Privacy Policy
Last Updated: August 15, 2025
Sunburst Digital AI Pty Ltd (“we,” “us,” or “our”) is committed to protecting your personal information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Spam Act 2003 (Cth).
This Policy details how we collect, use, disclose, store, and protect data when you interact with our websites, Services, AI team members, integrations (e.g., Twilio, GoHighLevel, Lead Indicator, OpenAI, Make.com), or communications.
By using our Services, you consent to these practices. If not, cease use immediately.
1. Types of Information Collected
Personal Information
- Names, emails, phone numbers, postal addresses, billing/payment details.
- Lead data (e.g., suburbs, budgets from real estate calls).
- Emergency details (e.g., plumber chats).
- Sensitive financial data from Mortgage, Finance, and Insurance broker qualifications (income, employment, liabilities, policy renewals, risk details).
Usage Data
- Call logs, transcripts, IVR interactions.
- AI outputs such as qualification responses.
- Scraping results (e.g., property listings, booking data).
- Device information, IP address, browser type.
Automated Collection
- Cookies, pixels, analytics, outage monitoring.
- Automated scraping from websites/CRMs when authorised.
From Third Parties
- Affiliates, partners, integrations (Google/Microsoft calendars: names, emails, tokens, events).
- Social media platforms.
- Service providers.
- Public sources (business directories, public websites).
2. How We Use Information
- Provide & Improve Services: AI qualification, booking automation, reminders, alerts (property matches, emergency scripts, financial renewal notices).
- Billing & Payments: To process direct debits for subscriptions (12-month auto-renew).
- Compliance: To meet legal and regulatory obligations.
- Marketing: Only with explicit opt-in; unsubscribe anytime.
- Analytics: Anonymised use for performance trends, outage detection, machine learning training.
- Fraud Prevention & Dispute Resolution: Detect, prevent, and resolve breaches or fraud.
- Any Lawful Purpose: Where permitted by applicable law.
- Aggregate/De-Identified Uses: For benchmarking, research, and product development.
Retention: We hold personal data for 12 months after termination of Services, then delete unless law requires longer, or on explicit request (subject to backups).
3. Disclosure of Information
- Service Providers: Twilio (telephony), GoHighLevel (CRM), Lead Indicator (voice IVR), OpenAI (language processing), Make.com (automation).
- Legal Requirements: When compelled by regulators or courts.
- Business Transfers: Mergers, acquisitions, or restructuring, with notice provided.
- No Sales: We do not sell personal data.
- Affiliates: Within Sunburst-controlled entities.
- Aggregated/Anonymised Data: Shared freely for analytics and reporting.
4. Data Security & Retention
- Security Measures: AES-256 encryption, firewalls, access controls, audits, and daily testing.
- Breach Notification: We notify affected parties within 72 hours of becoming aware.
- International Transfers: Some data may be transferred to the US/EU (e.g., OpenAI servers). Safeguarded by contractual clauses.
5. Your Rights
- Access, Correction, Deletion: Request at any time via dave@sunburstdigital.com.au (response within 30 days).
- Consent Withdrawal: You may withdraw consent; however, this may terminate your Service.
- Complaints: Lodge with us first; escalate to the OAIC if unresolved.
- Cookies: Control via your browser. Disabling may impact features.
- Marketing Preferences: Opt out at any time via unsubscribe link.
- Device Permissions: Control location/camera/microphone access through device settings.
6. Children’s Data
Our Services are not designed for under-18s. We do not knowingly collect data from children.
7. Third-Party Tracking & Advertising
- Cookies and pixels may be used for interest-based ads (Google, Facebook, LinkedIn).
- Opt-out options available through Google Ads Preferences, Digital Advertising Alliance (DAA), and Network Advertising Initiative (NAI).
8. Changes
We may update this Policy. Updates are published on our site; continued use = consent.
9. Contact
Questions, requests, or complaints can be directed to:
