Privacy Policy

Last updated: 13 April 2026 · ABN: 14 402 962 090

DISCLAIMER: This is a draft and should be reviewed by a qualified legal professional before use.

1. Introduction

Lorevik (“we”, “us”, “our”) operates an AI-first knowledge asset platform at lorevik.com (the “Platform”). This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Where applicable, this policy also addresses obligations under the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: Name and email address when you register
• Payment information: Billing details processed through Stripe (we do not store full credit card numbers on our servers)
• Creator information: Additional details provided during the creator application process
• Content: Any content you upload, publish, or submit to the Platform

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent on the Platform, interaction patterns
• Device information: Browser type, operating system, device type, screen resolution
• Log data: IP address, access times, referring URLs, error logs
• Cookies and similar technologies: As described in Section 8

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing the service: Operating your account, processing transactions, delivering content
• Payment processing: Facilitating purchases and creator payouts through Stripe
• Communication: Sending account-related notifications, updates, and support responses
• Improvement:Analysing usage patterns to improve the Platform's features and performance
• Security: Detecting and preventing fraud, abuse, and security incidents
• Legal compliance: Meeting our obligations under applicable laws and regulations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you requested
• Legitimate interests: Analytics, security, and Platform improvement
• Consent: Marketing communications (where applicable)
• Legal obligation: Compliance with applicable laws

5. How We Share Your Information

We do not sell your personal information. We share information only with the following categories of third parties, solely for the purposes described:

We may also disclose information where required by law, regulation, or legal process.

6. Data Storage and Security

• Data is stored on servers operated by our third-party service providers (primarily Supabase and Vercel)
• We implement industry-standard security measures including encryption in transit (TLS) and at rest
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• We conduct regular reviews of our data handling practices

Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days for backup and recovery purposes, and as required to comply with legal obligations (e.g., tax records).

8. Cookies

We use cookies and similar technologies for:

• Essential cookies: Required for the Platform to function (authentication, security)
• Analytics cookies: To understand how users interact with the Platform
• Preference cookies: To remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

9. Your Rights

9.1 All Users

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Withdraw consent for optional data processing

9.2 Additional Rights for EEA Residents (GDPR)

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

9.3 Additional Rights for California Residents (CCPA)

• Right to know what personal information is collected and how it is used
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

10. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including Australia and the United States (where our service providers operate). We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Children's Privacy

The Platform is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the “Last updated” date. Your continued use of the Platform after changes constitutes acceptance of the revised policy.

13. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us using the contact details below. We will respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Contact Us

For privacy-related enquiries or to exercise your rights:

• Email: privacy@lorevik.com
• Business: Lorevik (ABN 14 402 962 090)