Privacy Policy

Last updated: 2026. aus.contact is operated by Directory.com.au Pty Ltd (ABN 68 090 816 461). This policy explains what we collect and how we protect it, consistent with the Australian Privacy Act 1988.

What we collect

• Account details — the email address and password you register with (your password is stored only as a secure one-way hash).
• Email connection details — the IMAP host, port, username and password for each mailbox you connect.
• AI keys — an AI provider API key, if you choose to supply your own.
• Your instructions and settings — the guidance you write for the assistant and your sorting, drafting and alert preferences.
• Email content — we read messages in the mailboxes you connect in order to sort, flag and draft. We store only what's needed to show your inbox and act on it.

How your credentials and keys are protected

IMAP passwords and AI keys are encrypted at rest using strong (AES-256-GCM) encryption. The encryption key is stored outside the public web area, not in the database. Credentials are decrypted only momentarily, in memory, to connect to your mailbox or AI provider — and are deleted when you disconnect an account or close your profile.

How email content is processed by AI

To sort, flag and draft, message content is sent to an AI provider. If you supply your own AI key, your email is processed under your key and your provider's terms — it does not pass through our AI account. If you use our built-in AI, message content is sent to our AI provider (Anthropic) under our account solely to generate the sorting decision, flag or draft for you, and is not used to train models. We don't sell your data or use your email for advertising.

Sending on your behalf

We never send email from your account unless your settings explicitly authorise automatic replies for a defined situation. By default, replies are saved as drafts for you to review and send yourself.

Retention & deletion

You can disconnect a mailbox at any time, which removes its stored credentials. You can delete your account, which removes your profile, connected accounts, keys and stored email metadata. Contact us to request access to, correction of, or deletion of your information.

Contact-form data

Messages sent through our contact form are delivered to our inbox by our own server (no third-party form service) and kept only as long as needed to reply.