Privacy Policy

1. Who We Are

AIAgriXpert Consulting is an independent scientific advisory practice founded and operated by Dr Xavier Sirault, PhD. The practice is registered in Australia under ABN 88 750 862 153 and is based in the Greater Canberra Area, NSW, Australia.

This Privacy Policy applies to the website at aiagrixpert.com.au and to any personal information we receive in the course of operating this practice.

We handle personal information in accordance with the Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024, and the 13 Australian Privacy Principles (APPs).

2. What Information We Collect

2.1 — Information you provide directly

This website does not contain a contact form. No personal information is submitted to any server by using this website. The only way we receive personal information is when you:

• Send us an email directly — we receive your email address and the contents of your message.
• Connect with us via LinkedIn — LinkedIn's own privacy policy governs that interaction.

The contact email address on this website is protected by a client-side mathematical CAPTCHA and XOR encoding. The address is never present in the page source and is only revealed to a human who solves the CAPTCHA. This is described in Section 4.3 below.

2.2 — Information collected automatically

This website uses no cookies, analytics scripts, tracking pixels, session storage, or any other mechanism to collect information about your visit. We do not collect IP addresses, browser information, pages visited, or any device identifiers.

The website is a single static HTML file. It does not communicate with any server operated by AIAgriXpert.

3. How We Use Your Information

If you contact us by email, we use your email address and message solely to respond to your enquiry and, if a professional engagement follows, to conduct that engagement and maintain correspondence records as required by Australian tax law.

We do not use your contact information for marketing. We do not sell, rent, or share personal information with any third party.

4. Third-Party Services

4.1 — Google Fonts

This website loads typefaces from the Google Fonts CDN (fonts.googleapis.com). This is the only external resource loaded by this website. When your browser requests these fonts, Google may log your IP address as part of standard CDN operation. This is governed by Google's Privacy Policy. We have no control over and receive no data from this interaction.

4.2 — Proton Mail

Emails sent to our enquiry address are received and stored via Proton Mail, a privacy-focused encrypted email service operated by Proton AG (Switzerland). Proton Mail applies end-to-end encryption and operates in accordance with its own Privacy Policy.

4.3 — Contact email protection

Our enquiry email address is protected by a client-side mathematical CAPTCHA rendered on an HTML canvas element (not readable as text in page source) combined with XOR encoding of the address itself. The address is only decoded and displayed after a human correctly solves the CAPTCHA. This process occurs entirely within your browser. No information is transmitted to any server during this process. The purpose is to prevent automated bots from harvesting the address.

4.4 — LinkedIn

This website contains links to Dr Sirault's LinkedIn profile. If you follow these links, LinkedIn's Privacy Policy applies. We receive no data from LinkedIn as a result of these links.

4.5 — Cloudflare (website hosting)

This website is hosted on Cloudflare Pages and delivered via Cloudflare's global content delivery network (CDN). As a consequence of using Cloudflare's infrastructure, visitor connection data — including IP addresses, request timestamps, and browser information — passes through and is processed by Cloudflare's servers as part of delivering the website and providing DDoS protection and security services. AIAgriXpert does not receive, access, or store this data. Cloudflare's handling of this data is governed by Cloudflare's Privacy Policy.

5. Data Storage and Security

5.1 — How enquiry emails are stored

Emails sent to our enquiry address are stored within Proton Mail's end-to-end encrypted infrastructure. Proton Mail's encryption means that even in the event of a breach of Proton's own servers, the content of emails cannot be read by unauthorised parties. No personal information collected through this website is stored on servers operated by AIAgriXpert.

5.2 — Security measures

The primary technical measure protecting your information is Proton Mail's end-to-end encryption. The primary organisational measure is that your email is only accessible to Dr Xavier Sirault and is not shared with any third party. The Proton Mail account is protected by a strong password and two-factor authentication.

Business records and the LinkedIn content calendar stored on Dr Sirault's local infrastructure are protected by operating system-level access controls. Access is restricted to Dr Sirault only. The homelab is not accessible to any third party.

