Privacy Policy

01Who we are and what this covers

Raku Technologies Pty Ltd (ABN 80 635 175 843), "Raku", "we" or "us", is an Australian company based in Melbourne. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

This policy covers:

• this website, raku.so, including its forms, its assistant and Raku's card;
• Sight, our product for checking work from photos: the console at sight.raku.so, its API and its SDK;
• our dealings with you by email, phone or in person.

Sometimes a business uses Sight to check photos taken by its own staff or contractors. In that case the business decides what is collected and why, and we handle the photos on its instructions. If you are one of those staff or contractors, the business you work for is the right first contact about your information, and we will help it answer you.

02What we collect

Information you give us

• Enquiries and the waiting list. Your name, email address, company, industry, and whatever you write in the message.
• The demo. If you unlock more photos or ask for a consult: your email address and, if you give them, your mobile number, name, company, industry, and what you tell us about what you want checked.
• The website assistant. The messages you type. We keep a record of the conversation only if you agree when asked.
• A Sight account. Your name and email address. If you sign in with Google, GitHub, Microsoft or Apple, the basic profile details that provider shares with us, such as your name, email address and profile picture.
• What you put into Sight. Photos, labels, check templates, and the names and roles of people you invite to a project.

Information collected as you use our services

• On the website. Standard technical data: your approximate location from your IP address, browser and device type, the pages you visit, how you arrived, and which version of a page you were shown.
• On the demo. Before a photo is checked, a service looks at technical characteristics of your browser and device to tell a person from a script, and may ask you to tick a box. To limit how many photos one visitor can check, we keep a count for a day against a scrambled form of your IP address; the address itself is not kept.
• In Sight. A record of what was done and when: sign-ins, photos sent, checks run, results, and which API key asked for them. We use this to run the service, show you your usage and work out what you owe.
• At sign-in. Security signals: your IP address, your browser's user agent, and technical characteristics of your browser and device. These are used to tell a genuine sign-in from an attack, and for nothing else.
• Raku's card in Apple Wallet. If you add the card, Apple gives us an identifier for the device and a token that lets us update the card. We do not learn your name, number or Apple ID. Removing the card removes the registration.

We do not ask for sensitive information, such as health information or information about racial or ethnic origin, and we ask that you do not send it to us through a form or the assistant.

03Photos sent to Sight

Sight exists to look at photos of work. Those photos can show people, vehicles, street numbers or the inside of a home or workplace, and can carry details such as when and where they were taken.

• Sight is built to find and check things: equipment, parts, labels, readings. It is not built to identify people, and we do not use it to recognise faces.
• A customer's photos are used to check that customer's work and to train that customer's models. We do not use them to train a model for a different customer unless the customer has agreed.
• We do not use customers' photos for advertising, and we do not sell or publish them.
• Our engineers look at a customer's photos only as far as needed to label them, train and score models, fix a problem, or answer a question the customer has asked.
• A customer can remove a photo, and can ask us to delete its photos, labels and models.
• A photo you give the demo on this website is sent to Sight and checked. Sight keeps a record of what was found, not the photo. Even so, do not give the demo a photo that is private or shows people who would mind.

If you appear in a photo that a business sent to Sight and want to know more, contact that business. You can also write to us and we will pass your request on.

04How we use it

• To provide Sight: check photos, train and run models, return results, and keep a record of them.
• To reply to you and arrange what you asked about.
• To run, maintain and secure the website and Sight, including detecting and preventing misuse.
• To measure usage, bill for it, and keep the records the law requires.
• To understand how the website and Sight are used, and improve them.
• To tell you about changes to a service you use. We send news about Raku only if you asked for it or would reasonably expect it, and every such message can be switched off.

We do not make decisions about you by automated means that have a legal or similarly significant effect on you.

05Who we share it with

We never sell personal information, and we never share it for anyone else's marketing. We share it only with:

• Service providers that run parts of our services for us, listed below. They may use the information only to provide that service to us.
• Your own organisation. In Sight, the people in your project can see what you do there, according to their role.
• Professional advisers such as our lawyers and accountants, under a duty of confidence.
• Authorities, where the law requires it.
• A buyer or successor, if Raku or its business is sold or reorganised, on the same terms as this policy.

06Where it is kept

Photos sent to Sight, the labels on them, the models trained on them and the results of every check are stored in Australia. Finding and counting things in a photo, training, and the rules that decide a verdict all run in Australia.

Two things can involve other countries. First, some checks read text from a photo, such as a serial number. That step is optional, and the customer chooses whether it runs in Australia or overseas. Second, account details, website analytics and the website assistant are handled by the providers in the table above, some of which are overseas, including in the United States and the European Union.

Where information goes overseas, we take reasonable steps to make sure it is handled in a way that is consistent with this policy and with Australian privacy law.

See exactly what runs where

07How long we keep it

• Enquiries and waiting-list details: for as long as we are in touch about them, and then until you ask us to delete them.
• Details given on the demo: as for enquiries.
• Photos given to the demo: not kept. The record of what was found is kept with our usage records.
• Sight accounts: while the account is open.
• Photos, labels, models and results: while the customer's account is open, or until the customer removes them or asks us to.
• Usage and billing records: for as long as tax and company law require.
• Security logs: for as long as they are useful for protecting accounts.

When we no longer need information, we delete it or remove what identifies you from it.

08How we protect it

• Information is encrypted on its way to and from our services.
• Photos and models are kept in private storage and reached only through links that expire.
• Access to Sight is by role, and each API key works only for the account it belongs to.
• Sign-in is protected against automated attacks, password guessing and account takeover.
• Within Raku, access to customer information is limited to the people who need it for their work.

No system is perfectly secure. If a data breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

09Cookies and analytics

We use PostHog to understand how raku.so is used: which pages are visited, and which version of the homepage a visitor saw. It is set up without cookies, honours your browser's "Do Not Track" setting, and does not record your screen. That data is processed in the European Union.

Sight uses essential cookies to keep you signed in. Neither raku.so nor Sight uses advertising cookies or shares data with advertising networks.

10Your rights and choices

You can ask us to:

• show you the personal information we hold about you;
• correct it if it is wrong or out of date;
• delete it, where the law does not require us to keep it;
• stop sending you anything that is not essential to a service you use.

You may deal with us without giving your name, or under a pseudonym, where that is practical: for example, when asking a general question.

Email [email protected]. We answer within 30 days and do not charge for a request. We may need to confirm who you are first. If you live outside Australia, your local law may give you further rights, and we will honour a request made under it.

11Children

Our services are for businesses and the people who work for them. They are not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, tell us and we will delete it.

12Changes to this policy

When we change this policy we change the date at the top. If a change matters to how your information is handled, we will tell Sight account holders by email before it takes effect.

13Contact and complaints

Raku Technologies Pty Ltd
ABN 80 635 175 843
Melbourne, Australia
Privacy enquiries: [email protected]

If you think we have mishandled your information, write to us first. We will look into it and reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.