Effective Date: 20/03/2026
Organisation: Automate AI Limited
Address: Wellington, New Zealand
Email: hello@automateai.co.nz
Phone: +64 4 477 7617
Website: https://automateai.co.nz
Automate AI Limited ("we", "us", or "our") is committed to protecting the privacy of individuals who interact with our services. This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the New Zealand Privacy Act 2020.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
1.1 Personal Information
We may collect the following personal information when you interact with us:
- Full name
- Email address
- Phone number
- Company or organisation name
- Job title or role
- Any additional information you provide through contact forms, onboarding forms, or direct correspondence
1.2 Usage Data
We automatically collect certain information when you visit our website, including:
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring website or source
- Analytics data collected through cookies and similar technologies
1.3 Payment Information
Payment information (such as credit card details) is collected and processed directly by our payment provider, Stripe. We do not store your full payment card details on our systems. We may retain transaction identifiers and billing history for record-keeping purposes.
2. How We Use Your Information
We use the personal information we collect for the following purposes:
- Service delivery: To provide, maintain, and improve the services you have requested, including AI automation solutions, website design, voice agents, and related products
- Communication: To respond to enquiries, provide support, send service-related notifications, and keep you informed about your account or projects
- Marketing (with consent): To send you promotional materials, newsletters, or information about new services, where you have opted in to receive such communications
- Analytics and improvement: To analyse website usage patterns, understand how visitors interact with our site, and improve the user experience
- Legal compliance: To comply with applicable laws, regulations, and legal processes, including the Privacy Act 2020, tax obligations, and any court orders
- Security: To detect, prevent, and address fraud, security issues, and technical problems
3. Cookies and Tracking
Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data.
3.1 Types of Cookies We Use
- Essential cookies: Required for core website functionality, such as navigation and secure access
- Analytics cookies: Used via Google Analytics (through Google Tag Manager) to understand how visitors use our website, including page views, session duration, and user flows
- Booking widget cookies: Set by our Cal.com booking integration to enable scheduling functionality
- Marketing cookies: Used to track advertising effectiveness and deliver relevant content
3.2 Google Tag Manager
We use Google Tag Manager to manage and deploy tracking scripts on our website. Google Tag Manager itself does not collect personal information, but it enables other services (such as Google Analytics) to function. For more information, refer to Google's privacy policy at policies.google.com/privacy.
3.3 Managing Cookies
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
4. Third-Party Services
We use the following third-party services that may process your personal information:
- Supabase: Used for data storage and application backend services. Data is hosted on Amazon Web Services (AWS) in the Sydney (ap-southeast-2) region
- Stripe: Used for payment processing. Stripe handles all payment card data directly and is PCI DSS compliant. See stripe.com/nz/privacy
- Cal.com: Used for booking discovery calls and appointments. Cal.com processes your name, email, and any information you provide when scheduling
- Google Analytics: Used for website analytics and traffic analysis. Data is processed by Google in accordance with their privacy policy
Each third-party provider operates under its own privacy policy. We encourage you to review their policies to understand how they handle your information.
5. Data Storage and Security
5.1 Storage Location
Your personal information is primarily stored on servers hosted by Amazon Web Services (AWS) in the Sydney, Australia region (ap-southeast-2). This provides low-latency access for New Zealand users while maintaining enterprise-grade infrastructure.
5.2 Security Measures
We implement appropriate technical and organisational measures to protect your personal information, including:
- AES-256 encryption for data at rest
- TLS/SSL encryption for data in transit
- Access controls and role-based permissions
- Multi-factor authentication (MFA) for administrative access
- Regular security monitoring and threat detection
- Secure development practices and code review
5.3 Data Breach Response
In the event of a data breach that poses a risk of harm to affected individuals, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, and no later than 72 hours after becoming aware of the breach, in accordance with the Privacy Act 2020.
6. Your Rights Under the Privacy Act 2020
Under the New Zealand Privacy Act 2020, you have the following rights in relation to your personal information:
- Right of access: You may request access to the personal information we hold about you. We will respond to access requests within 20 working days
- Right of correction: If your personal information is inaccurate, incomplete, or misleading, you may request that we correct it. We will take reasonable steps to ensure your information is accurate and up to date
- Right of deletion: You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected, subject to any legal or contractual obligations requiring us to retain it
- Right to complain: If you believe we have breached the information privacy principles under the Privacy Act 2020, you have the right to make a complaint to the Office of the Privacy Commissioner at privacy.org.nz
To exercise any of these rights, please contact us at hello@automateai.co.nz.
7. Data Retention
We retain personal information for as long as it is necessary to fulfil the purposes for which it was collected, including:
- Active service period: Your personal information is retained for the duration of your service agreement or subscription with us
- Post-termination: Following termination of services, we retain your data for 60 days to allow for data export and account reconciliation
- Deletion: After the 60-day post-termination period, your personal information is securely deleted from our systems, unless we are required by law to retain it for a longer period (for example, for tax or accounting purposes)
- Marketing contacts: If you have opted in to marketing communications, we retain your contact details until you unsubscribe or request deletion
8. International Data Transfers
Our primary data storage is in the AWS Sydney region. However, some of our services involve AI model processing that may require data to be transmitted internationally. This includes:
- AI language model processing through third-party providers whose servers may be located outside New Zealand and Australia
- Payment processing through Stripe, which operates globally
- Analytics data processed by Google
Where personal information is transferred internationally, we take reasonable steps to ensure that the receiving party provides comparable privacy protections in accordance with the Privacy Act 2020 (Information Privacy Principle 12). If you have specific data residency requirements, please advise us at the commencement of your engagement.
9. Marketing Communications
We only send marketing communications to individuals who have provided their explicit consent to receive them. You will not be added to any marketing list unless you actively opt in.
- You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link included in every marketing email
- You may also contact us at hello@automateai.co.nz to opt out of marketing communications
- Unsubscribing from marketing emails does not affect service-related communications (such as invoices, support responses, or account notifications)
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes to this policy:
- We will provide at least 30 days' notice before the changes take effect
- Notice will be given by posting the updated policy on our website and, where practicable, by email to active clients
- The "Effective Date" at the top of this policy will be updated to reflect the date of the most recent revision
- Continued use of our services after the effective date of the updated policy constitutes acceptance of the changes
11. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
- Email: hello@automateai.co.nz
- Phone: +64 4 477 7617
- Address: Wellington, New Zealand
If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner:
- Website: privacy.org.nz
- Phone: 0800 803 909