PICSEL Privacy Policy

 

NetSeg Pty Ltd trading as PICSEL / picsel.ai

ABN 83 693 992 862

Melbourne, Victoria, Australia

 

Effective Date: 24 August 2026

 

1. Who we are

 

NetSeg Pty Ltd ("NetSeg", "we", "us", or "our") operates the PICSEL service at picsel.ai (the "Service") — an OT cybersecurity AI advisor and related tools.

 

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Service or visit picsel.ai. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent they apply to us.

 

NetSeg also operates netseg.io (consulting). That site has its own privacy notice. This policy is for PICSEL / picsel.ai.

 

2. What we collect

 

Depending on how you use the Service, we may collect:

 

Account and contact details: name, email address, organisation name, role, password or authentication identifiers, and billing contacts

Usage and device data: IP address, browser/device type, pages or features used, log data, approximate location from IP, and diagnostics

Content you submit ("Customer Content"): prompts, chat messages, uploaded files, business context, and documents you generate or store in the Service

Payment information: handled by our payment provider; we do not store full card numbers on our systems

Support communications: emails or messages you send us

Cookies and similar technologies: see section 8

 

We only collect personal information that is reasonably necessary to provide and improve the Service. If you do not provide what we need for an account, we may not be able to provide the Service.

 

We do not ask you to submit sensitive information (as defined in the Privacy Act) or credentials, secrets, or detailed OT network diagrams into the Service. If you choose to include personal or sensitive information in Customer Content, we will process it as part of providing the Service.

 

3. How we collect it

 

We collect personal information:

- Directly from you when you register, use the Service, or contact us

- From your organisation if an admin invites you or manages a team account

- Automatically through the Service and website (logs, cookies, analytics)

- From authentication or payment providers you use with us

 

Where reasonable and practicable, you may deal with us anonymously or using a pseudonym. That is usually not practicable if you want an account or paid subscription.

 

4. Why we use it

 

We use personal information and Customer Content to:

- Provide, operate, secure, and improve the Service

- Authenticate users and manage accounts

- Process payments and manage subscriptions

- Generate AI responses and documents based on your prompts and context

- Provide support and communicate with you about the Service

- Monitor abuse, security, and service performance

- Comply with law and enforce our Terms

 

We do not sell personal information.

 

5. AI processing

 

The Service uses artificial intelligence (including third-party AI model providers) to generate responses and documents.

 

- Customer Content you submit may be sent to our subprocessors (including AI providers and hosting providers) solely to provide the Service

- We do not use Customer Content to train public foundation models for third parties, except where a provider's product terms require limited operational processing we cannot disable; we will prefer providers and settings that do not use your content for their model training where that option exists

- AI outputs can be wrong or incomplete. See the PICSEL Terms of Use for the advisory nature of the Service

 

6. When we share information

 

We may disclose personal information and Customer Content to:

- Service providers / subprocessors who help us run the Service (hosting, databases, authentication, email, analytics, AI model providers, payment processors), under arrangements that require them to protect the information

- Professional advisers (accountants, lawyers, insurers) where reasonably necessary

- Government authorities, regulators, or courts where required or authorised by law

- A purchaser or successor if we restructure or sell the business (subject to appropriate confidentiality)

 

Our current categories of subprocessors typically include cloud hosting, database, authentication, email delivery, analytics, AI inference, and payment processing. A current list is available on request at leon@netseg.io (and we will publish a subprocessor page on picsel.ai when practical).

 

7. Overseas disclosure

 

The Service and some subprocessors may store or process information outside Australia (for example in the United States or other regions where our providers operate).

 

Where we disclose personal information overseas, we take reasonable steps so the recipient handles it consistently with the APPs, or we otherwise comply with APP 8 (including contractual protections where appropriate).

 

8. Cookies and analytics

 

We use cookies and similar technologies to operate the Service, keep you signed in, remember preferences, and understand usage. You can control cookies in your browser; blocking some cookies may affect the Service.

 

Third-party analytics providers may collect usage data under their own policies. We configure them where practicable to limit unnecessary collection.

 

9. Security

 

We take reasonable steps to protect personal information and Customer Content from misuse, interference, loss, and unauthorised access, modification, or disclosure. No online system is completely secure. Do not submit passwords, API keys, or highly sensitive OT operational data into chat prompts unless you accept that residual risk.

 

10. Retention and deletion

 

We keep account information and Customer Content while your account is active and for a reasonable period afterwards as needed for backups, dispute resolution, security, legal obligations, and insurance.

 

You may request deletion of your account and associated personal information by contacting us. We will delete or de-identify personal information when it is no longer needed, except where we must retain it by law or for legitimate business records (for example invoices). Backup copies may persist for a limited period before being overwritten.

 

11. Your rights

 

You may request:

- Access to personal information we hold about you

- Correction of inaccurate, out-of-date, incomplete, or misleading information

- Deletion of your information, where we are not required to keep it

 

We will respond within a reasonable time. We may refuse a request in limited circumstances allowed by the Privacy Act; if we do, we will explain why unless we are not required to.

 

Privacy complaints: contact us first. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au

 

12. Children

 

The Service is intended for business and professional users. It is not directed at children under 16. If you believe a child has provided personal information, contact us and we will take appropriate steps.

 

13. Direct marketing

 

We may email you about PICSEL features, updates, or offers relevant to your use of the Service. You can opt out at any time via the unsubscribe link or by emailing us. Transactional messages (billing, security, service notices) are not marketing.

 

14. Contact us

 

Privacy queries and complaints:

 

NetSeg Pty Ltd trading as PICSEL / picsel.ai

ABN 83 693 992 862

Melbourne, Victoria, Australia

Email: leon@netseg.io

Website: https://picsel.ai

 

15. Changes

 

We may update this Privacy Policy from time to time. The current version will be posted on picsel.ai with an updated effective date. Significant changes will be highlighted where practicable.

​