Skip to content
Back to home

Privacy Policy

Last updated: 29 March 2026

1. Introduction

Bluesoul Technology Pty Ltd (ABN pending), trading as justonce.ai ("we", "us", or "our"), is an Australian company committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the justonce.ai service (the "Service"), including our website, applications, and related services.

By using the Service, you consent to the practices described in this policy. If you do not agree with this policy, please do not access or use the Service.

2. Information We Collect

2.1 Account Information

When you create an account via our authentication provider (Auth0), we collect your name, email address, and profile picture. We do not store your password; authentication is managed entirely by Auth0.

2.2 Memory Content

The core of justonce.ai is storing your personal knowledge. This may include documents, notes, emails, bookmarks, and other content you choose to save ("Memory Content"). You control what content you store in the Service.

2.3 Automatically Collected Information

When you use the Service, we may automatically collect certain information, including:

  • Usage data (features used, search queries, interaction patterns)
  • Device information (browser type, operating system, screen resolution)
  • IP addresses and approximate location data
  • Referral URLs and pages visited

2.4 Sensitive Information (Privacy Shield)

Our Privacy Shield feature automatically detects personally identifiable information (PII) such as tax file numbers, credit card numbers, and other sensitive data within your Memory Content. Detected PII is encrypted using AES-256-GCM and stored separately in a secure vault. See Section 4 for further details.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Improve and personalise your experience, including AI-powered categorisation and semantic search
  • Process and respond to your requests and enquiries
  • Detect, prevent, and address security issues and fraudulent activity
  • Send you service-related communications, such as account notifications and security alerts
  • Comply with legal obligations and enforce our Terms of Service

4. Privacy Shield (PII Vault)

justonce.ai includes a built-in Privacy Shield that provides an additional layer of protection for your most sensitive data:

  • Automatic Detection: PII (such as government identifiers, financial details, and health information) is automatically detected when you save content.
  • Encryption: Detected PII is encrypted using AES-256-GCM, an industry-standard authenticated encryption algorithm.
  • Separate Storage: Encrypted PII is stored in a dedicated, access-controlled vault, separate from your general Memory Content.
  • AI Exclusion: PII is never sent to AI models, third-party search engines, or any external processing pipeline.

You can review, manage, and delete items in your Privacy Shield vault at any time through your account settings.

5. Data Storage and Security

We take data security seriously and employ industry-standard measures to protect your information:

  • Infrastructure hosted on Microsoft Azure with enterprise-grade security controls
  • All data encrypted at rest and in transit (TLS 1.2+)
  • Comprehensive audit logging of access to sensitive data and administrative actions
  • Regular security assessments and vulnerability scanning
  • Role-based access controls for internal systems

6. Data Sharing

We do not sell, rent, or trade your personal information.

We may share limited information with the following third-party service providers, solely to operate the Service:

  • Auth0 (Okta): Authentication and identity management
  • SendGrid (Twilio): Transactional email delivery
  • Anthropic (Claude): AI processing for categorisation and search — only sanitised and redacted content is sent; PII is never included

We may also disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Bluesoul Technology, our users, or others.

7. Your Rights

Under applicable Australian privacy law, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your personal information and Memory Content
  • Export your data in a portable format (data portability)
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise any of these rights, please contact us at privacy@justonce.ai. We will respond to your request within 30 days.

8. Cookies and Tracking

We use a minimal set of cookies:

  • Authentication cookies: To maintain your logged-in session securely
  • Security cookies: To protect against cross-site request forgery and other threats
  • Analytics cookies: We use Google Analytics 4 on our public website (justonce.ai) to understand which pages help people and which don't — pages viewed, links and buttons clicked, and how far down a page people read. Google sets _ga cookies for this. We send advertising storage, ad personalisation and ad-user-data as denied for every visitor, so this data is not used to build advertising profiles.

Your choice. If you are in the EU, EEA, UK or Switzerland, analytics cookies are switched off until you accept them, and we show a banner asking. Everywhere else they are on by default and you can decline from the same banner. Declining is remembered on your device, and analytics still works in a cookieless mode that cannot identify you.

We do not use advertising trackers, and we do not participate in cross-site tracking networks. Analytics runs only on the public marketing website — not inside the app, and never on the contents of your memories.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

10. International Data Transfers

Your data is primarily stored in Australian Azure data centre regions. In some cases, data may be processed in other regions where our third-party providers operate. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with the Australian Privacy Principles and any applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email at the address associated with your account. The "Last updated" date at the top of this page indicates when this policy was last revised. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: