Privacy Policy

About this policy

This policy explains how Melora Digital handles personal information when you use our website, our AI maturity assessment and our AI consultant. Melora Digital is an executive-led AI adoption consultancy based in Melbourne, Australia, delivering work globally since 2022.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We have chosen to follow the APPs in full, whether or not an exemption could apply to us.

Detail	Information
Who we are	S Farsoodeh Saligheh & A Montazami, trading as Melora Digital
ABN	68 158 833 095
Location	Victoria, Australia
Email	Support@meloradigital.com
Phone	+61 451 423 002

In this policy, “Melora”, “we” and “us” means that business.

What we collect and why

We only collect what we need to respond to you and run our services.

Contact form

When you send an enquiry, we collect your name, work email, organisation, phone number, role (optional), enquiry type, your message and your consent. The enquiry is emailed to our owner inbox and stored in our database so we can respond and keep a record of our conversation.

AI maturity assessment

The assessment is free and has 10 multiple-choice questions. You can retake it as often as you like. It is scored in your browser and your result is shown straight away, with no sign-up. We do not ask who you are to show your result. Your answers are kept in your own browser’s local storage so you can pick up where you left off.

Anonymous comparison scores. When you complete the assessment, we store an anonymous copy of your scores: your organisation type, your main pressure area, and your overall and dimension scores. This copy does not include your name, email, IP address or any other personal information. We use it to build a fair comparison with other organisations, which we only show once enough organisations have taken part.

Apart from these anonymous scores, your answers are only sent to us if you ask us to email you your report, or if you choose to share your result with an AI consultation (see below).

Email my report (optional)

If you ask us to email you your assessment report, we collect your name, organisation, email address and your consent, plus an optional opt-in to marketing emails. We then:

email you a 2-page PDF report
save your details and your assessment result as a lead record
send a notification to our owner inbox.

We limit how often reports can be requested to prevent misuse.

Free AI consultation access

To book a free 15-minute AI consultation, we ask for your name, organisation, email, phone number, and optionally your role and country or region. We convert your phone number to international format. We also record your consent to the AI Use Notice, this policy and the storage of your transcript.

If you have taken the AI maturity assessment, your result is shared with the consultation only if you leave the “share” option ticked.

To protect the service:

Bot protection. We use Cloudflare Turnstile. It sends technical signals from your browser to Cloudflare to check that you are a person. It does not set tracking cookies.
Email domain check. We check that your email address’s domain can receive mail (a DNS lookup) to catch typos. We do not send you a code.
Fair use. Each email address and each phone number can be used for one free AI consultation within 12 months. We may change this period. To apply this, we keep separate one-way keyed hashes of your normalised email address and phone number. They cannot be reversed to reveal your details, and they are deleted after the period ends. There is also a daily limit on consultations from each internet connection.

If you have already used your free consultation, we will offer you a paid consultation with a Melora consultant through our contact form.

The AI consultation

During the consultation you talk or type with an AI consultant persona (Maya or Alex). It is an AI, not a person. Their portraits are AI-generated images of fictional people.

No audio or video is recorded or stored by Melora.
Voice input in supported browsers. In browsers that support it (for example Chrome, Edge and Safari, including on iPhone), speech recognition happens through your browser’s built-in speech service. Your browser sends your audio to its maker (for example Google for Chrome, Apple for Safari, Microsoft for Edge) under their own terms. We receive only the resulting text.
Voice input in other browsers. Short audio clips of each spoken turn are sent through Surplus Intelligence to a speech-to-text model to create text. We do not keep the audio.
The consultant’s voice. The consultant’s replies are turned into speech by a text-to-speech model through Surplus Intelligence (using ElevenLabs voices available on its marketplace). Short acknowledgement sounds (such as “Mm, okay”) are pre-generated from fixed phrases.
The AI model. Replies are generated by a DeepSeek model (currently deepseek-v3.1), accessed through the Surplus Intelligence marketplace. If that model is unavailable, a fallback model may be used.
We store the text transcript, a structured summary, the slides shown, your feedback and any follow-up request.
Before text is sent to any AI model, we remove names, email addresses and phone numbers that we can detect. This filtering is automated and may not catch everything, so please don’t share personal or confidential details.

After the session we create an internal summary and PDF and email it to our owner inbox so a Melora consultant can review it. You receive an acknowledgement only.

Information we do not want

Please do not share sensitive information (such as health, racial or ethnic origin, political or religious beliefs), government identifiers, passwords, payment details or confidential business information through our website or AI consultant.

How we use your information

We use personal information to:

respond to your enquiry or consultation and follow up within five business days
email you your assessment report, if you ask for it
build an anonymous comparison of assessment scores across organisations
verify you are a real person, apply fair-use limits and prevent misuse
run, secure and improve our website and services
keep records of consent and of our dealings with you
meet our legal obligations.

We do not sell or rent personal information, and we do not use it for advertising profiles.

