Legal and Privacy Policy

This policy explains the site-wide rules for EraNorth, KEVOS AI, EraNorth Academy, related workspaces, downloads, subscriptions, enquiries and published content. It is designed to be understandable and protective of users while preserving rights that cannot lawfully be excluded.

Effective and last updated: 10 September 2026

1. Scope and international application

EraNorth operates from Australia. This policy applies when you visit or use an EraNorth-controlled website or service, including KEVOS AI and EraNorth Academy. Local laws may give you additional rights. Where a mandatory law conflicts with this policy, that law prevails to the extent of the conflict.

No website policy can automatically satisfy every law in every country or every regulated use case. EraNorth applies an Australia-led privacy and consumer-protection baseline and recognises applicable regional rights, including rights available in the European Economic Area, United Kingdom, California, Canada and New Zealand. A separate written agreement may apply to an organisational engagement, pilot or enterprise deployment.

2. Information and professional boundaries

Unless a signed engagement expressly states otherwise, site content, AI output and Academy material are general information and educational material. They are not legal, medical, financial, safety, engineering certification or other regulated professional advice. High-impact decisions should be checked against authoritative evidence and reviewed by a suitably qualified and accountable person.

Descriptions of planned or developing capabilities are not promises that every feature is complete, continuously available or suitable for a particular purpose.

3. Privacy notice

Information EraNorth may collect

• identity and account information, such as name, email address, profile image, account role and authentication identifiers;
• enquiry and business information you submit, including organisation, subject, message and contact details;
• service content, including prompts, conversations, projects, documents, uploads, notes, portfolio items, workflow settings and generated outputs;
• Academy records, including enrolment, progress, bookmarks, attempts, feedback, credentials and certificate information;
• subscription and transaction references supplied by a payment provider, but not full payment-card details;
• technical and security information, such as IP-derived security records, device or browser information, timestamps, session activity, audit events, errors and service-performance data; and
• preferences stored through cookies, local storage or session storage.

Collection, purposes and legal bases

Information is collected directly from you, automatically when needed to operate and protect the service, or from a provider you choose to use, such as an identity or payment provider. EraNorth uses it to provide requested features; answer enquiries; operate workspaces, Academy and subscriptions; process and reconcile payments; secure access; prevent abuse; diagnose faults; keep required records; comply with law; and improve reliability and usability.

Where consent is the appropriate legal basis, you may withdraw it for future processing. Other processing may be necessary to perform a requested service, meet legal duties, or support legitimate security and operational interests where permitted by applicable law.

AI inputs and generated content

Depending on the selected feature and administrator configuration, prompts, relevant conversation context and authorised document excerpts may be sent to an external AI provider or processed through a local or controlled model. Do not submit personal, confidential, export-controlled, privileged or sensitive information unless you are authorised to do so and the configured processing arrangement is suitable.

EraNorth does not claim ownership of your original input. You grant EraNorth a limited permission to host, process, reproduce and transmit it only as reasonably necessary to provide, protect and support the service or meet legal obligations.

Providers, disclosures and overseas processing

EraNorth may use providers for hosting and infrastructure, authentication, payment processing, AI processing, security, communications and operational support. Current implementations may include Google sign-in, Stripe payments, and configured AI or infrastructure providers. Providers process information under their own terms and safeguards where applicable.

Information may be processed in Australia, the United States and other countries where a configured provider or its infrastructure operates. Privacy protections may differ. EraNorth should limit disclosures to what is reasonably required, select providers with appropriate protections, and use contractual or other transfer safeguards where required.

EraNorth may also disclose information when required by law, court order or a valid government request; to investigate fraud, abuse or security incidents; to protect legal rights or safety; or as part of a business reorganisation subject to appropriate safeguards. EraNorth does not sell personal information or share it for cross-context behavioural advertising.

Cookies and browser storage

The site may use essential cookies and browser storage for authentication, security, preferences, workflow continuity and draft recovery. Disabling essential storage may prevent account or workspace features from working. If non-essential analytics or marketing technologies are introduced, EraNorth should provide consent or opt-out controls where required by applicable law.

Retention and security

EraNorth retains information only for as long as reasonably needed for the stated purpose, account operation, security, backup, dispute handling and legal or accounting obligations. Retention varies by record type. Deletion from active systems may not immediately remove protected backup copies, which should expire through controlled backup cycles.

Administrative, technical and organisational safeguards are used to protect service information, including access controls and server-side security measures. No internet-connected service can guarantee absolute security. Users must protect their credentials, devices and shared links and notify EraNorth if they suspect unauthorised access.

