Last updated 8 November 2026. Compliant with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Koastra Australia Pty Ltd (ABN 80 696 094 345) (“Koastra”, “we”, “our”, “us”) operates koastra.com.au. We are a Perth-based consultancy subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Enquiries · when you use the contact form or a services enquiry form, we collect your name, email address, the topic you choose and your message, plus anything else you choose to include.
Vault early access · if you request early access to Vault (on the Vault page or by choosing “Vault early access” on a form), we collect your name, work email, company and team size, and keep you on our early-access interest list.
Book a call · when you book a call, we collect your name, email address, phone number (used only if the Zoom link fails on the day), the topic you choose, any notes and files you attach, and the booking time and timezone you pick.
Kora · when you use Kora, our site assistant, we collect the questions you type, the page you were on, a random session ID created for that browser tab and your browser type. If Kora can’t answer and you choose to send your question to us, we also collect the name and email you enter.
Technical data · our hosting and rate-limiting providers process your IP address and request details to deliver the site and protect it from abuse.
To reply to your enquiry and send you a confirmation.
To manage a call you book · your confirmation, calendar invite, Zoom details and links to reschedule or cancel, and to contact you about that call.
To tell you when Vault is available if you joined the early-access list.
To improve Kora by reviewing questions it couldn’t answer.
To keep the site secure, including limiting repeated requests.
We don’t send marketing email unless you ask us to. Any marketing email includes an unsubscribe link (Spam Act 2003).
Website hosting and server functions · Vercel, in Sydney.
Database and file storage (including any files you attach to a booking) · Supabase, in Sydney.
Rate-limiting data · Upstash, in Sydney.
Email delivery · Resend, which sends from Japan.
Kora · if Kora’s AI answering is enabled, what you type into Kora (your question and the earlier messages in that chat) and the page you’re on are sent to Anthropic’s Claude API in the US to generate an answer. The name and email you enter in Kora’s “send to Koastra” form are not sent to Anthropic. Please don’t type personal details into the chat itself.
Data processed outside Australia · Resend (Japan) and, where Kora AI is enabled, Anthropic (US).
We do not sell personal information.
We share only what each provider needs to do their job: Vercel for hosting, Supabase for our database and file storage, Upstash for rate limiting, Resend for email and, where Kora AI is enabled, Anthropic. Each is contractually bound to use the data only for that purpose.
We may disclose information when required by Australian law, court order, or to protect the safety of our users.
Under the APPs you can request access to the personal information we hold about you, ask us to correct it, or ask us to delete it (where retention is not required by law).
Email support@koastra.com.au and we will respond within 30 days.
If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
This site does not use advertising or analytics cookies, and we don’t set cookies to track you.
We keep enquiries, bookings and early-access requests only as long as we need them to respond and for our business records, and delete them on request.
We may update this policy when our practices change. The date at the top shows the most recent revision.
Email support@koastra.com.au and we'll respond within 30 days.