← Back to home

Privacy Policy

Effective date: 19 September 2026

This policy explains how Web Digital Assistants handles your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In short: we collect what you send us through our enquiry form and use it to respond to you. If you become a client, we also handle personal information while we build and run an AI assistant connected to your business tools — your inbox, calendar, CRM, and quoting tools — always under your direction and with your consent. We use your information to provide the services you ask us for, and we never sell it.

1. Who we are

This policy applies to Web Digital Assistants, ABN 73773865399 (“we”, “us”, “our”), operator of webdigitalassistants.com. For any privacy question or request, contact us at admin@webdigitalassistants.com.

2. What personal information we collect

The personal information we collect is what you give us directly:

  • your name;
  • your email address;
  • your phone number;
  • your answer to “What’s your biggest daily headache?” (the pain-point field); and
  • anything you choose to include in the message/description box.

If you take our 2-minute check, we also collect the email address you give us at the end and the answers you selected, so we can show you your result, email it to you if you ask, and — if you ask us to — follow up with a next step. The check doesn’t ask for sensitive information, and you can ask us to delete your answers at any time.

Once you become a client, we may also handle personal information found in the business systems you connect to the assistant — for example emails, calendar entries, and customer or contact details held in your CRM and quoting tools. We don’t actively collect that information for our own purposes; we process it to run the assistant you’ve engaged us to run.

Please don’t include sensitive information (such as health details, passwords, or financial numbers) in the form — we don’t need it and would rather you keep it to yourself. The same applies to the accounts you connect: don’t connect an account or system holding sensitive information unless the assistant genuinely needs it to do the job you’ve asked for.

3. How we handle data through the service itself

When you become a client, we build and run an AI Executive Assistant connected to the business tools you authorise. We only connect the tools you approve, using your explicit consent and delegated access — for example, an app-level connection to your Google/Gmail account, or an integration with your CRM and quoting tools.

The assistant may read, draft, and (only with your approval) send messages; manage calendar events; and update CRM and quoting records. It works under your direction — it drafts, you approve.

Access is scoped to what the assistant needs to do its job. We don’t access the rest of your accounts, and we never use these connections to collect data for marketing or for any other client.

Where we operate automation for you through an automation platform (primarily n8n) or custom-built connectors, that software processes data only to run the workflows we agreed with you, under your control.

4. How we collect it & why (APPs 1–5)

We collect your information when you submit the enquiry form. We do this to:

  • respond to your enquiry and discuss your needs; and
  • provide our services to you if you choose to engage us, and meet our legal obligations.

We only collect what is reasonably necessary for these purposes. At the point of collection, a notice on the form summarises what we collect and why, with a link to this policy.

5. Use & disclosure (APPs 6–8)

We use your information to:

  • respond to your enquiry;
  • provide the services you engage us for; and
  • meet our legal obligations (for example, record-keeping).

We do not sell your personal information, and we do not share it for marketing purposes. There is no newsletter signup, no email-marketing platform, and no advertising trackers on this Site.

We disclose your information only to the service providers who help us operate the Site and handle enquiries:

  • our database host, Neon (PostgreSQL), which stores enquiry-form submissions;
  • our website host, Vercel, which serves the Site and may see standard server logs; and
  • email and office tools we use to read and reply to enquiries (for example, our admin@webdigitalassistants.com mailbox).

Some of these providers store or process data on servers outside Australia, including in the United States. By submitting the enquiry form, you consent to this cross-border disclosure for the purposes described above. If you become a client, service data may also be disclosed to, and processed by, the subprocessors listed in this policy (OpenAI, Google, and the automation platform), which may store or process data on servers outside Australia, including in the United States. Consenting to your engagement’s data handling includes consenting to this cross-border disclosure for the purpose of running your assistant. We otherwise only disclose your information where required or authorised by law.

