Privacy Policy
Effective date: 15 September 2026
1. About this policy
This Privacy Policy explains how CEOFlowStudio handles personal information collected through the CEOFlowStudio public website, including website enquiries.
It applies to the public CEOFlowStudio website only. Separate privacy, contractual and data-handling arrangements may apply to Aureqo products, pilots, demonstrations or customer environments.
2. Who operates this website
This website is operated by CEOFlowStudio (ABN 84 347 045 037), an Australian registered business.
Aureqo is a customer-facing software brand of CEOFlowStudio.
Privacy questions and requests can be sent to:
contact@ceoflowstudio.com.au
3. Information we collect
Depending on how you use the website, we may collect information such as:
- your name;
- your email address;
- your organisation or business details;
- information you include in an enquiry or message;
- correspondence between you and CEOFlowStudio; and
- limited technical and security information associated with a website request, such as network address, browser or device information, timestamps and anti-abuse signals.
We only ask for information reasonably related to the enquiry or service being requested.
4. Information you should not submit
The public website and enquiry forms are not intended for patient, clinical or regulated laboratory information.
Please do not submit:
- patient or health information;
- laboratory results;
- credentials or passwords;
- API keys or other secrets;
- confidential customer records;
- regulated production data; or
- information you are not authorised to disclose.
If information of this kind is submitted unexpectedly, CEOFlowStudio may limit its use and delete it where reasonably practicable, subject to any applicable legal or security requirements.
5. How information is collected
Personal information may be collected when you:
- submit a website enquiry;
- contact CEOFlowStudio by email;
- request information about a product or service; or
- otherwise communicate with CEOFlowStudio.
Technical information may also be generated automatically when the website processes a request, including information required for hosting, security, rate limiting, troubleshooting and bot protection.
6. Why information is used
We may use personal information to:
- respond to enquiries;
- communicate with you about the subject of your request;
- understand interest in CEOFlowStudio or Aureqo products;
- arrange discussions, demonstrations or potential pilot activities;
- operate, secure and troubleshoot the website;
- prevent spam, misuse and automated abuse;
- maintain appropriate business records;
- investigate security or service issues; and
- comply with applicable legal obligations.
Submitting an enquiry does not automatically subscribe you to unrelated marketing communications.
7. Service providers
CEOFlowStudio uses service providers to operate the website and process enquiries.
These currently include:
- Vercel for website hosting and application execution;
- Supabase for PostgreSQL database services;
- Resend for transactional email delivery;
- Cloudflare Turnstile for bot and abuse protection; and
- VentraIP for business email services.
Cloudflare Turnstile processes technical and security signals used to distinguish legitimate users from automated traffic. CEOFlowStudio does not intentionally provide the contents of an enquiry form to Turnstile for that purpose.
8. Processing locations and overseas providers
CEOFlowStudio uses Australian-hosted infrastructure where reasonably appropriate. The primary Supabase database for this website is configured in Sydney, Australia, and relevant Vercel application functions are configured for Sydney.
Some providers operate global infrastructure or use overseas subprocessors. As a result, personal information or related technical information may be processed outside Australia, including in the United States, and potentially in other locations used by those providers and their subprocessors.
Provider locations and subprocessor arrangements may change over time.
If your organisation requires a specific data-location arrangement, contact CEOFlowStudio before submitting information that is subject to that requirement.
9. Security
CEOFlowStudio takes reasonable technical and organisational measures designed to protect information handled through the website.
These include measures such as:
- server-side validation;
- bot and abuse protection;
- restricted application credentials;
- encrypted network connections;
- least-privilege access to supporting systems; and
- separation between public website services and administrative credentials.
No internet service or storage system can be guaranteed to be completely secure.
10. Retention
CEOFlowStudio retains website enquiries, related correspondence and associated records only for as long as reasonably required for purposes such as:
- responding to the enquiry;
- continuing a legitimate business discussion;
- maintaining necessary business records;
- security and fraud prevention;
- resolving disputes; or
- satisfying legal obligations.
Information that is no longer reasonably required will be deleted or de-identified where practicable.
Service providers may retain logs, backups or transactional records according to their own operational and contractual retention periods. Removal from active CEOFlowStudio systems may therefore not immediately remove every copy held in provider backups.
11. Access, correction and deletion requests
You may contact CEOFlowStudio to:
- ask what personal information relating to you is held;
- request correction of inaccurate information;
- request deletion where appropriate; or
- ask a question about how your information has been handled.
Contact:
contact@ceoflowstudio.com.au
CEOFlowStudio may need to verify your identity before acting on a request.
Some information may need to be retained where required or permitted by law, for security purposes, or in connection with an existing dispute or legal obligation.
12. Privacy concerns and complaints
If you have a privacy concern, email contact@ceoflowstudio.com.au with enough information for CEOFlowStudio to understand and investigate the issue.
CEOFlowStudio will consider the concern and respond within a reasonable period having regard to its nature and complexity.
Where Australian privacy law applies, you may also have rights to raise a matter with the Office of the Australian Information Commissioner.
13. Changes to this policy
This Privacy Policy may be updated if CEOFlowStudio's website, providers, information-handling practices or legal obligations change.
The current version will be published on this website with its effective or updated date.