Privacy Policy

1. Who we are

This Privacy Policy explains how Automate Leads ("Automate Leads", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use our website and Service. We operate from Perth, Australia. Contact: info.automateleads@gmail.com.

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) where applicable, and other applicable laws.

2. Scope

This Policy covers information we collect about account holders, team members, website visitors, and individuals who contact us. If you use Automate Leads to manage your own customers or leads, you are the controller of that customer data; we process it on your behalf to provide the Service. You are responsible for providing appropriate notices and collecting any required consents from your customers.

3. Information we collect

We may collect:

• Account information — name, email, password (hashed by our auth provider), business profile details, phone numbers, ABN, banking details you choose to store for invoicing, and similar account settings.
• Customer and business data you enter — leads, customers, job details, quotes, invoices, calendar events, messages, notes, and files you upload.
• Usage and technical data — IP address, device/browser information, log data, approximate location derived from IP, and analytics events (including via Vercel Analytics).
• Communications — support requests, contact form submissions, and transactional email/SMS metadata.
• Billing data — subscription status and payment-related identifiers processed by Stripe (we do not store full card numbers on our servers).

4. How we use information

We use personal information to:

• provide, operate, secure, and improve the Service;
• authenticate users and enforce multi-factor authentication;
• send transactional messages (quotes, invoices, reminders, invites, alerts);
• process subscriptions and prevent fraud;
• provide AI-assisted features you choose to use;
• respond to enquiries and provide support; and
• comply with law and enforce our Terms.

5. Third-party processors and international transfers

We use specialist providers to operate the Service. Personal information may be processed by:

• Supabase (authentication, database, storage, and related infrastructure)
• Vercel (hosting, deployment, and analytics)
• Resend (transactional email delivery)
• Stripe (subscription billing and payment processing)
• Mobile Message (SMS delivery)
• OpenAI (AI-assisted features such as chat and content suggestions)
• Google (OAuth sign-in and optional Google Business Profile integration)

Those providers may store or process data in Australia or overseas (including the United States and other regions where they operate). By using the Service, you acknowledge that overseas disclosure may occur and that overseas providers are subject to their own security and legal regimes.

We are not responsible for privacy or security incidents caused solely by third-party providers, except to the extent we cannot exclude liability under applicable law. See also our Terms and Conditions regarding third-party outages and data incidents.

6. Cookies and analytics

We use cookies and similar technologies that are necessary for authentication and session management. We may also use analytics tools to understand product usage and improve performance. You can control cookies through your browser settings, noting that disabling necessary cookies may break sign-in.

7. Marketing

We primarily send transactional and service-related communications. If we send marketing emails, you can opt out using the unsubscribe mechanism or by contacting us. Transactional messages related to your account or customer workflows may still be sent.

8. Security

We implement reasonable technical and organisational measures appropriate to the nature of the Service (including encrypted transport, access controls, and multi-factor authentication requirements for accounts). No method of transmission or storage is 100% secure. You are responsible for protecting your credentials and devices, and for the sensitivity of data you choose to store in the Service.

9. Retention

We retain personal information for as long as needed to provide the Service, meet legal and accounting obligations, resolve disputes, and enforce agreements. After account closure, we may delete or de-identify data within a reasonable period, subject to backup cycles and legal holds. Data held by third-party providers is also subject to their retention practices.

10. Your rights

Depending on applicable law, you may request access to, correction of, or deletion of personal information we hold about you, or lodge a complaint. Contact info.automateleads@gmail.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If you are an end customer of an Automate Leads subscriber, please contact that business first regarding your personal information in their account.

11. Children

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

12. Changes

We may update this Privacy Policy from time to time. The effective date will be shown on this page. Material changes may require re-acceptance before you continue using the Service.

13. Governing law

This Privacy Policy is governed by the laws of Western Australia, Australia.