← All policies
Legal

Privacy Policy

How we collect, use, store and disclose personal information, and how you can access or correct it.

Last updated 11 November 2026

01About this policy

AutomateX Digital is a product of AutomateX Innovations Pty Ltd (ABN 65 697 393 534, ACN 697 393 534) (“AutomateX”, “we”, “us”, “our”). We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what personal information we collect through automatexdigital.com (the “Site”), when you enquire about or buy our services, and when we deliver services to our clients. By using the Site or our services, you acknowledge this policy.

02Information we collect

We only collect personal information that is reasonably necessary for our business. Depending on how you interact with us, this may include:

  • Enquiry details — first and last name, email address, mobile number (optional), business name, the service you are interested in and the message you send through our contact form.
  • Account and checkout details — if you sign in to pay for a service, your email address and authentication details (including details shared by Google if you choose “Continue with Google”).
  • Payment details — payments are processed by Stripe. We receive confirmation of the payment, the amount, the package purchased and limited billing details. We do not see or store your full card number.
  • Technical information — a one-way hashed version of your IP address (used for spam and abuse prevention), your browser user agent, the page you submitted from, and, if you consent to analytics cookies, usage data collected by Google Analytics.
  • Communications — emails, calls and messages you exchange with us.
  • Client project information — when we deliver services, we may handle information about your business and, where your project requires it, personal information about your own customers or staff (for example, call recordings or CRM records handled by an AI agent or automation we build for you).

You can deal with us anonymously or using a pseudonym where it is lawful and practicable, for example when browsing the Site. We will need your contact details to respond to an enquiry or provide services.

03How we collect information

We collect personal information directly from you when you complete a form, sign in, make a payment, email or call us, or work with us on a project. We collect some technical information automatically through cookies and similar technologies (see our Cookie Policy). Occasionally we receive information from third parties, such as a referral partner or a client who engages us on your behalf.

We do not knowingly collect sensitive information (such as health information) unless it is necessary for a client project and the client has confirmed it has a lawful basis to provide it to us.

04How we use your information

We use personal information to:

  • respond to your enquiry and prepare proposals and quotes;
  • provide, manage, support and improve our services;
  • process payments, issue invoices and send transactional emails (such as receipts or a reminder to complete a checkout you started);
  • communicate with you about your project or account;
  • protect the Site against spam, fraud and abuse;
  • understand how the Site is used, if you consent to analytics cookies;
  • meet our legal, tax and accounting obligations.

We will only send you marketing emails with your consent, and every marketing message will include a way to unsubscribe, consistent with the Spam Act 2003 (Cth). We do not sell personal information.

05Who we share information with

We share personal information only with trusted service providers who help us run our business, and only as needed for the purposes above. These currently include:

ProviderPurposeWhere data may be processed
VercelWebsite hosting and server functionsUnited States and other regions
Database hosting provider (PostgreSQL)Storing enquiries and operational recordsAs configured by our hosting provider
SupabaseSign-in and authentication for checkoutUnited States and other regions
StripePayment processing, receipts and invoicesUnited States, Australia and other regions
Zoho MailBusiness email and notification deliveryIndia and other regions
ResendTransactional email deliveryUnited States
Google (Analytics, Sign-In, Workspace tools)Analytics (with consent) and optional Google sign-inUnited States and other regions

We may also disclose information to our professional advisers, to a purchaser if our business is sold, or where required or authorised by law.

06Overseas disclosure

Some of our service providers store or process data outside Australia, including in the United States and India. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs, including by using reputable providers with appropriate security and contractual commitments.

07Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures include encrypted connections (HTTPS), access controls and authentication for administrative systems, hashing of IP addresses, rate limiting, and restricting access to people who need it.

No method of transmission or storage is completely secure. If we become aware of an eligible data breach, we will respond in line with the Notifiable Data Breaches scheme.

08How long we keep information

We keep personal information only for as long as it is needed for the purposes described in this policy. Enquiries that do not proceed are generally deleted or de-identified within 24 months. Client and financial records are kept for at least seven years where required for tax and accounting purposes. You can ask us to delete your enquiry at any time.

09Data we handle for clients

When we build or operate systems for a client (for example, AI agents, CRMs or automations), we handle personal information about that client’s customers on the client’s behalf and according to their instructions. The client is responsible for having a lawful basis to collect that information and for giving any required notices to its own customers, including that they may be speaking with an AI system. Our AI Use Statement explains our approach.

10Access, correction and your choices

You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing info@automatexdigital.com. We will respond within a reasonable period, usually 30 days. We may need to verify your identity, and in limited cases the law allows us to refuse a request; if so, we will explain why.

You can change your cookie choices at any time using the “Cookie settings” link in the Site footer.

If you are located in the European Economic Area or United Kingdom, you may also have rights under the GDPR, including the right to object to processing and to data portability. Contact us to exercise them.

11Complaints

If you believe we have breached the APPs, please contact us first at info@automatexdigital.com with details of your concern. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

12Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with the date it was last updated.

13Contact our privacy officer

If you have any questions about this document, please contact us:

  • Entity: AutomateX Innovations Pty Ltd (ABN 65 697 393 534, ACN 697 393 534), trading as AutomateX Digital
  • Email: info@automatexdigital.com
  • Phone: +61 417 772 493
  • Location: Sydney, New South Wales, Australia
Other policies