If you enter into a professional consulting engagement with AIAgriXpert, you may share commercially sensitive information during that engagement. In that context, APP 11 of the Australian Privacy Principles applies: we take reasonable steps to protect that information from misuse, loss, or unauthorised access, and to destroy or de-identify it once it is no longer needed for the purpose it was collected.

5.3 — Data breach obligations

Under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988), we are required to notify the Office of the Australian Information Commissioner (OAIC) and any affected individual if a data breach occurs that is likely to result in serious harm.

For this practice, the realistic breach scenarios are: (1) unauthorised access to the Proton Mail account, which would expose enquiry email threads — mitigated by strong authentication including two-factor authentication; (2) unauthorised access to the homelab infrastructure where the LinkedIn content agent operates — this system contains only Dr Sirault's own post records and aggregate engagement counts, and holds no personal information about third parties, meaning the serious harm threshold would not be met. If a breach occurs that meets the notification threshold, we will act in accordance with our obligations promptly.

6. Your Rights Under Australian Privacy Law

Under the Privacy Act 1988 and the Australian Privacy Principles, you have rights in relation to personal information we hold about you. In practice, the only personal information AIAgriXpert holds about any individual is the email address and message content of enquiries we have received. Your rights in that context are:

• Access (APP 12): You can ask us what information we hold about you. We will confirm whether we have an email from you and provide a copy of that correspondence.
• Correction (APP 13): If your name or email address in our records is incorrect, you can ask us to correct it.
• Deletion: You can ask us to delete the email correspondence we hold from you. We will do so unless we are required to retain it under Australian tax law (see Section 8).
• Complaint: You can make a privacy complaint to us (see Section 10) or directly to the OAIC.

From June 2025, individuals also have the right to bring a direct civil claim for a serious invasion of privacy under the statutory tort introduced by the Privacy and Other Legislation Amendment Act 2024.

To exercise any of these rights, please contact us using the details in Section 10.

7. LinkedIn API and ContentPerformanceAgent

AIAgriXpert Consulting operates a private, homelab-hosted software agent called ContentPerformanceAgent. This agent is used exclusively by Dr Xavier Sirault for two purposes:

• Drafting and publishing weekly professional content to Dr Sirault's personal LinkedIn profile via the LinkedIn Posts API.
• Maintaining a private content calendar recording the topic, date, and engagement counts (reactions, comments, shares, impressions) for posts authored by Dr Sirault.

ContentPerformanceAgent is designed to retrieve aggregate engagement metrics for posts authored by Dr Sirault via the LinkedIn API (using the r_member_postAnalytics permission where access is granted). These metrics consist of aggregate counts only — total reactions, comments, shares, and impressions for each post. They do not include any information identifying which individuals interacted with a post, and no personal data of other LinkedIn members is accessed, downloaded, or stored. Where specific API access is unavailable, engagement counts are entered manually by Dr Sirault from LinkedIn's native analytics view. The data recorded in either case is identical in form: aggregate numbers only.

All data processed by ContentPerformanceAgent is stored locally on infrastructure operated exclusively by Dr Sirault in Australia. No data is transmitted to or stored on third-party servers in connection with this agent. ContentPerformanceAgent is a private tool for Dr Sirault's personal use only and is not offered as a product or service to any third party.

8. Data Retention

We retain personal information only for as long as necessary for the purpose for which it was collected, or as required by Australian law.

• Enquiry emails with no engagement: Deleted within a reasonable period after the enquiry is resolved or no further response is expected.
• Correspondence related to a professional engagement: Retained for five years from the date the relevant tax return is lodged, in accordance with the ATO record-keeping requirements for business.
• Content calendar and post records: Retained as internal business records. These contain no personal information about third parties.

Upon a valid deletion request, we will remove personal information from our records within 30 days, subject to any ATO retention obligations that require us to retain related correspondence.

9. Changes to This Policy

We update this Privacy Policy when required by changes to Australian privacy law. The effective date at the top of this page reflects the date of the most recent update. We do not change this policy for commercial or marketing reasons — only to remain compliant with Australian legal obligations.

10. Contact and Complaints

For any privacy-related enquiry, access request, correction request, or complaint, please contact Dr Xavier Sirault directly. Solve the CAPTCHA below to reveal the contact email address.

If you are not satisfied with our response

You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001