Privacy

Last updated: 30 October 2026

1. Who we are

Ocius Technology Group Pty Ltd, trading as Utaba, runs Station Zero and is responsible for the personal information described here. We handle it under the Australian Privacy Act 1988 and the Australian Privacy Principles.

This policy covers our website, our application programming interface (API), and the Model Context Protocol (MCP) services your artificial intelligence (AI) agent connects to. It does not cover our approved payment provider's checkout page or the identity provider accounts you connect, which have their own policies.

2. What we collect

We collect only what we need to run your account, the services and billing.

What	Examples	Where it comes from
Account details	Name, email, password (stored hashed), passkeys, profile image	You, at sign-up
Organization details	Members, roles, invitations, the operator email an AI gives at sign-up	You or your AI
Sign-in and security	Internet protocol (IP) addresses and browser details, API keys, OAuth approvals	Your devices and AI clients
Your content	Data, files and settings you store through the services	You and your AI, through the services
Connected accounts	Identity provider sign-in tokens, encrypted	You, if you connect an account
Billing	Wallet balance, ledger of purchases and charges, subscriptions, payment provider customer reference	Us and our approved payment provider; we never receive card details
Service usage	When a person or agent used a service, as a hashed identifier, for per-user charges	Your use, and your AI's
Email records	Which notices we sent you and whether they were delivered	Our email provider
Logs	Events, identifiers, timings and errors; IP addresses and security and general logging events	Our systems

3. How we use it

We use your information to:

create and secure your account, and let your AI sign in
run the services you enable and return your content to you and your AI
meter calls, recurring charges and storage, count the people and agents that used a service in a period, take payments and keep an accurate ledger
send service emails, such as verification, invitations, low-balance and deletion notices
detect and stop fraud, abuse and security incidents, and apply rate limits (we use your IP address for this, and investigating may mean looking at the content involved)
meet our legal, tax and accounting obligations

We do not sell personal information, use your content to train AI models, or send marketing email without your consent.

Service emails. Some emails are part of running your account, so you cannot unsubscribe from them while your account is open. These include verification, security, billing, low-balance, unpaid-charge and deletion notices, account closure and abuse notices. You can unsubscribe from any marketing email at any time.

Connected email accounts. If you connect an email account, we use the email addresses and messages your AI accesses only to carry out what your AI asks for. They go to your AI, which asked for them on your behalf, and nowhere else: we do not use them for marketing and do not disclose them to anyone else.

We do not sell, rent or share personal information. The providers that we use to run Station Zero, such as hosting, payments and email providers, process it on our behalf and only to do that work. Some of them are outside Australia, including in the United States. If you connect an account at an identity provider, that provider handles your sign-in under its own policy.

Your AI clients. Anything you let your AI read from Station Zero then goes to your AI provider under your agreement with them. We do not control what they do with it.

Other disclosures. We may also disclose information if the law requires it, to protect people or our systems, or to a buyer if our business is sold. We would tell you about a sale.

5. How long we keep it, and how we protect it

How long we keep it.

Information	How long
Account and content	While your account is open; deleted after closure
Unverified, unused accounts	Deleted after a period of inactivity, unless credit was bought
Stored data left unpaid	May be deleted after notice that it is unpaid
Payment and ledger records	For tax and accounting within applicable legal requirements
Logs, including IP addresses	Kept for a limited time for security and diagnostics, then deleted
Backups and deleted data	Removed from backups and recovery stores in the ordinary course after deletion from the live system

Security. We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorized access, modification or disclosure.

6. Your rights and other things to know

Your rights. You can ask to access or correct your personal information by contacting us through our website. We may need to confirm who you are first, and we may keep records the law requires, such as payment history.

Complaints. If you are unhappy with how we handled a request, tell us first. If we do not resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Cookies. We use only the cookies needed to keep you signed in and secure. We do not use advertising or analytics cookies.

Children. Station Zero is not for anyone under 18, and we do not knowingly collect their information.

Changes. We will post updates here with a new date, and email you about significant changes.