Privacy Policy

This Privacy Policy explains how Vector, operated by Primitive AI Labs Pty Limited on behalf of WhatBit ("we", "us" or "our"), handles information when you use the service. Effective 28 August 2026.

Participant and client form content

Participant and client clinical, form and support-template content is kept client-side during normal Vector use. This includes names, dates of birth, NDIS numbers, health and diagnosis information, behaviour data, consultation information, functional assessment information, restrictive-practice information and Behaviour Support Plan content. The Vector application does not send this content to WHATBIT servers, Stripe, analytics services or a server-side form database. It is not intentionally placed in URLs or query strings, billing payloads, D1, R2, Worker storage or application logs.

Local browser storage

Form and support-template working data remains in the browser on the device being used. Where Vector saves working state, it uses browser session storage rather than a WHATBIT server-side participant database. Clearing browser data, closing the relevant browser session, using private browsing or switching browser or device may remove locally stored information. DOCX generation and print or save-PDF functions process the form content in the browser; completed document content is not uploaded to WHATBIT for export.

Information WHATBIT stores

Primitive AI Labs Pty Limited, as operator of Vector for WhatBit, stores only limited commercial and operational information required to provide Vector. This may include a browser or account identifier, Stripe customer and subscription identifiers, subscription status and price, billing-event records, organisation branding settings, support messages and ordinary technical delivery information. This commercial and operational information is kept separate from participant and client form content. We do not sell personal information.

Billing information

Vector paid subscriptions are processed by Stripe. When you choose to upgrade, Stripe may collect and process billing details, contact details, payment-method information and ordinary transaction information under Stripe's own privacy practices. Vector sends Stripe only information required to create and manage the subscription and entitlement. Participant or client clinical, form, consultation, behaviour, assessment, restrictive-practice or Behaviour Support Plan content is not included in Stripe Checkout, customer, subscription or billing metadata.

Organisation branding

If you use paid organisation branding features, Vector may store commercial branding settings such as organisation name, colours, contact line and footer text so they can be applied to documents you generate. These organisation settings are commercial metadata and are kept separate from participant and client form content. Do not place participant or client information in organisation branding fields.

Technical information

As with any website, internet infrastructure may process ordinary technical request information such as IP address, browser type, requested application route, timestamps, referrer and technical error information for delivery, security and troubleshooting. Vector is designed so participant and client form values are not included in those application requests, URLs or query strings.

Support communications

If you contact us about Vector, we collect the information you choose to provide, such as your name, email address, message content, and any attachments or screenshots needed to investigate the issue. Do not send participant or client clinical content to support unless it is genuinely necessary and you are authorised to disclose it. We use support information to respond, maintain records of the enquiry, and improve the service. Support messages may be retained for a reasonable period.

Why we use personal information

We use personal information that WHATBIT actually receives to provide and operate Vector's commercial and technical services, verify paid entitlements, process billing through Stripe, maintain security, troubleshoot errors, respond to enquiries, comply with law and improve reliability. Participant and client form content that remains locally in the browser is not collected by WHATBIT for those purposes.

Third-party service providers

We use service providers where necessary to operate Vector, including Stripe for subscription billing and Cloudflare and similar providers for hosting, content delivery, security and performance. They may process commercial, billing and ordinary technical delivery information under their own terms and privacy policies. Vector does not intentionally send participant and client clinical, form or support-template values to those providers as stored application content.

Overseas processing

Some service providers, including Stripe and Cloudflare, may process or store commercial, billing or technical information outside Australia. Participant and client form content is designed to remain in the user's browser and is not intentionally transferred overseas by Vector as server-side application data. Where information we actually hold is handled overseas, we take reasonable steps to ensure providers handle it consistently with applicable privacy requirements and the purpose for which it was collected.

Security

Vector's privacy design keeps participant and client working content client-side rather than placing it in a WHATBIT server-side form database. We also use reasonable technical and organisational measures for the commercial and operational information we do hold, including secure transport, access controls and careful use of third-party providers. No device, browser, transmission method or storage system is completely secure. You are responsible for securing the devices and browsers you use and for decisions about what information you export or share outside Vector.

Data retention

WHATBIT does not retain participant and client form or support-template content on its servers as part of normal Vector use. Subscription, billing, organisation-branding, technical and support information that we actually hold may be retained only as long as needed to operate Vector, meet legal obligations, resolve disputes and maintain appropriate commercial records. Locally stored form information remains under the control of the browser session or device until it is removed or the session ends.

Access and correction

You may request access to or correction of personal information that WHATBIT actually holds, such as relevant commercial, billing or support information, subject to exceptions under applicable law. Participant and client form and template content that remains locally in your browser is not held by WHATBIT and therefore cannot be retrieved from our servers. You can review or remove that local content through Vector or your browser session and storage controls. Contact hello@primitiveai.com.au to make a request.

Privacy complaints

If you have a concern about how we have handled personal information, contact us at hello@primitiveai.com.au and we will try to resolve it. If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC) or another relevant regulator.

Data breaches

If we become aware of a data breach involving personal information that we actually hold and that is likely to result in serious harm, we will assess the breach and, where required by law, notify affected individuals and relevant regulators. Our response will depend on the nature of the incident and our legal obligations at the time.

Children and participant information

Vector is a professional documentation tool, not a service directed at children for personal use. If you enter information about children, young people, or other participants in the course of professional work, you remain responsible for having a lawful basis to collect and handle that information and for meeting the privacy and record-keeping obligations that apply to your organisation. That participant content remains subject to Vector's local-only form-content design described above.

Changes to this Policy

We may update this Privacy Policy when Vector's features or data practices change. The current version will remain available at this URL with its latest update date. If we make a material change, we will take reasonable steps to bring it to your attention.

Contact

Privacy questions can be sent to hello@primitiveai.com.au.