This Cookie Policy explains what cookies and similar technologies PumAI uses, why we use them, and how you can control them. It applies to pumai.com.au, our dashboard, and our embeddable webchat widget.
1. What is a cookie?
A cookie is a small text file a website places in your browser to remember information between visits. Similar technologies include localStorage, sessionStorage, and pixel tags. We refer to all of these as "cookies" in this policy.
2. Categories of cookies we use
- Strictly necessary — required for the site to function (authentication, CSRF, session).
- Functional — remember your preferences (theme, active tenant, your cookie choice).
- Marketing — the Meta Pixel, used to measure our advertising. Loaded only after you accept it; we do not use any other analytics or advertising cookies.
- Third-party — set by processors such as Stripe on their hosted pages.
3. Cookies we set
| Name | Category | Purpose | Duration | Party |
|---|---|---|---|---|
authjs.session-token | Strictly necessary | Keeps you signed in | Session / up to 24 hours | First-party |
authjs.csrf-token | Strictly necessary | Protects sign-in from CSRF | Session | First-party |
authjs.callback-url | Strictly necessary | Stores post-login redirect URL | Session | First-party |
pumai_active_business | Functional | Remembers active tenant for superadmins | 30 days | First-party |
pumai-theme (localStorage) | Functional | Remembers dark/light mode | Persistent | First-party |
pumai_cookie_consent | Functional | Remembers whether you accepted marketing cookies | 1 year | First-party |
_fbp, _fbc | Marketing | Meta Pixel — measures our advertising. Set only after you accept | Up to 90 days | Meta |
| Stripe cookies | Third-party | Fraud prevention on checkout / customer portal | Up to 1 year | Stripe |
4. Marketing cookies & consent
On our public website we use the Meta Pixel to measure the effectiveness of our advertising. It is a non-essential marketing technology, so it loads only after you accept via the cookie banner. Until you accept, the Pixel is held in a consent-revoked state and sends nothing. If you reject, it stays off. We do not use any other analytics or advertising cookies.
You can change your choice at any time:
Marketing cookies (Meta Pixel) — current choice: Not set yet
Withdrawing consent stops the Pixel immediately on this device. Cookies already set by Meta can be cleared via your browser settings (see below).
5. How to control cookies
You can delete or block cookies at any time via your browser settings. Most modern browsers also let you block third-party cookies by default. Instructions:
Note: disabling strictly necessary cookies will prevent you from signing in to the PumAI dashboard and using authenticated features.
6. Changes to this policy
We may update this policy from time to time. The effective date is shown at the top of the page. Material changes will be notified via email or the dashboard.
7. Contact
Questions about cookies? privacy@pumai.com.au