4. Collection Notice

4.1 Who Is Collecting Your Information

Supreme AI Pty Ltd (‘Supreme AI’), ABN No. .... , of [Address], Queensland Australia. Contact: [email protected].

4.2 What Personal Information We Collect

We collect the following categories of personal information when you register for, or use, the Supreme AI Platform:

  1. Identity and contact information: name, business name, ABN, professional registration, email, telephone, address
  2. Authentication data: username, hashed password, multi-factor authentication credentials
  3. Customer Data: identity documents, beneficial ownership records, risk assessments, and compliance records of your clients that you upload or generate on the Platform
  4. Technical data: IP address, device identifiers, browser information, and usage logs
  5. Communications: support interactions, AI chatbot conversations, and correspondence

4.3 Why We Collect It — Primary Purposes

  1. To create your account and verify your identity
  2. To provide and operate the AML/CTF compliance Platform and its features
  3. To support your obligations as a reporting entity under the AML/CTF Act 2006 (Cth)
  4. To meet our own legal and regulatory obligations, including under the AML/CTF Act, Privacy Act, and taxation laws
  5. To communicate with you about your account, service updates, and material changes
  6. With your consent, to send marketing and product update communications

4.4 Authorisation for Collection

Collection is authorised primarily by:

  1. Your consent at the point of registration and onboarding
  2. Contractual necessity, to fulfil the agreement between you and Supreme AI
  3. Legal obligation, including requirements under the AML/CTF Act 2006 (Cth), AML/CTF Rules Instrument (No.1) 2007, and the Privacy Act 1988 (Cth)

4.5 Consequences of Not Providing Information

If you choose not to provide required information, we may be unable to create your account, provide the Platform, or maintain specific features. Where information relates to Customer Data required by the AML/CTF Act (for example, identity verification of a client before providing a designated service), failure to collect it may expose you to a breach of your obligations as a reporting entity under the AML/CTF Act.

4.6 Who We May Disclose Your Information To

  1. Cloud infrastructure and security providers under contractual obligations
  2. Identity verification, screening, and payments providers when you activate those integrations
  3. Our legal, audit, and insurance advisers under confidentiality obligations
  4. AUSTRAC, the OAIC, the ATO, or other regulators or law enforcement where required by law
  5. A successor entity in a merger or acquisition, subject to equivalent privacy commitments

4.7 Cross-Border Disclosure

Production data is stored in Australia. Limited metadata may be accessed by offshore support personnel of our service providers. We comply with APP 8 in relation to any overseas disclosure and take reasonable steps to ensure equivalent protections apply.

4.8 How to Access, Correct, or Complain

You may request access to or correction of your personal information, or make a privacy complaint, by contacting our Privacy Officer at [email protected]. Our full Privacy Policy sets out your rights and how to escalate an unresolved complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.