Privacy Policy — Archos Labs

Archos Labs ABN 18 379 780 858 Victoria, Australia privacy@archoslabs.xyz

Last updated: July 2026

1. Who we are

Archos Labs (ABN 18 379 780 858) operates archoslabs.xyz. We provide AI readiness assessment tools and consulting services to organisations in Australia and internationally.

This policy explains what personal information we collect, how we use it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What information we collect

When you complete the AI Readiness Assessment

We collect the following information at the registration gate before your report is generated:

First name and last name
Email address
Job title
Organisation name
Phone number (optional)
Your assessment answers (multiple-choice responses only — no free-text fields)
IP address and browser information at the time of submission

Your sector and role are captured as part of your assessment answers, not as separate fields.

When you book a call

If you proceed to book a 30-minute consultation, we collect:

Your name, email address, organisation, and job title (carried from your assessment registration)
The reason you are seeking a consultation (free-text, entered at booking)
Calendar and meeting details via Google Calendar and Google Meet

When you create an account

If you create a lead account on the site, we store your name, email, organisation, job title, and phone number, along with your assessment sessions and generated reports.

Account sign-in uses magic links sent to your email address. We do not store passwords.

3. How we use your information

We use the information you provide to:

Generate your AI Readiness Assessment report
Deliver your report by email and make it available on-site
Send transactional emails related to your assessment and booking (confirmation, reminders, pre-call brief, post-call follow-up)
Prepare for and conduct your 30-minute consultation
Determine whether an engagement is a good fit for both parties
Improve the assessment tool and our services

We do not use your information for unsolicited marketing. We do not sell your data. We do not share your data with advertisers.

4. How your information is processed for report generation

When you submit your assessment, the following data is sent to OpenRouter (which routes to Anthropic Claude models) to generate your report:

Your sector and role (from your assessment answers)
The full set of questions and your selected answers
Your domain scores, tier classification, and risk flags

Your name, email address, organisation, phone number, job title, IP address, and browser information are not sent to OpenRouter or Anthropic. They remain in our database only.

What OpenRouter and Anthropic do with this data

OpenRouter does not log your prompt content or completions by default. It retains only request metadata — timestamps, model used, token counts, and latency. Your assessment answers are not stored by OpenRouter.

Anthropic processes API requests with a 7-day retention window for abuse monitoring purposes. Anthropic does not use API data to train its models.

Note for healthcare organisations

The report generation layer (OpenRouter) does not hold a healthcare-specific data processing agreement (such as a US HIPAA Business Associate Agreement or an equivalent Australian health data agreement). If your organisation processes or manages patient health information, you should be aware that assessment data submitted through this tool passes through a routing layer that is not covered by a healthcare data agreement. Contact us at privacy@archoslabs.xyz before completing the assessment if you have questions about this.

5. Cookies

We use essential cookies to run the site, plus third-party analytics and advertising cookies set through the tools described in Section 6.

Cookie	Purpose	Duration
archos_lead_session	Keeps you signed in to your lead account	30 days
archos_admin_session	Administrator access only	24 hours

The two essential cookies above are httpOnly, secure, and sameSite=lax; you cannot opt out of them without losing access to your account. The analytics and advertising cookies described in Section 6 are optional. When you first visit the site, a cookie banner lets you accept or reject them, and your choice is remembered on your device. You can also refuse them using your browser's cookie controls or a tracking blocker.

6. Analytics

We use first-party analytics (page views and scroll depth via our own event system) together with third-party analytics and advertising tools, loaded through Google Tag Manager (container GTM-TDT86Q37):

Google Analytics 4 — aggregated traffic and usage measurement.
Meta (Facebook) Pixel — measures visits and actions to support our advertising on Meta platforms.

These tools collect standard web-analytics data — pages visited, referring site, approximate location (from IP address), and device/browser type — and set cookies in your browser. We use this only to understand and improve how the site performs, and to measure our advertising. We do not sell this data.

How to opt out

Choose Reject on the cookie banner shown on your first visit. If you are in the European Economic Area, the United Kingdom, or Switzerland, analytics and advertising cookies are switched off by default until you accept (Google Consent Mode v2).
Install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).
Adjust your ad preferences in your Meta account settings.
Refuse analytics and advertising cookies using your browser's cookie controls or a tracking blocker.

Questions? Email privacy@archoslabs.xyz.

7. Third-party service providers and overseas disclosure

We share data with the following service providers only to the extent necessary to operate the platform. We have entered into data processing agreements with each provider to ensure your information is handled appropriately.

Provider	Location	Purpose	Data shared
Render	United States	Website and database hosting	All data stored in our database
Resend	United States	Transactional email delivery	Name, email address
OpenRouter / Anthropic	United States	Report generation	Assessment answers, scores, risk flags (see section 4)
Google (Calendar and Meet)	United States	Booking confirmation, calendar invites, video call links	Name, email, organisation, job title, booking reason

Cross-border disclosure and your rights

All four providers listed above are based in the United States. When we disclose your personal information to these providers, your information is transferred to and processed in the United States.

You should be aware that once your personal information is held by an overseas recipient, the Australian Privacy Principles (APPs) will not apply to how that recipient handles your information. The recipient is instead governed by the laws of their own jurisdiction. We have taken reasonable steps to ensure each provider handles your data appropriately by entering into data processing agreements with them, but we cannot guarantee the same level of protection that applies under Australian law.

By submitting your information through this site, you expressly consent to your personal information being transferred to and processed in the United States on the basis described in this section, with the understanding that Australian Privacy Principle protections will not apply to your information once it is held by the overseas recipient.

If you do not consent to overseas transfer, do not submit the assessment or create an account. Contact us at privacy@archoslabs.xyz to discuss alternative options.

8. Data retention

Data type	Retention period
Lead account and contact details	Retained for 24 months from the date of your last activity with us. Deleted on written request.
Assessment responses and reports	Retained while your account exists. Deleted on written request.
IP address and browser information	Automatically purged after 30 days.
Transactional email records	Retained by Resend for the duration of our service agreement with them. Deleted within 90 days of account termination.
Server logs	30 days

9. Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your information
Withdraw consent for us to contact you
Make a complaint about how we have handled your information

To exercise any of these rights, contact us at privacy@archoslabs.xyz. We will respond within 30 days.

If you are located in the European Economic Area, you may also have rights under the General Data Protection Regulation (GDPR) including the right to data portability and the right to lodge a complaint with a supervisory authority in your country.

10. Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access. This includes:

Encrypted connections (HTTPS) across the site
httpOnly and secure cookie flags
Access controls on database records
Transactional email sent via verified domain

No method of transmission over the internet is completely secure. We cannot guarantee absolute security.

11. Children

This site is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. For material changes to how we collect or use your personal information, we will notify you by email before the change takes effect. Your continued use of the site after a non-material update constitutes acceptance of the revised policy.

13. Contact and complaints

For privacy enquiries or complaints:

Archos Labs privacy@archoslabs.xyz www.archoslabs.xyz

We will acknowledge your complaint within 5 business days and respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

This policy applies to personal information collected through archoslabs.xyz and associated services operated by Archos Labs (ABN 18 379 780 858).