Privacy

Plain English. No surprises.

What we collect, why we collect it, where it sits, and what you can ask us to do about it.

§ 01 — Effective
2026-05-07 · Living document
01

What we collect.

Things you give us: name, email, role, and any notes you add when booking an audit through Calendly. Anything you share with us during the audit or a paid engagement. Emails you send us.

Things the site collects: minimal analytics (page views, referrer). No third-party advertising trackers. No cookies beyond what's strictly required for the site to function.

02

Why we collect it.

Calendly bookings: to schedule the audit and produce the one-page diagnostic. Engagement data: to deliver the work you've contracted us for. Site analytics: to know what's working.

We don't sell your data. We don't share it with third parties for marketing. We don't add you to a marketing list without explicit opt-in.

03

Where it sits.

Calendly (United States) handles audit scheduling. Anthropic (United States, no-training contract) handles AI processing during audits and built systems. Our hosting provider runs the website. Engagement-specific tools (Bedrock, Azure OpenAI, others) are picked per client and named in your proposal.

We name every model and sub-processor that touches your data in the proposal data-flow note. No client data is used to train external models.

04

How long we keep it.

Calendly bookings: until you ask us to delete them. Audit dossiers: 12 months by default, or until you ask us to remove them earlier. Engagement run logs: metadata only (timestamp, status, token count). Prompt and response bodies are not logged unless explicitly needed for debugging, and are PII-redacted before storage.

05

Your rights.

You can ask for what we hold on you. We respond within 30 days. You can ask us to delete it. We do, unless we're legally required to keep something, in which case we'll tell you exactly what and why.

We operate from Australia. The Australian Privacy Principles apply. Clients with GDPR or other regulatory exposure get a Data Processing Agreement on request, with sub-processors named.

06

Contact.

For privacy questions, the fastest route is the audit booking link below. Reply to any email we've sent you, or book a 30-minute call. We respond within 24 hours.

Questions?

We answer
within 24 hours.

Use the audit booking to reach us, or reply to any email we've sent. We don't hide behind a help desk.

No commitment. The page is yours.