This page explains what exactfindai.com collects, why, how long we keep it, and who else handles it. It covers this website, the help centre, buying a licence, and the licence checks that ExactFind Knowledge makes from your site.
It doesn’t cover the ExactFind plugins running on your own site. They send your visitors’ questions to the AI provider you choose, not to us. See Suggested AI Privacy Policy Wording for Your Site.
Last updated: 9 November 2026
Who we are
exactfindai.com is run by FuzionLabs (ABN 48 208 087 280), PO Box 482, Strathfieldsaye, Victoria 3551, Australia. Contact us about privacy at [email protected].
What we collect and why
- Email alerts. If you ask to hear when Commerce is ready, or when ExactFind Search is on WordPress.org, we keep your email address, which alert you asked for and the date. We email you once, for that alert, then delete your address. Ask us to remove it at any time.
- Contact form. Your name, email address, subject and message are emailed to us so we can reply. The site doesn’t keep a copy. The form uses Cloudflare Turnstile to tell people from automated traffic (see below).
- Help centre search. Your question is sent to OpenAI, with the text of matching help articles, to write an answer. Please don’t enter personal or sensitive details.
- We keep a log of questions for 90 days, to find gaps in our help articles. It holds the question, the answer’s sources, any rating you give, the time and a masked IP address. It isn’t linked to your name or email.
- To limit how many questions can be asked, we also keep a temporary hashed copy of your IP address.
- Our help articles are indexed with Anthropic. Only our own article text is sent for that, not your questions.
- “Was this helpful?” We count Yes and No votes for each article. To count one vote per visitor, we keep a hashed copy of your IP address for a day.
- Buying a licence. Payment is handled by Stripe, with Link as the merchant of record, which also handles tax, receipts and refunds. Your card details go to them, never to us. We receive your email address, Stripe customer and subscription references, and your licence’s plan and status.
- Your account. You sign in with a one-time link sent to your email address. Signing in sets a cookie,
fuzionlabs_account, that keeps you signed in for 7 days. - Licence checks and updates. Once a day, and when WordPress checks for updates, ExactFind Knowledge sends its licence key, the site’s address and the plugin version to exactfindai.com. We keep the addresses of the sites a licence is active on. When ExactFind checks its plugin files, it sends only the plugin name and version.
- Light or dark mode. If you choose one, your choice is saved in your browser’s local storage, not in a cookie, and isn’t sent to us.
We don’t sell your personal information, share it for advertising, or use it to train AI models.
Why we’re allowed to use it
For visitors in the EU, UK and other places with similar laws, we rely on:
- Contract: to sell, deliver and support your licence, and run your account.
- Legitimate interests: to answer help questions, improve our articles, prevent abuse and keep the site secure.
- Consent: for email alerts. You can withdraw it at any time.
- Legal obligation: to keep business and tax records.
Cookies and tracking
This site sets no cookies unless you sign in to your account or pass the help search check (see below). There are no analytics or advertising trackers.
The contact form and the help centre search use Cloudflare Turnstile to tell people from automated traffic. Cloudflare processes your IP address and browser details on the pages where they appear. After you pass the check on the help search, a short-lived cookie, exactfind_pass, records that you passed, so you aren’t checked again for each question. Turnstile isn’t loaded on other pages.
Who else handles your data
- Stripe and Link: payments, tax, receipts, refunds and disputes.
- Cloudflare: Turnstile on the contact form and help search.
- OpenAI: answers in the help centre search.
- Anthropic: indexing our help articles. No personal information is sent.
- Microsoft (Microsoft 365): our email, including licence keys, sign-in links and replies.
- AUS-IP Services: hosts this site on servers in Australia.
Most of these companies process data in the United States or other countries outside Australia. We use providers that protect it with contractual safeguards, such as the European Commission’s standard contractual clauses, or the EU-US Data Privacy Framework where they’re certified.
How long we keep it
| Data | Kept for |
|---|---|
| Email alert sign-ups | Until we send the alert, then deleted. At most 12 months |
| Help search question log | 90 days |
| Hashed IP addresses for limits and votes | Up to a day |
| Contact form messages and our emails with you | As a record of our dealings with you. Ask us to delete them, and we will unless the law requires us to keep them |
| Licence, account and payment records | 5 years after your last licence ends, as Australian tax law requires |
| Sign-in links | 30 minutes, or until used |
Keeping it secure
The site runs over HTTPS. Licence keys and account sign-in links are random and single-purpose, and access to our systems is limited to the people who need it. If a data breach is likely to cause you serious harm, we’ll tell you and the regulator as the law requires.
Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct it;
- delete it, unless we have to keep it by law;
- stop using it for a purpose, or withdraw consent you gave.
Email [email protected]. We may need to confirm who you are first. We reply within 30 days, and there’s no charge.
Depending on where you live, you also have these rights:
- Australia: under the Privacy Act 1988 and the Australian Privacy Principles. If you’re not happy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
- EU, EEA and UK: under the GDPR and UK GDPR, you can also ask us to restrict processing, object to processing based on legitimate interests, and receive your data in a portable format. You can complain to your local data protection authority, or in the UK, the Information Commissioner’s Office.
- United States: some states, including California, give you rights to know, delete and correct your information, and to opt out of its sale or sharing. We don’t sell or share personal information, or use it for targeted advertising. We won’t treat you differently for using these rights.
- Elsewhere: contact us, and we’ll respond under the law that applies to you.
Children
This site and ExactFind are for businesses and site owners. They aren’t aimed at children under 16, and we don’t knowingly collect their information.
Changes to this policy
We post changes on this page, with a new “Last updated” date. If a change affects how we use information we already hold, we’ll also email account holders.