Privacy Policy

Last updated 20 June 2026

This document is a practical first draft and REQUIRES LEGAL REVIEW. Replace every bracketed placeholder and confirm the content with a qualified adviser before relying on it.

[Registered business name] ("ServiceFollow", "we", "us") is committed to protecting your privacy and handling personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains what we collect, why, and your rights.

1. Information we collect

We collect personal information that you provide and that is generated as you use the service, including:

Account details: name, email address and authentication identifiers.
Billing information: processed by Stripe; we store a Stripe customer reference and subscription status, not full card numbers.
Lead data you import or capture: customer names, contact details and enquiry text you or your customers submit.
Usage and device data: log records, IP address, browser type and basic analytics.

2. How we use information

To provide, secure and operate the service, including generating AI draft replies and sending follow-ups you configure.
To process payments and manage your subscription.
To provide support and respond to your requests.
To improve reliability and detect, prevent and address fraud or abuse.
To meet legal and regulatory obligations.

We do not sell your personal information.

3. AI processing of lead content

To draft replies and itineraries, lead enquiry text is sent to our AI provider (Anthropic). We do not use your lead content to train third-party foundation models. See our AI & Automated Communications Disclosure for detail.

4. Third-party processors

We share data with the following sub-processors only as needed to run the service:

Supabase — Authentication and primary database hosting (Your configured Supabase region).
Stripe — Payment, billing and subscription processing (Global (Australia supported)).
Anthropic (Claude) — AI generation of draft replies and itineraries (United States).
Resend — Transactional and follow-up email delivery (United States).
Vercel — Application hosting, edge delivery and analytics (Global edge network).

Some processors are located overseas (including the United States). Where information is disclosed overseas we take reasonable steps to ensure it is handled consistently with the APPs.

5. Data retention

We retain personal information for as long as your account is active or as needed to provide the service, then for any period required to meet legal, accounting or reporting obligations. You may request deletion of your account data at any time (subject to those obligations).

6. Security

We use access controls, encryption in transit, and row-level database isolation so each account can only access its own data. No method of transmission or storage is perfectly secure; see our Security Policy.

7. Your rights

You may request access to, or correction of, the personal information we hold about you. To do so, or to make a privacy complaint, contact privacy@servicefollow.com. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner (OAIC).

8. Changes

We may update this policy from time to time. Material changes will be notified through the service or by email. Continued use after changes take effect constitutes acceptance.