Privacy Policy

1. Introduction

WedgeWoodAI Tapui Limited ("WedgewoodAI", "we", "us", or "our") is a New Zealand registered company. This Privacy Policy applies to the website wedgewoodai.com (the "Site") and all services, applications, and sub-domains operated under this domain, including but not limited to:

• caddiechat.wedgewoodai.com — CaddieChat, our AI-powered golfing companion
• aurashop.wedgewoodai.com — AuraShop, our AI shopping assistant
• aurakinai.wedgewoodai.com — AuraKin AI, our family assistant
• aurabiz.wedgewoodai.com — AuraBiz AI, our business assistant

Together, these are referred to as the "Services". All Services are hosted on the same platform infrastructure provided by Abacus.AI. By accessing or using any of our Services, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you interact with our Services, you may voluntarily provide:

• Contact information — name, email address, and message content when using our contact form
• Account information — email address, display name, and authentication credentials when registering for any of our applications (CaddieChat, AuraShop, AuraKin AI, or AuraBiz AI)
• Beta testing registrations — email address and name when expressing interest in beta testing our products
• Usage data within applications — data you create or input while using our products (e.g., golf scores in CaddieChat, shopping preferences in AuraShop, family schedules in AuraKin AI, business data in AuraBiz AI)

2.2 Information Collected Automatically

When you visit our Site or use our Services, we may automatically collect:

• Device and browser information — browser type, operating system, device type, and screen resolution
• Log data — IP address, access times, pages viewed, and referring URLs
• Cookies and similar technologies — session identifiers and preferences (see Section 6)

2.3 Third-Party Advertising

We use Google AdSense to display advertisements on our Site. Google may use cookies and web beacons to serve ads based on your prior visits to our Site or other websites. You can opt out of personalised advertising by visiting Google Ads Settings or AboutAds.info.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services across all sub-domains
• Respond to your enquiries and provide customer support
• Manage your user accounts across our applications
• Send important service notifications, security alerts, and updates
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations under New Zealand law
• Display relevant advertisements through Google AdSense

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

• Service providers — We use Abacus.AI as our hosting and infrastructure provider. Your data is stored on their platform to operate our Services.
• Advertising partners — Google AdSense may collect anonymised data for ad personalisation as described in Section 2.3.
• AI processing — Our applications use AI language models (via Abacus.AI APIs) to provide their core functionality. Data processed by these models is used solely to deliver the service and is not retained for third-party training purposes.
• Legal requirements — We may disclose information if required to do so by law, court order, or government authority.
• Safety and security — We may share information to protect the rights, property, or safety of WedgewoodAI, our users, or the public.

5. Shared Infrastructure Across Sub-domains

All WedgewoodAI services (CaddieChat, AuraShop, AuraKin AI, AuraBiz AI) and the main website (wedgewoodai.com) are hosted on the same platform infrastructure provided by Abacus.AI. This means:

• User account data may be managed centrally — e.g., your email and account status are recorded in a shared database so that we can manage access, security, and support across all our products
• Administrative actions (such as account suspension for security reasons) may apply across all Services simultaneously
• Security monitoring and access logging applies across all Services to protect you and our platform

We take care to ensure that application-specific data (e.g., your golf scores in CaddieChat) remains segregated and is only used within the relevant application.

6. Cookies and Tracking Technologies

Our Services use cookies and similar technologies for:

• Essential cookies — Required for authentication, session management, and security across our applications
• Preference cookies — To remember your settings such as theme preferences
• Advertising cookies — Used by Google AdSense to serve relevant advertisements. These are managed by Google and subject to Google's Privacy Policy

Cookie Consent

When you first visit our Site, a cookie consent banner will appear asking you to accept or decline non-essential cookies. Advertising cookies (Google AdSense) are only loaded after you give explicit consent. If you decline, only essential cookies required for the site to function will be used.

Your preference is stored locally in your browser and persists across visits. You can change your cookie preferences at any time by clearing your browser's local storage for this site, which will cause the consent banner to reappear on your next visit.

You can also manage cookies through your browser settings. Note that disabling essential cookies may affect the functionality of our Services.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data in transit across all domains and sub-domains
• Secure password hashing using bcrypt for stored credentials
• Two-factor authentication (TOTP) for administrative access
• Content Security Policy (CSP) headers to prevent cross-site scripting attacks
• Access logging and monitoring for security incident detection
• HTTP Strict Transport Security (HSTS) to enforce secure connections

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. If you wish to have your account and associated data deleted, please contact us at the email address below. We will respond to deletion requests within 30 days.

Certain data may be retained for longer periods where required by law, for legitimate business purposes (e.g., security logs), or to resolve disputes.

9. Your Rights

Under the New Zealand Privacy Act 2020 and applicable international privacy laws, you have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of any inaccurate or incomplete information
• Deletion — Request deletion of your personal information, subject to legal obligations
• Portability — Request your data in a portable format where technically feasible
• Objection — Object to the processing of your personal information for specific purposes
• Complaint — Lodge a complaint with the New Zealand Privacy Commissioner at privacy.org.nz

To exercise any of these rights, please contact us using the details in Section 12.

10. Children's Privacy

Some of our products (such as AuraKin AI) are designed for family use and may be used by children under parental supervision. We do not knowingly collect personal information from children under 13 without verified parental consent. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us and we will take steps to remove such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, or legal requirements. We will post any changes on this page and update the "Last updated" date. We encourage you to review this page periodically. Continued use of our Services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: