Privacy policy

AI Sunshine Coast provides websites and digital business tools from the Sunshine Coast, Queensland. This policy covers aisunshinecoast.com, our business app at app.aisunshinecoast.com, and the enquiry, AI and content tools we operate for client businesses.

If you contact a business through one of those tools, that business receives your enquiry and manages its customer relationship with you. Its own privacy practices also apply. Our authorised team can access information to operate and support the service.

Optional features depend on what a business has enabled. Having a website or chat assistant does not mean SMS, voice or Google publishing is enabled.

• Enquiries: your name, email, phone number, business, website, service interests and the message or other details you provide.
• Conversations: chat messages and, where enabled, SMS messages, call details, transcripts, summaries, follow-up notes and booking information.
• Business accounts: login email, business and website details, team membership, permissions, settings and records of actions taken in the app.
• Content: job details, suburb or service area, photos, videos, voice notes, draft text and publication approvals. This may include information about customers or people shown in media.
• Connected services: information from a service you authorise, such as Google Business Profile, as explained below.
• Technical information: IP addresses used for abuse prevention, request and error information, usage counts, and delivery or security records. Hosting services also process connection and device information.

We collect information when you submit it, when a client business adds it, and when an authorised service sends us a result or update. Please avoid sharing passwords, payment-card details, identity documents or sensitive personal information in a chat or job description.

Our website grader fetches the public website address you enter and analyses its content. If you request the report, we save your email and the report with the enquiry. The calorie and macro calculator calculates in your browser; its inputs are not submitted to our server by that tool.

We use information to answer enquiries, provide the requested service, manage business content, generate AI responses or drafts, deliver notifications, troubleshoot problems and prevent misuse.

An enquiry can be stored in the business dashboard and sent to the business’s nominated email recipient. Where enabled, relevant information also goes to its messaging, voice or booking service. Authorised business users and our agency team can review records within their permitted access.

The providers listed below process information to run these features. Content you approve for a public website or external service is shared publicly. A privacy request may also require us to work with the relevant business or provider.

Our AI features use Anthropic’s Claude API. Chat text and relevant business information are sent to Anthropic to generate a reply. Content tools can send job notes, selected images or public review text to generate suggested writing, image descriptions or review replies.

On the AI Sunshine Coast website, if you agree to pass on an enquiry, the assistant can save your contact details and the conversation supplied with that enquiry. Managed-site chat, such as Voltpro’s, processes the conversation for answers and saves the details you explicitly submit in its enquiry form. It does not save every ordinary chat turn as a customer record.

If you use job dictation, your recorded voice note is sent to AssemblyAI for transcription. The returned text becomes part of your job details if you save it. Our dictation feature does not save a separate audio file in our database.

AI responses can be wrong. Check important details with a person. Job content and suggested review replies require review before publication; chat replies are generated automatically.

AI providers have their own retention and data-use terms. This is not a zero-retention service. AssemblyAI’s model-improvement use can depend on the account’s plan and opt-out settings; we do not promise that every provider excludes all submitted data from model improvement. You can type job details instead of using dictation, or contact us directly instead of using chat.

Where a business has enabled these features, Twilio carries messages and phone traffic, ElevenLabs provides the AI voice service, and Cal.com handles booking requests. This can involve phone numbers, message text, call audio, transcripts, summaries, appointment details and relevant enquiry context.

We can store message history, call summaries and transcripts, booking records and delivery results, and send a summary to the business. Voice providers may also retain recordings under their settings and terms. Automated SMS, voice and booking dispatch is currently paused for AI Sunshine Coast and Voltpro; website chat and email notifications operate separately.

New job-evidence photos upload to private storage. We create a processed copy that removes embedded metadata, including GPS metadata, for preview and approved publication. A processed photo can still show personal details in the picture itself: check faces, number plates, addresses and documents before approving it.

Job drafts and source evidence are separate from the approved public version. Only the selected, approved job content is delivered to a public website. Raw job-evidence originals are not used as public website images.

If you choose to use device location in a supported capture flow, it requires permission. Precise location evidence is kept separately from the public suburb or service area. A suburb can be entered manually.

Other media tools can store website assets in Sanity and videos in Bunny Stream. Published images, videos, podcast content and external posts may be cached, downloaded or copied. Removing content from our system cannot recall copies already held by another person, search engine or provider.

Google is an optional connection authorised by a business owner or administrator. Google handles the sign-in; we do not receive your Google password. The connection uses access and refresh tokens, stored encrypted on our server, to access the permitted Business Profile features.

