Privacy policy.

This Privacy Policy explains how Domato AI Pty Ltd ("Domato", "we", "us") collects, uses, stores, and discloses personal information when you use the Domato PHN portal at phn.domato.ai or any of its sub-pages. We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect.

When you submit the enquiry form

The form on /demo and the modal across the portal collects:

• Your name
• Your work email address
• Your role (CEO, Strategy Lead, Analyst, etc.)
• The PHN you're enquiring on behalf of
• Free-text fields you complete (focus areas, message)
• The page you submitted from + any ?ref= tracking parameter we sent in outbound email

Server logs

Standard request metadata — IP address, user agent, request path, timestamp — is logged by Azure Static Web Apps and Application Insights. We retain these logs for diagnostic purposes for up to 90 days.

What we don't collect

We don't use third-party advertising trackers, cross-site cookies, or fingerprinting libraries. The portal sets no cookies; all view state is held in the URL and in browser session memory.

How we use it.

• To reply to you. Form submissions trigger a notification to support@domato.ai and an automated reply to your address.
• To prepare a personalised demo or quote. If you ask for one, we may research your PHN's public information to tailor the response.
• To improve the product. Aggregated, non-identifying access patterns inform what we build next.

How we store and protect it.

Form submissions are emailed to support@domato.ai (Google Workspace, encrypted in transit and at rest). We do not maintain a separate CRM at this stage; the email inbox is the system of record. Access is restricted to Domato directors.

The portal itself runs on Azure Static Web Apps in Microsoft's East Asia region. Backend processing (the /api/lead Function) runs in the same region. Public data used to render PHN catchments is hosted in Azure's Sydney region.

Sharing.

We do not sell, rent, or lend your personal information. We disclose information only:

• To you, on request, regarding your own enquiry
• To our infrastructure providers (Microsoft Azure, Google Workspace, GitHub) under their respective Data Processing Agreements
• If required by Australian law or a duly-issued legal request

Your rights.

Under the Australian Privacy Principles you can:

• Request access to personal information we hold about you
• Ask us to correct or delete it
• Withdraw consent to further contact
• Complain to the Office of the Australian Information Commissioner (OAIC) if you're not satisfied with our response

To exercise any of these rights, email support@domato.ai. We aim to respond within five business days.

Public data on the portal.

All data shown for Sydney North Health Network or any other PHN catchment is sourced from publicly published datasets (ABS, AIHW, ACARA, DSS, NDIS, ATO, TfNSW). The portal does not display personal information about individuals.

Changes.

We may update this policy from time to time. The "Last updated" stamp at the top of this page reflects the most recent revision.