Direct marketing. We only send marketing emails if you tick the opt-in box. Every marketing email identifies us and includes an unsubscribe link, in line with the Spam Act 2003 (Cth) and APP 7. You can opt out at any time, and we will act on it within five business days. Service messages, such as your report, consultation acknowledgement or our reply to your enquiry, are not marketing.

Automated processing and decisions

Some of our processing is automated:

Assessment scoring. Your assessment is scored automatically from your answers.
Free-consultation eligibility. This is checked automatically: the human check, the email domain check, the fair-use limits and spend limits.
AI consultant replies. These are generated automatically.
Detail filtering. Detectable contact details are removed automatically before text goes to an AI model.

None of these produces a decision with a legal or similarly significant effect on you. The eligibility check only decides whether a free AI session can start; you can always contact a person instead. If you think an automated check has treated you wrongly, email us and a person will review it.

We use a small number of service providers to run the website and AI consultant. They handle information on our behalf or under their own terms, as noted.

Provider	What they do	Location
Hostinger	Hosts the website, application and MySQL database, and provides our email	Hostinger data centres, which may be outside Australia (for example in Europe, the USA or Asia)
Vercel	Hosted pre-launch test versions of the site. It is not used for the live website	USA
Cloudflare (Turnstile)	Bot protection using technical browser signals	USA and global network
Surplus Intelligence	AI marketplace that routes conversation text (to the DeepSeek model or a fallback model), speech-to-text audio and text-to-speech requests to third-party sellers	USA
Third-party sellers on Surplus Intelligence (e.g. Amazon Bedrock; ElevenLabs voices)	Run the AI model, speech-to-text and text-to-speech, and receive the relevant text or audio under their own terms	USA and other countries
Your browser maker (e.g. Google for Chrome, Apple for Safari, Microsoft for Edge)	In supported browsers, your browser’s built-in speech recognition sends your audio to the browser maker; we receive only the text	Varies by browser maker

Surplus Intelligence says it does not store the content of AI requests and does not use it for model training, advertising or profiling. It keeps only usage metadata, such as the model used, token counts and timestamps, for billing and abuse prevention.

The sellers who run the models receive the content of each request under their own terms. We restrict routing to sellers we trust, preferring providers such as Amazon Bedrock that do not use API content to train models.

We may also disclose information:

if required or authorised by law
to professional advisers under a duty of confidentiality
to a buyer or successor of our business, who must handle it in line with this policy.

Overseas disclosure (APP 8)

Some of the providers above are outside Australia, including in the USA and other countries. When we send information overseas, we take reasonable steps to make sure it is handled consistently with the APPs, including choosing reputable providers, limiting what we send and removing detectable names, emails and phone numbers from conversation text before it is sent to any AI model. Overseas providers may be subject to the laws of their own countries.

How long we keep it

We keep personal information only as long as we need it for the purposes in this policy or as the law requires. Then we delete or de-identify it. These are our retention periods. We will update this policy if they change.

Information	Default retention
AI transcripts and AI summaries	180 days
Lead and contact records	24 months after our last contact with you
Assessment report leads	24 months after our last contact with you (same as other leads)
Anonymous assessment scores	Kept to build the comparison; they contain no personal information
Consent records	As long as the related record
Fair-use (duplicate-protection) hashes	12 months
Voice audio	Not retained by Melora

You can ask us to delete your information sooner (see below).

Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, change or disclosure. These include:

encrypted connections (HTTPS)
encryption of consultation transcripts and summaries at rest
admin access limited to approved Melora staff through single-use sign-in links
short-lived, httpOnly session cookies
keyed hashing for fair-use checks
rate limits and bot protection
least-privilege access to our systems

No system is completely secure. If a data breach is likely to cause serious harm, we will contain it, assess it and notify you and the OAIC as required by the Notifiable Data Breaches scheme.

Your rights

You can ask to access, correct or delete the personal information we hold about you. Email Support@meloradigital.com. We may need to confirm your identity. We aim to respond within 30 days.

You can deal with us anonymously or using a pseudonym where that is practical — for example, the AI maturity assessment does not need your identity. We can’t run an AI consultation or respond to an enquiry without contact details.

Visitors outside Australia

Our website is run from Australia. If you are in another jurisdiction, you may have additional rights under local law, and we will respond to requests in line with the law that applies to you. For example, in the European Union or United Kingdom you may have rights under the GDPR to:

access, correct or erase your data
restrict or object to processing
receive your data in a portable format
withdraw consent.

Where the GDPR applies, we rely on:

your consent, for the consultation, report and marketing
our legitimate interests, for security, fair use and anonymous statistics
legal obligations, where they apply.

You may also complain to your local data-protection authority.

Children

The website is designed for business users and is not directed at children. You must be 18 or over to book an AI consultation or request a report. If we learn that we hold personal information about a child collected through the website, we will delete it.

Complaints

If you have a privacy concern, please contact us first at Support@meloradigital.com so we can try to resolve it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Cookies

We use strictly necessary cookies only and no advertising or tracking cookies. See our Cookie Notice.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.