Privacy Policy
Last updated: 7 September 2026
Nurtra ("Nurtra", "we", "us") provides an enrolment CRM for childcare providers, available at nurtra.ai and crm.nurtra.ai. This policy explains what personal information we handle, why, and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Two roles: your childcare provider, and us
Our customers are childcare organisations. When a childcare organisation records your family's details in Nurtra — or you submit an enquiry form, book a tour, chat on their website, or answer one of their surveys — that information is collected by the childcare organisation and held in their Nurtra account. We process it on their behalf and on their instructions. If you have questions about how a particular centre uses your information, start with them; this policy covers what Nurtra itself does with the information we host.
What we hold
- Staff accounts — name, work email, role, and sign-in activity for the people at childcare organisations who use Nurtra.
- Families and enquiries — guardian names and contact details, children's names and dates of birth, requested days and start dates, correspondence (email, SMS, website chat, call notes), tour bookings, survey responses, documents the organisation or family provides (for example a medical or allergy plan), and referral activity.
- Website interactions — where a childcare organisation adds our chat widget or tracking snippet to their own website: page views, form starts, how a visit arrived (for example from an advertising campaign), and an identifier that joins a visitor's browsing to the enquiry they go on to submit.
- Connected social media accounts — where a childcare organisation connects its Facebook, Instagram or TikTok account: the account's identity, secure access tokens, and content the account has published. Nurtra reads; it never posts.
- Connected childcare software — where an organisation links Nurtra to its childcare management system: centre and room details it chooses to import.
Children's information
Children's details reach Nurtra from a parent or guardian, or from the childcare organisation they are enrolling with, and are used solely to manage that enquiry and enrolment. We never use children's information for marketing, profiling or any other purpose, and we hold it only as long as the organisation needs it.
How we use information
- Running the CRM: enquiry pipelines, tour scheduling, enrolment workflows and reporting.
- Delivering the messages childcare organisations compose — email and SMS are carried by specialist delivery partners on our behalf.
- AI-assisted features, such as summarising enquiries or analysing survey responses. The relevant data is processed by our AI service provider solely to deliver the feature and is not used by them to train their models.
- Keeping the service secure, supported and improving.
Storage and security
Nurtra runs on reputable cloud infrastructure. Information is encrypted in transit; uploaded documents live in private storage reachable only through short-lived signed links; passwords are hashed; and credentials such as integration keys and social media tokens are encrypted at rest. Each organisation's data is isolated to that organisation, and access within it follows staff roles.
Disclosure
We share personal information only with the service providers that make Nurtra work — cloud hosting, email and SMS delivery, and AI processing — under agreements that limit them to providing those services; with third-party platforms an organisation itself chooses to connect; and where the law requires it. We do not sell personal information. Ever.
Cookies and tracking
crm.nurtra.ai uses cookies to keep people signed in. The optional chat widget and tracking snippet operate on childcare organisations' own websites as described above; you can limit them with your browser's usual cookie and tracking controls.
Access, correction and deletion
You can ask to see, correct or delete the information held about your family. The childcare organisation you dealt with controls their records, so they are the fastest path — or contact us and we will work with them on your behalf. Childcare organisations can remove enquiries, documents and other records themselves, and when an organisation leaves Nurtra their data is deleted. Disconnecting a social media account in Settings removes its stored tokens; you can also revoke Nurtra's access from the platform's own settings, and ask us to delete any content we hold from it.
Overseas processing
Some of our service providers may store or process information outside Australia. Where that happens we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
Complaints
If you believe we have mishandled your information, contact us first and we will respond promptly. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes and contact
We will post any changes to this policy on this page, with the date above updated. For any privacy question or request, email privacy@nurtra.ai.