Effective date: 7 July 2026 · Last updated: July 2026
This Privacy Policy applies to all personal information collected by "DANIEL ROY FERNYHOUGH" trading as "CENTRAL AI" (ABN 24 394 621 830)("Central AI", "we", "us" or "our") via centralai.app and related services (the "Platform"). This Privacy Policy applies in addition to our Platform Terms.
This Privacy Policy explains:
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs), where they apply to us.
The Privacy Act defines types of information, including Personal Information and Sensitive Information.
Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether true or not and whether recorded in material form or not. If information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be subject to this Privacy Policy.
Sensitive Information includes information or opinion about racial or ethnic origin, political opinions, religious beliefs, trade union membership, criminal record, or health information. We generally do not collect Sensitive Information. When we do, we use it only for the primary purpose, for a directly related secondary purpose, or with your consent or as required or authorised by law.
We only collect personal information that helps us operate the Platform. We will not collect additional categories without notifying you first.
When you visit or use the Platform, we may automatically collect:
When you perform certain functions on the Platform, we may collect:
This information may be collected when you:
Where reasonable and practicable, we collect personal information directly from you. We may also receive information from third parties (for example, payment processors such as Stripe). In such cases, we take steps to make you aware of the information provided.
We use personal information only for the purposes described in this Privacy Policy or as indicated on relevant pages of the Platform.
Automatically collected data is used to:
Data you provide is used to:
Some of these uses involve automated decision-making, including admin review, safety checks, and account enforcement. See Section 7.1 for details.
Our primary legal framework is Australian privacy law. If you are in the European Union or United Kingdom and the GDPR or UK GDPR applies to our processing of your personal data, we rely on one or more of the following legal bases:
We have not appointed a Data Protection Officer under Article 37 of the GDPR because we do not fall within the categories of controllers required to do so. "DANIEL ROY FERNYHOUGH" trading as "CENTRAL AI" is the privacy contact for all enquiries.
We do not sell your personal information. We may disclose personal information to members of our organisation who reasonably need access to achieve the purposes in this Privacy Policy, and to the following categories of third parties:
We may share the following types of information with those parties:
Third parties may access personal information only as reasonably necessary for payment processing, hosting, AI inference, support, analytics, security, fraud prevention, and legal compliance. We may also disclose information where required by law, for legal proceedings, to protect our rights, or in connection with a business sale or restructuring.
If you follow links to third-party websites, their privacy practices apply - we are not responsible for those sites.
We use third-party AI providers to operate admin review, agent setup, compatibility analysis, and AI agent features. Personal information and agent-related content may be processed-including on a temporary or transient basis-by providers such as OpenRouter, DeepSeek, OpenAI, and Anthropic, and may be transferred to and processed in countries including the United States and China. Even where data is not permanently stored on our servers, transient processing by these providers constitutes collection and handling of personal information under applicable privacy law. We take reasonable steps to ensure overseas recipients handle information in accordance with applicable privacy law and our agreements with those providers.
Under reforms to the Privacy Act 1988 (Cth), APP entities must disclose where automated systems make, or substantially assist in making, decisions that could significantly affect an individual. This obligation applies from 10 December 2026.
We may use computer programs and AI systems to make, or substantially assist in making, decisions that affect your rights or interests on the Platform. Specifically, we use automated systems to:
These systems may process the following kinds of personal information:
Significant automated outcomes (such as rejecting an agent listing or restricting account access) may involve human review in appropriate cases. If you believe an automated decision has significantly affected you, contact us at "support@centralai.app" to request information about the decision and, where required by law, human review.
Our Developer Terms disclose that removed agents are not offered to new customers, while existing clients may continue using installed agents. Do not upload confidential third-party information you are not authorised to share.
If you list agents on the Platform, the following additional practices apply:
We disclose personal information to overseas recipients, including in the United States and China, and potentially other countries where our cloud hosting, payment, database, and AI service providers operate.
Where we disclose personal information overseas, we take reasonable steps to ensure recipients handle it in a manner consistent with the Australian Privacy Principles and our agreements with those providers. If a recipient is in a jurisdiction without data protection laws as comprehensive as Australia's, we take reasonable steps to secure contractual commitments for appropriate handling.
If you are in the EU or UK and the GDPR or UK GDPR applies, we will only transfer your personal data internationally where permitted under applicable law, including through adequacy decisions or appropriate safeguards such as standard contractual clauses.
We use technical and organisational measures designed to protect personal information, including encryption in transit (HTTPS/TLS), secure cloud infrastructure, role-based access controls, authentication safeguards, and restricted access on a need-to-know basis. Payment information is processed by Stripe; we do not store full credit card numbers on our servers. No method of transmission or storage over the internet is completely secure.
We retain personal information for as long as needed to provide the Platform, meet legal and accounting obligations, resolve disputes, and enforce our agreements. Most records will be kept for a maximum of 7 years to fulfil tax and record-keeping obligations. We may retain certain records (for example, agreement acceptance logs) after account closure where required by law. When information is no longer required, we take reasonable steps to destroy, anonymise, or de-identify it.
Under the Australian Privacy Principles, you may request access to or correction of personal information we hold about you in certain circumstances (APP 12 and APP 13). Contact us using the details below.
If the GDPR or UK GDPR applies to you, you may also have rights to be informed, access, rectification, erasure, restriction, data portability, objection, and rights relating to automated decision-making (including profiling), subject to applicable law.
Under Australian privacy law (including reforms taking effect from 10 December 2026), you may request information about automated decisions that significantly affect you and, where required by law, human review of those decisions. See Section 7.1.
To exercise your rights, contact "support@centralai.app" or use our contact form.
In addition to your access and correction rights, you may opt out of:
A cookie is a small file stored on your device by a website. We use cookies and similar technologies to operate the Platform. Necessary cookies are always active. Non-essential cookies (including analytics cookies) are only enabled after your consent through our cookie notice when you first use the Platform after signing in.
If you reject non-essential cookies, the Platform continues to work normally; only optional analytics cookies are disabled. You can also clear or block cookies in your browser, but disabling necessary cookies may affect sign-in and core Platform features.
We use the following types of cookies:
Do Not Track ("DNT") is a privacy preference you can set in certain browsers. We do not track users over time and across third-party websites, and we do not respond to browser-initiated DNT signals. We cannot guarantee how third parties who interact with the Platform will respond to DNT signals.
The Platform is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from someone under 18, please contact us immediately and we will delete it as soon as reasonably practicable.
If you have a complaint about how we handle your personal information, contact us at "support@centralai.app". All complaints will be considered by "DANIEL ROY FERNYHOUGH" trading as "CENTRAL AI". If we agree your complaint is well founded, we will take appropriate steps to address it.
If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are in the EU or UK and the GDPR or UK GDPR applies, you may also lodge a complaint with the supervisory authority in your country of residence (for example, the ICO in the United Kingdom).
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective or last-updated date. Where changes are material, we may notify you by email or through the Platform. Continued use after notification constitutes acceptance of the updated policy.
For privacy questions, access or correction requests, or complaints, contact:
Related policies: Platform Terms · Developer Terms · Data Processing Agreement