Depending on the enabled feature, we access and store Google account and business-location identifiers, profile names, connection permissions, review authors’ display names, ratings, review text and replies. We use this information to identify the connected profile, display its reviews and send a reply you approve. If you request an AI reply suggestion, the review author’s displayed name, rating and text are sent to Anthropic with business writing guidance.

Google job publishing is being prepared and is not yet released. When enabled, it will send the job text and processed hero image approved for Google to the selected profile, and store the post identifier, status and link to track delivery. Publishing to a website does not itself authorise a Google post.

You can remove AISC’s access through your Google Account connections and contact us to remove stored connection data. Revoking access does not itself delete previously published Google content or our existing records. Ask us about stored data separately, and manage public Google posts or reviews through Google where appropriate.

The provider used depends on the feature. Our current system integrates with:

• Vercel: website and application hosting, request handling and operational logs.
• Supabase: accounts, business and enquiry records, conversation and delivery records, and private job-evidence storage.
• Sanity: editorial content, approved website content and associated assets.
• Anthropic and AssemblyAI: AI responses and writing assistance, and voice-note transcription respectively.
• Resend: enquiry notifications, requested report emails and email delivery events.
• Upstash: abuse-prevention and usage limits, including identifiers such as IP addresses on supported routes.
• Twilio, ElevenLabs and Cal.com: messaging, voice and booking features where enabled.
• Bunny Stream: uploaded video hosting and playback.
• Google: authorised Business Profile connections, review management and approved publishing when available.

External websites, media players and services you choose to open also have their own privacy terms.

Our primary Supabase database and private file storage are configured in Sydney, Australia. That does not mean all information stays in Australia: hosting, AI, email, content delivery and connected services can process it overseas.

Overseas locations include the United States and, for Sanity’s hosting, Belgium. Provider support teams and their suppliers may process information in other countries. For current provider information, see Vercel’s data-processing terms, Sanity’s providers and locations, Anthropic’s privacy information and AssemblyAI’s privacy policy. Contact us if you need information about a particular service or location.

Retention differs by record type. Enquiries, conversation history, job details, approvals and business records do not all have an automatic deletion date. Closing a browser, removing a published page or disconnecting an integration does not necessarily delete the related records.

New raw job-photo uploads normally become eligible for cleanup after a short upload and processing window, initially three hours. Unpublished processed evidence normally becomes eligible after 30 days. Copies needed for an active approved publication are retained. These are cleanup rules, not guaranteed deletion times: active processing, retries and cleanup failures can delay removal.

Some temporary delivery records are cleaned after 30 or 90 days, depending on their type and whether work is still unresolved. This does not delete the original enquiry or conversation. Providers, backups, inboxes and cached public content have separate retention arrangements.

To ask about or request deletion of your information, use the contact details below. A request needs to consider the relevant business, provider copies and any records that must still be retained.

Our safeguards include encrypted web connections, account permissions, business-level access checks, private job-evidence storage and server-side handling of integration credentials. Public job content is separated from private evidence and drafts.

The business app uses cookies for sign-in and session security. Upload tools may store local recovery information on your device. The current AISC marketing site does not include an advertising pixel or a client-side analytics tracker in its application code; hosting and abuse-prevention records still apply.

No online service can guarantee complete security. Avoid putting confidential information into content intended for publication, and contact us if you suspect unauthorised access.

When you send an enquiry, we or the business you contacted can reply about it. Requested reports, enquiry notifications and service messages are separate from ongoing promotional messages.

You can ask us to stop promotional contact by emailing us or replying to the message. If an enabled SMS service sends you messages, reply STOP to opt out of that automated SMS conversation. Opting out does not itself delete enquiry or delivery records. Contact the relevant business about its own marketing preferences.

You can use the contact form or email instead of AI chat, type instead of dictating, decline device-location permission, and choose whether to connect Google. Some features cannot work without the information they need.

For a copy of information, a correction, a deletion request or a privacy concern, email kyle@aisunshinecoast.com, addressed to AI Sunshine Coast, Sunshine Coast, Queensland.

Tell us which business or website you dealt with and enough detail to locate the record. Please do not send identity documents in your first email. We may need to verify your identity or authority before disclosing or changing information, and involve the relevant client business.

For a complaint, explain what happened and the outcome you are seeking. You can also find guidance about privacy rights and complaints through the Office of the Australian Information Commissioner. Available rights and complaint options depend on the circumstances and applicable law.

Changes to this policy will be published on this page with an updated date.