6. Subprocessors

To deliver the assistant, we rely on other providers. These are the service-delivery providers, separate from the website and enquiry-form providers listed above:

  • OpenAI — AI model provider used to power the assistant’s drafting and understanding. Data may be processed by OpenAI as part of delivering this service. Where OpenAI’s own terms make privacy safeguards available (such as API data not being used for training by default, and data-retention controls), we rely on those settings for accounts we control.
  • Google (Gmail API) — provides the inbox and calendar connection where we use Gmail. Data flows through Google’s infrastructure under your Google account’s permissions.
  • Automation platform (primarily n8n) or custom connectors — runs the workflows you approve, such as quote flows, follow-ups, and CRM updates. Depending on how your solution is built, a self-hosted automation platform keeps data on your or our infrastructure under our control, while a cloud-hosted platform processes data under that provider’s own terms.
  • Website and enquiry layer — our database host Neon (PostgreSQL), our website host Vercel, and the email and office tools we use to read and reply to enquiries, as listed under “Use & disclosure” above.

If you’d like to know the specific providers configured for your assistant, ask us — the answer can vary from client to client, and we’ll tell you exactly what your setup uses.

7. Do we train models on your data?

No. We do not use your data — or your customers’ data — to train or fine-tune any AI model. We don’t build models; we configure assistants for you.

One honest caveat: third-party providers we rely on (for example OpenAI) have their own terms about how they handle data processed through their services. Where a provider’s own default terms permit use of data for training, that use is governed by the provider’s terms, and we enable the privacy safeguards the provider makes available (for example, API data-retention controls) on accounts we set up and control.

If you need certainty about a specific provider for your setup, ask us and we’ll confirm the provider and what its terms say.

8. Personal information of your customers and contacts

When we run your assistant, personal information about your customers and contacts — names, emails, quotes, and messages — can flow through the tools we operate for you.

You are responsible for having the right to use and share that information with us for this purpose, including meeting your own privacy obligations to your customers.

We process it only to run the assistant and the workflows you’ve engaged us to run. We don’t sell it, we don’t use it for marketing, we don’t use it for other clients, and we protect it to the same standard as our own data.

It is stored and retained within the connected tools and automation stack, as described in the Retention section, and deletion happens as part of winding an engagement down.

If one of your customers asks about their personal information — access, correction, or deletion — the request comes through you as the business they deal with. We’ll help you action it.

9. Storage & security (APP 11)

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access or disclosure. This includes:

  • encryption in transit (the Site is served over HTTPS);
  • storage in an access-controlled database rather than in plain files or email threads; and
  • access limited to staff who need it — enquiry details are viewed through our internal admin dashboard for the purpose of responding to you.

For service data, security relies on the protections of the providers you connect (for example, Google’s security for Gmail data), together with our own access controls and the approval-before-send design of the assistant — nothing sends without a workflow you’ve approved.

No method of transmission or storage is completely secure, but we take these practical steps to keep your information safe.

10. Notifiable Data Breaches

If we become aware of a data breach involving your personal information that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth), and we will take steps to contain and address the breach.

11. Access & correction (APPs 12–13)

You may ask to see the personal information we hold about you, or ask us to correct it if you think it is inaccurate, out of date, or incomplete. To make a request, email admin@webdigitalassistants.com with “Privacy request” in the subject line. We will respond within a reasonable time and will not charge you for making the request.

12. Retention

Different information is kept for different periods:

Enquiry-form data. We keep your enquiry-form information only for as long as reasonably needed for the purposes above — for example, while you are a prospective or current client — and for as long as the law requires us to (for example, tax and business record-keeping). When it is no longer needed, we take reasonable steps to delete or de-identify it.

Service data. Your business data, and your customers’ data handled through the assistant, is retained only for as long as needed to run the service, including a short wind-down period after the engagement ends — a reasonable period, such as up to 30 days, to hand back or export your data and close connections. We keep it longer only where a longer period is needed to meet legal or tax obligations or to resolve disputes. When the engagement ends, we disconnect access to your tools and delete or return data as you direct.

If you end the engagement, tell us whether you want your data returned or exported, or deleted, and we’ll do it.

13. Complaints (APP 1)

If you have a privacy concern, please contact us first at admin@webdigitalassistants.com so we can try to resolve it with you.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) — see oaic.gov.au.

14. Cookies, analytics and advertising trackers

This Site doesn't use cookies or advertising trackers, and we don't build profiles of your browsing or share browsing data with advertisers. We do use one privacy-friendly analytics tool (Umami) to count visits and form enquiries. It doesn't use cookies, doesn't collect personal information, and doesn't track you across other websites.

15. Updates to this policy

We may update this policy from time to time. The current version is the one published on this page, with its effective date shown at the top. Material changes will be reflected here.