SAM AI Privacy Policy

Website: sme.ec and member sites  |  Effective: 6 October 2026  |  Last updated: 6 October 2026

This summary is here to help. The full policy below is what applies.

1. Who we are

SAM AI is a brand operated by Jahaca FF Pty Ltd (ACN 686 173 320), a company registered in Victoria, Australia, with its registered office at Unit 15, 2-10 Hallam South Road, Hallam, Victoria, Australia, 3803.

In this document, “SAM AI”, “we”, “us” and “our” mean Jahaca FF Pty Ltd. Contact: [email protected].

This policy explains how we handle personal information when you use our website at sme.ec, our free quiz, our courses, our AI chat, our membership, and the hosted business-system site we build for each paying member (together, the Service). We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). Because our customers come from many countries, we also give everyone the rights described in section 11, wherever they live.

2. What we collect

Information you give us

• Contact and account details: your name, email address and login details, and any profile details you add.
• Quiz answers: your type of business, revenue, team size, the hours you work each week, and any optional answers you choose to give, so we can prepare and email your report.
• Chats and content: the messages you send to SAM (in the public chat on our website or the members’ chat), and files, text, videos or other content you upload or create in the Service.
• Business data in your member site: information you or your team put into your own hosted site, which may include details about your customers, suppliers and staff.
• Messages to us: support requests, feedback and anything else you send us.

Payment information

Payments are handled by Stripe. You enter your card details directly with Stripe, and we never see or store your full card number. Stripe tells us things like whether a payment succeeded, your subscription status and billing contact details.

Information collected automatically

• Device and browser information, IP address, approximate location (from your IP address), pages viewed, links clicked, and dates and times of visits.
• Cookies and similar technologies (see section 8).

Information from Google, if you connect it

If you choose to connect a Google account, we receive the data described in section 5, and nothing more.

3. How we use your information

• To provide the Service: create your account, run your membership, build and host your member site, deliver courses, and let SAM answer your questions.
• To prepare and email your quiz report.
• To take payments and manage your subscription (through Stripe).
• To send you service emails (for example receipts, account notices, and changes to these policies).
• To send you marketing emails, if you agree or where the law otherwise allows. Every marketing email has an unsubscribe link.
• To keep the Service secure, prevent misuse and fix problems.
• To understand how people use our website and improve it.
• To meet our legal obligations.

We only use your information for these purposes, for related purposes you would reasonably expect, or where you agree or the law allows.

4. How SAM’s AI works with your information

SAM is powered by large language models run by third-party AI providers (for example Anthropic and Google, sometimes accessed through a routing service such as OpenRouter). When you chat with SAM, or ask SAM to work with your content, the relevant text is sent to one of these providers so it can produce an answer, which is then returned to you.

• We send only what is needed to answer the request.
• Our AI providers process this information under their own terms in order to provide the Service.
• We set the AI services that power SAM AI so they do not use your information to train their models, and we check this every week. This does not cover AI tools you connect yourself (for example your own Claude account), which follow that provider’s terms and your own settings.
• We may keep chat history so you can see past conversations and so we can keep the Service safe and improve SAM’s answers.
• Please don’t share highly sensitive information (such as health details, government ID numbers or passwords) in a chat.
• AI answers can be wrong. See our Terms of Use.

5. Google user data (YouTube, Google Drive, Google Ads, Search Console)

SAM AI lets you connect your own Google account so SAM can do specific jobs for you. Connecting is optional and is always your choice. When you connect, Google shows you exactly what you are allowing, and you can say no.

What we access and why

Limited Use

SAM AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, this means:

• We use Google user data only to provide and improve the features you can see and have chosen to use.
• We do not sell Google user data.
• We do not use or transfer Google user data for advertising, including retargeting, personalised or interest-based ads.
• We do not use Google user data to train general-purpose AI or machine-learning models.
• We do not use Google user data to work out creditworthiness or for lending.
• We only share Google user data with others when it is needed to provide the feature you asked for (for example, an AI provider producing an answer you requested about your own channel), to comply with the law, or as part of a merger or sale of our business with your rights protected.
• No person at SAM AI reads your Google user data unless you give us permission for a specific item (for example, when you ask for support), it is needed for security (such as investigating abuse), it is required by law, or the data has been combined and made anonymous for internal operations.

