Smart Web Works ("we", "us", "our") operates smartwebworks.com.au and the AI Brain platform at app.smartwebworks.com.au. This policy explains what personal information we collect, how we use it, and your rights under the Australian Privacy Principles and the Privacy Act 1988 (Cth).
What we collect
Account information
When you sign up for AI Brain, we collect your name, email address, and the password you set (stored securely as a hash, never in plain text). If you sign in with Google, we receive your email address and name from Google.
Business information
To power the AI features, you may provide details about your business: services offered, pricing, service area, hours, FAQs, and any notes you enter. This information is used to generate AI responses on your behalf.
Messages and conversations
AI Brain processes inbound and outbound messages (SMS, email, website enquiries) that flow through your workspace. This includes message content, sender/recipient details, timestamps, and delivery status.
Usage data
We collect technical data like IP address, browser type, device information, and pages visited to operate the service, diagnose issues, and improve the product.
How we use your data
- To provide the AI Brain service — drafting replies, routing messages, syncing with your channels
- To operate your account and authenticate you
- To send service-related emails (invites, notifications, important updates)
- To improve the product and fix bugs
- To comply with legal obligations
Third parties we use
We use trusted providers to run the service:
- Supabase (Sydney, AU) — database and authentication
- Vercel — web application hosting
- Anthropic — AI model for drafting replies
- Resend — outbound email delivery
- Twilio / Telnyx — SMS provider (only if you enable SMS)
- Google — OAuth sign-in (only if you choose to sign in with Google)
- Cloudflare — CDN and email routing
These providers only receive the data they need to perform their function. We don't sell your data to anyone, ever.
AI and your data
When AI Brain drafts a reply, it sends the conversation context to Anthropic's API. Per Anthropic's commercial terms, this data is not used to train their models. You always review and approve drafts before anything is sent.
Data storage and security
Your data is stored in Supabase's Sydney region. Passwords are hashed. API keys and provider credentials are encrypted at rest. We use HTTPS everywhere and rotate secrets regularly.
Your rights
Under Australian privacy law, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your account and data
- Opt out of marketing communications (we don't do marketing emails anyway)
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
To exercise any of these rights, email us at amar@smartwebworks.com.au.
Data retention
We keep your data as long as your account is active. If you delete your account, we remove your personal information within 30 days, except where we're required to retain it for legal or accounting purposes.
Cookies
We use a small number of essential cookies to keep you signed in and remember your preferences. We don't use advertising or tracking cookies.
Children
AI Brain is a business tool. It's not intended for anyone under 16, and we don't knowingly collect data from minors.
Changes to this policy
If we make material changes, we'll notify you by email or via a notice in the app. The "last updated" date at the top shows when this policy was last revised.
Contact
Questions about privacy? Email amar@smartwebworks.com.au.