Your privacy choices and rights

Subject to applicable law and reasonable identity verification, you may ask EraNorth to:

• confirm whether personal information about you is held and provide access to it;
• correct information that is inaccurate, incomplete or outdated;
• delete information, restrict or object to certain processing, or provide portable data where those rights apply;
• withdraw consent for future processing where processing depends on consent;
• opt out of a sale or covered sharing of personal information—EraNorth states that it does not engage in those activities; and
• make a complaint without unlawful discrimination or retaliation.

Submit a request through the EraNorth contact form and label it “Privacy request”. EraNorth may request enough information to verify identity, protect another person’s information and locate relevant records. A request may be limited where retention or refusal is required or permitted by law.

If a concern is not resolved, you may contact the regulator that applies where you live. Australian users can contact the Office of the Australian Information Commissioner. EEA, UK, California, Canadian and New Zealand users may contact their applicable data-protection or privacy authority.

4. Accounts, payments and subscriptions

You must provide accurate account information, use only accounts you are authorised to use and keep access credentials secure. You are responsible for activity through your account unless caused by EraNorth’s failure to use reasonable care.

Payments may be handled by Stripe or another disclosed payment provider. Prices, billing frequency, renewal, taxes and cancellation information shown at checkout form part of the transaction. Nothing in this policy excludes refund, cancellation, service or consumer-guarantee rights that cannot lawfully be excluded.

5. Acceptable use

You must not use EraNorth or KEVOS AI to break the law; infringe privacy or intellectual-property rights; access systems, accounts or data without permission; distribute malware; evade security or usage controls; harass or exploit people; misrepresent identity, qualifications or AI output; create unlawful discriminatory outcomes; or make prohibited high-impact decisions without required authority and human review.

You must have the necessary rights and permissions for anything you upload or instruct the service to process. EraNorth may restrict or suspend access where reasonably necessary to protect users, the service or legal compliance, and should provide notice where lawful and practical.

6. Intellectual property and content

EraNorth retains rights in its branding, site design, software, documentation, original Academy material and published content. A limited, revocable, non-exclusive right is provided to access and use available material for its intended personal or organisational purpose. Unless expressly permitted, you may not republish, sell, scrape at scale, remove notices from, reverse engineer or create misleading derivative versions of protected material.

Third-party names, marks, standards and resources belong to their owners. Reference does not imply sponsorship, accreditation or endorsement. See the Copyright and Third-Party Content Policy.

7. Academy and credentials

EraNorth Academy provides professional learning. Its Certificates of Completion are EraNorth learning records, not university degrees, government-accredited qualifications, professional licences or third-party certifications unless expressly stated. Detailed rules appear in the Academy Learning and Credential Terms.

8. Responsible AI

AI output can be incomplete, outdated, biased or incorrect. Users should verify material facts, sources, calculations and requirements. Tool-using AI must operate within authorised boundaries, and consequential actions require proportionate human oversight. See the Responsible AI and Professional Use Policy.

9. Availability, warranties and liability

EraNorth aims to describe services accurately and operate them with reasonable care. Beta, preview, research and development features may change, fail or be withdrawn. To the maximum extent permitted by law, no guarantee is made that the site, AI output or downloads will be uninterrupted, error-free, completely secure or fit for every purpose.

Nothing in this policy excludes, restricts or modifies a consumer guarantee, privacy right, statutory remedy or liability that cannot legally be excluded. Any permitted exclusion or limitation applies only to the extent allowed by applicable law. Users remain responsible for independent review, backups and appropriate controls for consequential professional use.

10. External links and downloads

External sites and providers have their own terms and privacy practices. Links are supplied for convenience or reference and are not a guarantee of their content. Before installing a KEVOS download, verify the published version, checksum, system requirements and release notes and maintain an appropriate recovery path.

11. Changes, governing law and contact

EraNorth may update this policy when services, providers or legal requirements change. The date above will be updated, and material changes should be communicated in a manner appropriate to their impact. Continued use after an effective update remains subject to mandatory notice and consent requirements that may apply.

Unless a mandatory local law or written agreement requires otherwise, this policy is governed by applicable Australian law. Courts and regulators retain whatever jurisdiction applicable law gives them.

Questions, legal notices, privacy requests, complaints and rights-holder concerns can be submitted through the EraNorth contact page. Include enough detail to identify the issue without sending unnecessary sensitive information.

Official privacy references

• Australian Privacy Principles — OAIC
• General Data Protection Regulation — EUR-Lex
• UK privacy-information requirements — ICO
• California consumer privacy rights — CPPA
• Canadian PIPEDA guidance — OPC
• New Zealand Privacy Principles — OPC

Governance note: This public policy is a practical baseline, not a substitute for jurisdiction-specific legal advice. EraNorth should obtain qualified legal and privacy review before commercial scale-up, entering a new jurisdiction, materially changing data flows, or offering regulated-industry services.