How we protect and keep it

• The access keys (tokens) Google gives us are stored encrypted and are only used by the Service to do the job you connected.
• We keep Google user data only for as long as needed to provide the feature. YouTube data we store is refreshed or deleted in line with YouTube’s rules (generally within 30 days).

Your control

• You can disconnect Google at any time from your Google Account permissions page: https://myaccount.google.com/permissions, or by emailing [email protected] and asking us to disconnect it for you.
• When you disconnect, we stop accessing your Google data and delete the stored tokens. We delete Google data we have stored within 30 days of disconnection, unless you ask us to keep something you created (such as files already saved to your own Drive, which stay yours).
• You can ask us to delete your Google user data at any time by emailing [email protected].

YouTube

SAM AI uses YouTube API Services. By connecting YouTube, you agree to the YouTube Terms of Service. Google’s Privacy Policy also applies.

6. Who we share information with

We do not sell your personal information. We share it only with service providers who help us run the Service, and only what they need:

We may also share information with our professional advisers (such as accountants and lawyers), when the law requires it, to protect people’s safety or our rights, or with a buyer if our business is sold (they must respect this policy).

7. Information sent overseas

We are based in Australia, but our servers are in Germany and Finland, and some of our providers (including Stripe, Cloudflare, Mailjet and AI providers) process information in other countries, including the United States and countries in the European Union. We take reasonable steps to make sure these providers protect your information in a way that is consistent with the Australian Privacy Principles.

8. Cookies and tracking

Cookies are small files stored on your device. We use them only to make the Service work: to keep you logged in, remember your settings and keep the site secure.

We do not currently use any third-party analytics or advertising tracking tools (such as Google Analytics, Meta Pixel or Microsoft Clarity) on our website. If we add analytics in future, we will update this policy first and ask for your consent where the law requires it.

You can block or delete cookies in your browser settings, but some parts of the Service (such as logging in) need cookies to work.

9. Keeping your information secure

We use reasonable security measures, including encrypted connections (HTTPS), access controls, encrypted storage of connection tokens, and regular backups. No system is perfectly secure, so we can’t guarantee security. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.

10. How long we keep information

• Account and membership information: while you have an account, and then for as long as needed for legal, tax and accounting reasons.
• Your member site and its data: while your membership is active, and for 30 days after it ends so you can export it. After that it is deleted, and backup copies are removed within a further 30 days.
• Quiz answers and reports: we keep them only as long as needed to send your report and follow up with you, and we delete them on request.
• Google user data: see section 5.

11. Your rights and choices

Wherever you live, you can:

• ask for a copy of the personal information we hold about you;
• ask us to correct it if it’s wrong;
• ask us to delete it (we may need to keep some records the law requires);
• ask for your data in a format you can take elsewhere (export);
• object to, or ask us to limit, how we use it, including for marketing;
• withdraw consent you have given (for example, by disconnecting Google or unsubscribing).

Email [email protected]. We will need to confirm who you are, and we aim to respond within 30 days. We won’t charge you to make a request. You can stay anonymous or use a made-up name when you browse or ask a general question, but we need your real details to run an account or take payment.

If you live in the European Union or the United Kingdom, you can also complain to your local data protection authority. If you live in California or another US state with privacy laws, you have the rights above, and we do not sell or “share” personal information for cross-context behavioural advertising.

12. Member sites: your customers’ information

When you use your member site to store information about your own customers, staff or suppliers, you decide what is collected and why, and you are responsible for following the privacy laws that apply to you. We store and process that information only to provide the Service to you and according to your instructions. We don’t use it for our own marketing.

13. Children

The Service is for business owners and is not intended for anyone under 18. We don’t knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.

14. Changes to this policy

We may update this policy. We will post the new version on this page with a new “Last updated” date, and if the change is significant we will tell members by email before it takes effect.

15. Questions and complaints

Contact us at [email protected] or Unit 15, 2-10 Hallam South Road, Hallam, Victoria, Australia, 3803. We will respond within 30 days. If you are not happy with our response, you can contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au