Privacy Policy

Last updated: June 2026

1. Introduction

Flint Nova Technologies Pty Ltd (ACN: 697 098 043 / ABN: 15 697 098 043) operates Flint Journey, a career intelligence platform available at flintjourney.com (“the Service”). We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using Flint Journey you agree to the practices described in this policy.

2. Who We Are

2.1 Who this policy applies to

This Privacy Policy applies to people who visit our website, create or use a Flint Journey account, join a waitlist or invite program, receive Flint emails, contact us, or access selected records shared through Flint Journey.

Account holders control the career content they create and choose to share. Shared-record recipients may only receive access to the limited content selected by the account holder, together with access and security information needed to provide that sharing experience.

3. Information We Collect

3.1 Information you provide directly

• Account information: Your name, email address, and password when you create an account
• Profile information: Your job title, company name, and career start date
• Career content: Moments, Story items, journal entries, job application details, and any other content you create within the Service
• Uploaded documents: Job descriptions and performance objectives you choose to upload
• Payment information: Billing details processed securely through our payment processor — we do not store your card details

3.2 Information collected automatically

• Usage data: Pages visited, features used, and actions taken within the Service
• Device information: Browser type, operating system, and device type
• Log data: IP address, access times, and referring URLs
• Cookies: Session cookies required for authentication and preference cookies for your settings

3.3 Information from third parties

Calendar integrations: If you connect Google Calendar or Microsoft Outlook, we access your calendar events with your permission. We only read event data — we never modify your external calendar.

3.4 Workplace and third-party information you choose to provide

Because Flint Journey helps you record career moments, Your Content may include information about your workplace, employer, clients, customers, colleagues, projects, or other third parties. You are responsible for ensuring you have the right and authority to provide that information to the Service.

You should avoid entering personal information about others, sensitive information, confidential workplace information, client or customer data, privileged information, regulated information, trade secrets, or commercially sensitive information unless you are authorised to do so and your use is lawful.

4. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Flint Journey Service
• Generate AI-powered career insights and outputs based on your content
• Send you email notifications including your weekly digest, event reminders, and gap warnings (where you have opted in)
• Process payments and manage your subscription
• Respond to your support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with our legal obligations under Australian law

We do not:

• Sell your personal information to third parties
• Use your career content to train our AI models
• Share your information with advertisers
• Use your content for advertising or unrelated purposes

5. AI Processing

Flint Journey uses trusted third-party AI infrastructure and model providers to generate AI-powered career insights, summaries, and outputs. These providers may change over time to maintain or improve the quality, reliability, safety, security, availability, and suitability of the Service. When you request an AI feature:

• The relevant content from your account is sent to the selected AI provider for processing
• The AI provider processes that content to generate the requested output and support security, abuse prevention, reliability, and legal compliance in line with its applicable terms
• AI providers handle API inputs and outputs according to their applicable terms, privacy policies, and data retention practices
• We assess AI providers and, where available, configure our use of their APIs so Your Content is not used to train their general AI models unless we notify you or obtain any consent required by law
• AI processing may involve providers or infrastructure located outside Australia

Your content remains yours. Flint Nova Technologies does not use Your Content to train AI models, and we do not intentionally enable third-party AI model training on Your Content unless we notify you or obtain any consent required by law.

For more detail about AI inputs, outputs, safeguards, and your responsibilities, see our AI Notice.

6. Disclosure of Your Information

We may share your information with:

Service providers

We use trusted third-party service providers to help operate Flint Journey, including providers for:

• Application and database hosting
• Email delivery
• Payment processing
• AI infrastructure and model processing
• Security, analytics, customer support, and operational services

These providers may process personal information only as needed to provide services to us and are required to protect that information through contractual, technical, and organisational safeguards.

Overseas processing

Some service providers may process or store information outside Australia, including in countries such as the United States, the United Kingdom, the European Union, or other jurisdictions where our providers or their infrastructure operate. Where personal information is disclosed or processed overseas, we take reasonable steps to use providers with appropriate privacy, security, and confidentiality protections.

Legal requirements

We may disclose your information if required by Australian law, court order, or government authority, or to protect the rights and safety of our users or the public.

Sharing initiated by you

If you create a shared record or send a share email, we use the information you provide to make the selected content available to the intended recipient. You are responsible for choosing what to share and ensuring you have the right to share it.

Business transfers

If Flint Nova Technologies is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We do not disclose your information to any other third parties without your explicit consent.

7. Data Storage and Security

Your data may be stored on servers located in Australia, the United States, or other jurisdictions where our hosting and infrastructure providers operate. We take reasonable steps to protect your information and implement security measures including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest
• Row-level security policies ensuring you can only access your own data
• Regular security reviews

No method of electronic transmission or storage is 100% secure. While we take all reasonable steps to protect your information, we cannot guarantee absolute security.

If we become aware of a data breach that is likely to result in serious harm, we will assess and respond in accordance with the Notifiable Data Breaches scheme under Australian law, including notifying affected individuals and the Office of the Australian Information Commissioner where required.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service.

• Archived items: Soft-deleted for 30 days before permanent deletion
• Account data: Retained for 90 days after account closure before permanent deletion
• Shared record access records: Retained while the share remains active and for a reasonable period afterwards for security, audit, and support purposes
• Waitlist and invite records: Retained while needed to manage access, prevent duplicate invites, honour trial periods, and maintain launch records
• Email delivery records: Retained as needed to deliver messages, manage preferences, troubleshoot delivery, and keep unsubscribe records
• AI usage records: Retained as needed to operate usage allowances, investigate abuse or errors, manage costs, and improve reliability
• Analytics and log data: Retained for a reasonable period to understand product usage, debug issues, maintain security, and improve the Service
• Payment records: Retained for 7 years as required by Australian tax law
• Backup data: May persist for up to 30 days after deletion from primary systems

You may request deletion of your account and associated data at any time by contacting hello@flintjourney.com.

9. Your Rights

Under the Australian Privacy Principles you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request an export of your career content in a portable format
• Opt out: Unsubscribe from marketing and notification emails at any time

To exercise any of these rights contact us at hello@flintjourney.com. We will respond within 30 days.

If you are not satisfied with our response you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Cookies

We use cookies to:

• Maintain your login session
• Remember your preferences
• Analyse usage patterns to improve the Service

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Service.

We do not use third-party advertising cookies.

For more detail, see our Cookie Notice.

11. Children’s Privacy

Flint Journey is not directed at children under the age of 15. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information please contact us at hello@flintjourney.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and by posting a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or to exercise your rights:

For formal privacy complaints please contact the Office of the Australian Information Commissioner:

This Privacy Policy was last updated in June 2026 and applies to all users of Flint Journey.