your data only on our instructions. These providers may process data outside your country — primarily in the United States and Australia — under standard contractual protections. See our Cookie Notice for details of cookies set by these providers.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Data Retention

We keep personal data only as long as needed for the purposes described in this policy. When you delete your account, we erase or anonymise your personal data, except for records we are required to keep — for up to 7 years — to meet tax, accounting, and dispute-defence obligations. This includes a minimal fact-of-deletion audit record and transaction and tax records held by our payment processor, Stripe.

6. Health Data & HIPAA

Coutari.ai is a software platform for service-provider marketplace operations. We are not a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA), and we do not collect, process, or store protected health information (PHI) as defined under HIPAA.

Information you share through the platform — such as session preferences, booking details, and communications — is treated as general personal data under this Privacy Policy, not as health information. If you are a healthcare provider using Coutari for non-clinical scheduling or administrative purposes, you are responsible for ensuring that any PHI you choose to enter complies with your own HIPAA obligations and business associate agreements.

We do not perform medical diagnoses, process insurance claims, or maintain electronic health records. For questions about how health-related data should be handled, please contact us at support@coutari.ai.

7. Your Rights

You have the right to:

Access your personal information
Correct inaccurate information
Request deletion of your information
Object to processing of your information

8. India — Digital Personal Data Protection (DPDP)

If you are in India, the Digital Personal Data Protection Act, 2023 (DPDP Act) applies to our processing of your personal data. We act as a Data Fiduciary with respect to that processing and handle your data as described in this policy and as required by law. India is not the governing law of your agreement with us (see "Governing law" below), but the DPDP Act applies as an additional layer of protection for users in India.

Grievance officer (India): Rishu Kalra, Grievance & Privacy Officer, Pairox Pty Ltd, phone +61 402 614 311. Reach us at grievance@coutari.ai or privacy@coutari.ai, or by post at 4 Lorikeet St, Glenwood NSW 2768, Australia.

If you are in India and wish to exercise access, correction, erasure, or grievance rights under the DPDP Act, 2023, email one of the addresses above with the nature of your request. We acknowledge within 48 hours and issue a substantive response within 30 days in line with DPDP §13.

9. Cookies and Tracking

We use cookies and similar tracking technologies to keep the service running, remember your preferences, and understand how you use it. See our Cookie Notice for a full inventory and to manage your preferences. You can also instruct your browser to refuse or delete cookies.

10. Governing Law

This Privacy Policy and your use of Coutari.ai are governed by the laws of New South Wales, Australia, without prejudice to mandatory data-protection and consumer rights in your place of residence, including the India DPDP Act, 2023, the Australian Privacy Act 1988, the New Zealand Privacy Act 2020, and applicable United States state privacy laws.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date above.

12. Contact Us

If you have any questions about this Privacy Policy, email privacy@coutari.ai. You may also contact our Grievance & Privacy Officer, Rishu Kalra, Grievance & Privacy Officer, Pairox Pty Ltd, by email or by post at 4 Lorikeet St, Glenwood NSW 2768, Australia.

Coutari.ai is operated by Pairox Pty Ltd (ABN 82 154 477 728), 4 Lorikeet St, Glenwood NSW 2768, Australia.