Privacy Policy

1. Who we are

This Privacy Policy explains how the Provider collects, uses, discloses, and protects personal information in connection with the Services. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The Provider is Continuous Improvement Advisory Australia Pty Ltd (ABN 40 667 670 466) t/a Greystone Digital. Contact: hello@ripperreceptionist.com.

2. Information we collect

We collect personal information in the following ways:

• You provide — business name, contact name, email, mobile, website URL, onboarding details; payment information (processed by our payment provider; full card details not stored); call recordings and transcripts; feedback and corrections; other information you submit (including waitlist enquiries).
• Collected automatically — call metadata (caller number, duration, timestamp, outcome); AI assistant and Service activity logs; web and app usage data; IP addresses (security and rate limiting).
• From callers — when we answer or make calls on your behalf, we collect personal information about your callers and recipients (such as phone number and call content) so we can provide the Services to you.

3. How we use information

We use personal information to operate and deliver the Services; answer, make, transcribe, and summarise calls and messages; schedule and notify; process payments; secure and improve the Services; communicate with you (including service and, where permitted, product messages you may opt out of); and comply with our legal obligations.

We may use de-identified and aggregated information to develop and improve the Services and our AI models.

4. Automated processing and AI-assisted decisions

The Services use artificial intelligence and automated systems to process calls and messages and to generate transcriptions, summaries, classifications, routing, and suggested actions. These outputs may be used by you, or by automated features you enable, to support decisions about how an enquiry is handled.

AI outputs can be inaccurate or incomplete; you remain responsible for reviewing outputs and for any decision you make using them. Where automated processing is used in a way that could significantly affect an individual, we will provide information about that processing consistent with our obligations under the Privacy Act, and you must ensure your own use of such outputs complies with applicable law.

5. Disclosure and sub-processors

We do not sell personal information. We disclose to trusted service providers under obligations consistent with Australian privacy law:

• Telnyx — voice and SMS
• Stripe — payments
• Resend — transactional email
• Anthropic — AI conversation processing
• OpenAI — AI text-embedding processing
• Upstash — caching and rate limiting
• Cloudflare — DNS, CDN, security
• Supabase — application database and storage, Sydney, Australia
• Vercel — application hosting

Some providers operate or store data outside Australia. By using the Services, you acknowledge and consent to your information (and your callers' information) being processed by these providers, who may be overseas, subject to their privacy terms and our agreements. We take reasonable steps to ensure overseas recipients handle information consistently with the APPs.

We may also disclose where required or authorised by law, court order, or to protect any person's safety, rights, or property.

6. Call recordings and transcripts

Calls handled by the Services may be recorded and transcribed; callers are informed at the start of a call where required. Recordings and transcripts are stored securely and accessible to you and authorised Provider personnel. De-identified transcripts may be used to improve the Services and AI models.

You are responsible for ensuring any consent or notification required for recording, calling, or messaging in your circumstances is obtained or given.

7. Storage and security

Account, business, and call data are stored using Supabase in the ap-southeast-2 (Sydney) region. We take reasonable technical and organisational measures to protect personal information, including encryption in transit, encrypted storage, row-level security on database tables, access controls, and rate limiting on sensitive endpoints. No method of transmission or storage is completely secure.

If we become aware of a data breach likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

8. Retention

We retain account data while your subscription is active and for up to 7 years after closure (to meet tax and record-keeping obligations). Call logs and transcripts are retained for up to 12 months by default. You may request earlier deletion, which we will action subject to our legal retention obligations.

9. Your rights

Under the Privacy Act 1988 (Cth) you have the right to:

• access your personal information
• correct it
• request deletion (subject to legal retention)
• opt out of marketing

To make a request, email hello@ripperreceptionist.com; we aim to respond within 30 days. You may complain to us, and if unsatisfied, to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Cookies

We use cookies and local storage to maintain your authenticated session. We do not use third-party advertising cookies or cross-site tracking. Disabling cookies may prevent login. A referral cookie (rr_ref) is set only when you arrive via a partner referral link, has a 60-day lifetime, and is used solely to attribute partner-referred signups — not for advertising or cross-site tracking.

11. Governing law

This Privacy Policy is governed by the laws of South Australia, Australia, and the Privacy Act 1988 (Cth).

12. Changes

We may update this Privacy Policy and will notify you of material changes by email or in-app notice at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

13. Contact

Continuous Improvement Advisory Australia Pty Ltd (ABN 40 667 670 466) t/a Greystone Digital, hello@ripperreceptionist.com.