Privacy Policy

1. About This Policy

Purity AI ("we", "us", "our") is a trading name of Optimum Labs Pty Ltd (ACN 692 118 764, ABN 60 692 118 764) based in Brisbane, Queensland, Australia.

We provide AI-powered patient communication tools to dental, allied health, and medical imaging practices, including AI website chat assistants and booking inquiry management. This Privacy Policy explains how we collect, use, store, and protect information in connection with our services.

We are committed to complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What Information We Collect

From Our Clients (Healthcare Practices)

• Business name, ABN, and contact details
• Practice information (hours, services, pricing, team details)
• Website and booking system details
• Billing and payment information

From Patients (End Users of Our Services)

• Name
• Phone number
• Preferred appointment date, time, and clinic location
• Type of scan or service being inquired about (e.g. "CT scan", "ultrasound", "check-up")
• Chat messages sent to the AI assistant

3. How We Use Information

We use the information we collect to:

• Deliver and maintain our services (AI chat assistant, booking inquiry management)
• Respond to patient enquiries via the AI chat assistant
• Forward booking inquiry details to the relevant healthcare practice for follow-up
• Communicate with our clients about their account and services
• Improve and maintain the reliability of our systems

4. How We Handle Patient Data

We act as a data processor on behalf of our clients (healthcare practices), who remain the data controllers and owners of their patient data.

• Patient data is only used for the purpose of delivering our services to the healthcare practice.
• We do not sell, rent, or share patient data with third parties for marketing or advertising purposes.
• Patient conversations with the AI chat assistant are processed in real-time and are not permanently stored by Purity AI.
• Patient data is not used to train AI models.
• Booking inquiry details (name, phone number, appointment preferences) are forwarded to the healthcare practice and are not retained by us beyond delivery.

5. Third-Party Services

To deliver our services, we use the following third-party providers:

• Anthropic (Claude AI) — Powers the AI chat assistant. Data is processed under Anthropic's enterprise API terms and is not used for model training. See Anthropic's Privacy Policy.
• Cloudflare — Provides secure infrastructure and content delivery. See Cloudflare's Privacy Policy.
• Google (Workspace) — Used for business communications and data management. See Google's Privacy Policy.

All third-party providers are industry-leading platforms with established security and privacy practices.

6. Data Storage & Security

• All data is transmitted over encrypted (HTTPS/TLS) connections.
• Appointment data is stored in access-controlled environments provided by our third-party infrastructure partners.
• We implement reasonable technical and organisational measures to protect data against unauthorised access, loss, or misuse.
• Access to client and patient data is restricted to authorised personnel only.

7. AI-Assisted Interactions

Our website chat assistant is powered by artificial intelligence provided by Purity AI. This section explains how information is handled during chatbot interactions.

Information collected during chatbot conversations

The AI assistant may collect basic contact and scheduling information during conversations, including your name, phone number, preferred appointment date and time, preferred clinic location, and the type of scan or service you are inquiring about. This information is collected solely for the purpose of facilitating appointment inquiries and is forwarded to the relevant clinic's reception team for follow-up.

How conversations are processed

Chatbot conversations are processed in real time through a third-party AI service provider (Anthropic). Anthropic does not use API-submitted data to train its models and does not retain conversation inputs or outputs beyond its standard processing and safety review period. For further details, refer to Anthropic's data usage policy.

Conversation storage

Chatbot conversations are not stored by Purity AI after the session ends. Once you close the chat window, the conversation content is no longer accessible or retained. Booking inquiry details (name, phone number, appointment preferences) that are submitted through the chatbot are forwarded to the clinic and may be retained by the clinic in accordance with their own privacy practices.

Clinical and health information

The AI assistant is not designed to collect, store, or process clinical or health information. The assistant does not provide medical advice, interpret imaging results, or discuss symptoms or diagnoses. If clinical or health-related information is provided by a user during a conversation, the assistant will not engage with or act upon that information and will redirect the user to their referring doctor or the clinic directly.

8. Data Retention

• Appointment and booking inquiry data is retained for the duration of our service agreement with the healthcare practice.
• Upon termination of services, client data is exported to the practice and deleted from our systems within 30 days.
• AI chat conversations are not permanently stored.
• Booking inquiry details forwarded to the practice are not retained by Purity AI beyond delivery.

9. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Request access to any personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

If you are a patient, please note that your healthcare practice is the primary controller of your data. For requests related to your appointment data, we recommend contacting your healthcare practice directly.

10. Data Breaches

In the event of a data breach that is likely to result in serious harm, we will:

• Notify affected clients within 48 hours
• Cooperate fully with any investigation
• Comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act
• Take immediate steps to contain and remediate the breach

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact Us