Privacy Policy

Last updated: May 2026

1. Introduction

Flint Nova Technologies Pty Ltd (ACN: 697 098 043 / ABN: 15 697 098 043) operates Flint Journey, a career intelligence platform available at flintjourney.com (“the Service”). We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using Flint Journey you agree to the practices described in this policy.

2. Who We Are

3. Information We Collect

3.1 Information you provide directly

• Account information: Your name, email address, and password when you create an account
• Profile information: Your job title, company name, and career start date
• Career content: Moments, Story items, journal entries, job application details, and any other content you create within the Service
• Uploaded documents: Job descriptions and performance objectives you choose to upload
• Payment information: Billing details processed securely through Stripe — we do not store your card details

3.2 Information collected automatically

• Usage data: Pages visited, features used, and actions taken within the Service
• Device information: Browser type, operating system, and device type
• Log data: IP address, access times, and referring URLs
• Cookies: Session cookies required for authentication and preference cookies for your settings

3.3 Information from third parties

Calendar integrations: If you connect Google Calendar or Microsoft Outlook, we access your calendar events with your permission. We only read event data — we never modify your external calendar.

3.4 Workplace and third-party information you choose to provide

Because Flint Journey helps you record career moments, Your Content may include information about your workplace, employer, clients, customers, colleagues, projects, or other third parties. You are responsible for ensuring you have the right and authority to provide that information to the Service.

You should avoid entering personal information about others, sensitive information, confidential workplace information, client or customer data, privileged information, regulated information, trade secrets, or commercially sensitive information unless you are authorised to do so and your use is lawful.

4. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Flint Journey Service
• Generate AI-powered career insights and outputs based on your content
• Send you email notifications including your weekly digest, event reminders, and gap warnings (where you have opted in)
• Process payments and manage your subscription
• Respond to your support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with our legal obligations under Australian law

We do not:

• Sell your personal information to third parties
• Use your career content to train our AI models
• Share your information with advertisers
• Use your content for advertising or unrelated purposes

5. AI Processing

Flint Journey uses trusted third-party AI infrastructure and model providers to generate AI-powered career insights, summaries, and outputs. These providers may change over time to maintain or improve the quality, reliability, safety, security, availability, and suitability of the Service. When you request an AI feature:

• The relevant content from your account is sent to the selected AI provider for processing
• The AI provider processes that content to generate the requested output and support security, abuse prevention, reliability, and legal compliance in line with its applicable terms
• AI providers handle API inputs and outputs according to their applicable terms, privacy policies, and data retention practices
• We assess AI providers and, where available, configure our use of their APIs so Your Content is not used to train their general AI models unless we notify you or obtain any consent required by law
• AI processing may involve providers or infrastructure located outside Australia

Your content remains yours. Flint Nova Technologies does not use Your Content to train AI models, and we do not intentionally enable third-party AI model training on Your Content unless we notify you or obtain any consent required by law.

6. Disclosure of Your Information

We may share your information with:

Service providers

Third-party vendors who help us operate the Service, including:

• Supabase (database hosting)
• Vercel (application hosting)
• Trusted AI infrastructure and model providers (AI processing)
• Resend (email delivery)
• Stripe (payment processing)

All service providers are contractually required to protect your information and use it only to provide services to us.

Overseas processing

Some service providers, including hosting, infrastructure, email, payment, and AI providers, may process or store information outside Australia. This may include locations such as the United States, United Kingdom, European Union, or other jurisdictions where our providers or their infrastructure operate. Where personal information is disclosed or processed overseas, we take reasonable steps to use providers with appropriate privacy, security, and confidentiality protections.

Legal requirements

We may disclose your information if required by Australian law, court order, or government authority, or to protect the rights and safety of our users or the public.

Business transfers

If Flint Nova Technologies is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We do not disclose your information to any other third parties without your explicit consent.

7. Data Storage and Security

Your data is stored on servers located in Australia and the United States operated by Supabase and Vercel. We take reasonable steps to protect your information and implement security measures including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest
• Row-level security policies ensuring you can only access your own data
• Regular security reviews

No method of electronic transmission or storage is 100% secure. While we take all reasonable steps to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service.

• Archived items: Soft-deleted for 30 days before permanent deletion
• Account data: Retained for 90 days after account closure before permanent deletion
• Payment records: Retained for 7 years as required by Australian tax law
• Backup data: May persist for up to 30 days after deletion from primary systems

You may request deletion of your account and associated data at any time by contacting hello@flintjourney.com.

9. Your Rights

Under the Australian Privacy Principles you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request an export of your career content in a portable format
• Opt out: Unsubscribe from marketing and notification emails at any time

To exercise any of these rights contact us at hello@flintjourney.com. We will respond within 30 days.

If you are not satisfied with our response you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Cookies

We use cookies to:

• Maintain your login session
• Remember your preferences
• Analyse usage patterns to improve the Service

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Service.

We do not use third-party advertising cookies.

11. Children’s Privacy

Flint Journey is not directed at children under the age of 15. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information please contact us at hello@flintjourney.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and by posting a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or to exercise your rights:

For formal privacy complaints please contact the Office of the Australian Information Commissioner:

This Privacy Policy was last updated in May 2026 and applies to all users of Flint Journey.