Privacy Policy
Three things in plain English: what we take from you, what we do with it, and where it lives. We teach business owners to put AI into their companies, so we had better be able to explain our own data flows.
1. What we collect and why
Free AI Readiness Check
- You give us: industry, answers to 13 questions, your biggest headache (optional), name (optional), email (required), WeChat or phone (optional).
- We use it to: calculate your score (server-side, fixed rules; every point traces to one of your answers), assemble reviewed learning suggestions from your selections (this diagnostic flow does not send your answers to a generative AI provider), keep the report under your email so you can compare later, and contact you if needed.
- Referral codes: if you arrived through a member's link, your completed check is attributed to them. They see a masked email and two states, invited / paid. They never see your answers.
Membership
- Sign-in: email only, with a one-time code sent by our email provider. No passwords.
- Payment: handled by Stripe. We never see your card number. Stripe tells us that you paid, how much, and for which period.
- Usage: we log which lesson you opened and when. Two reasons: to help you when something breaks, and because the current subscription period is non-refundable for digital content, this is the delivery record.
- Tutor conversations: text questions and answers are stored to improve lessons and handle requests. Uploaded screenshots are processed by the AI provider but are not stored in our conversation records. Audio is processed in real time; we do not store voice recordings or voice transcripts on our servers. On-screen voice transcripts last for the page session. When switching to voice, recent text conversation and current lesson content are supplied to the voice provider.
- Progress: step status is synced to your member account. Failed syncs are queued locally for retry. Some preferences, including course-completion ticks, remain in your browser.
Four-week practice workspace
Route choices, self-marked steps and notes stay in the current page by default. They are saved in this browser only if you enable device saving; turning it off removes that local record. They do not sync between devices. The report exercise reads your JSON check file in the browser without uploading it. Exporting a learning record downloads it to your device and does not submit an assignment. Text you actively send to the tutor and its replies follow the tutor-conversation policy above. Do not include confidential customer data.
The AI receptionist on the website
- Your question, its answer and your IP address are stored. The team can review them when handling issues. For a trackable receipt, use the report form.
The demo phone line (+61 2 5839 3561)
- An AI answers. Audio is processed in real time by our telephony and AI providers. We do not store recordings. It says it is an AI when asked. Do not share sensitive information on that line.
Website visits
- Path, referring page, language, and whether you are on a phone. No cookies, no third-party trackers.
Problem reports and receipts
- We store the description, expected result, page/lesson/step, interface language and browser family you submit. A screenshot is uploaded only when you select and confirm it. A salted network-address hash is kept for abuse prevention; customer files and chat history are not collected automatically.
- Reports and chosen screenshots are stored privately and may be reviewed by authorised team members and AI-assisted tools for investigation, classification, repair and replies. Controlled local working copies may be retained during review; provider processing is described below. Redact passwords, codes, customer details and sensitive payment data first.
- The tracking link contains a private credential; the database stores only its hash. Anyone holding the complete link can view that report and public replies and add information, but cannot see internal decisions or other reports. Your browser may save recent receipt links, not images or descriptions; clear browser data on shared devices. Records are retained as needed to handle issues. Contact us below for deletion requests.
2. Who processes it for us
We do not run our own servers. These providers store and process data on our behalf, and some of it is processed outside Australia (mainly the United States, Japan and Singapore):
| Database, sign-in | Supabase (database hosted in Sydney) |
|---|---|
| Payments | Stripe |
| Resend | |
| AI text (tutors, receptionist) | Anthropic |
| AI voice (voice tutor, phone line) | OpenAI |
| Telephony | Twilio |
| Hosting, DNS | Vercel, Cloudflare |
We do not sell your information and do not use it for advertising to anyone but you.
Camp opening notifications
If you request a camp opening notification, we store your email address, preferred notification language, request time and consent version separately from the daily brief. We use this list only for the camp opening information you requested. This is not enrolment or a seat reservation. Submitting does not subscribe you to the daily brief or mean an email has been sent. Email ownership is not verified by this form.
Our authorised operators can review the private list. After submitting, keep your private withdrawal link; anyone with that link can cancel this notification request. The server stores a hash rather than the original link secret. We also use a hashed network identifier for rate limiting. You can withdraw through your saved link or request access or deletion through the feedback page; we may need to verify the request. We retain the request only while needed for this stated purpose, then delete or de-identify it.
3. How long we keep it
- Readiness checks and contact details: until you ask us to delete them, or two years after our last contact.
- Member accounts, payment and usage records: for the life of the membership and two years after (billing disputes).
- Receptionist conversations and visit logs: one year.
4. Your rights
You can ask to see, correct or delete what we hold about you. How: tell the AI receptionist on the website what you want and which email you used. That conversation is stored and handled by a person. Or use any other contact details published on the site. We reply within a reasonable time and will not treat you differently for asking.
If you think we have got it wrong, you can complain to the Office of the Australian Information Commissioner (OAIC, oaic.gov.au).
5. Straight talk
- The course teaches you to hand your own company's material to AI tools. Those tools (Claude, ChatGPT and others) are your own accounts under their own privacy terms, not this policy. The course repeats it often: set the rules first, then feed the data.
- This policy changes as the product changes. The date at the top moves when it does.