Privacy Policy

Last updated: July 2026

GraySpark ("we", "us", "our") is committed to protecting the privacy of individuals whose personal information we handle. This Privacy Policy explains how we collect, use, store and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who We Are

GraySpark.ai is an AI automation and growth partner for local and service businesses in Australia. We help businesses get found on Google and recommended by AI assistants, and we automate business processes using AI.

Our services include Google Business Profile audits and management, local and AI search visibility work, and the automation of tasks such as enquiry response, quoting, client intake and onboarding, document handling, status updates and reminders.

For privacy enquiries, contact us at andy@grayspark.ai.

2. This Website

This website does not use cookies, analytics or tracking scripts, and it has no contact forms. We do not build a profile of you when you browse it.

The only way to contact us from this site is by email. If you email us, we receive whatever you choose to put in that email.

Our website is hosted by Netlify. Like any web host, Netlify's servers automatically record standard technical request data such as IP address, browser type and the pages requested. This is used for delivering and securing the site.

3. Information We Collect

We collect personal information in three situations.

• When you contact us: your name, email address, business name and anything else you include in your message or in a free audit request.
• When you become a client: business contact details, billing details, and the account access we need to deliver the service — for example, access to your Google Business Profile.
• When we operate systems for a client: information about that client's own customers may pass through the systems we build and run — for example, an enquiry, a quote request or an onboarding form. We handle this information on our client's behalf.

4. Information About Our Clients' Customers

Where we build or run automated processes for a business, that business decides what information is collected and why. We act as a service provider handling that information on their behalf, under our agreement with them.

If you are a customer of one of our clients and you want your information accessed, corrected or deleted, contact that business directly. If you contact us instead, we will pass your request on to them and help where we can.

5. How We Use Personal Information

We use personal information to:

• Respond to enquiries and deliver free audits
• Provide and manage the services a client has engaged us for
• Manage a client's Google Business Profile and online presence
• Build, run and improve automated processes for clients
• Send service updates, reports and invoices
• Meet our legal, tax and contractual obligations

We do not sell personal information. We do not use client data to send unrelated marketing.

6. Our Use of AI

AI is central to what we do, so it is worth being specific about it.

• We use third-party AI services to build and run automations for our clients. Information processed by those automations may be sent to those providers to generate a response, draft a document or extract information.
• We do not permit our AI providers to use client or customer data to train their public models, and we select providers that offer this on their business terms.
• Automated outputs that affect a customer — such as a quote or a reply — are configured with the client's rules and, where the client wants it, reviewed by a person before being sent.
• Where an automated system communicates directly with a person on a client's behalf, we support that client in disclosing that the response is automated.

7. Access to Client Accounts

To manage a Google Business Profile or connect an automation, a client may grant us access to their systems. We ask for the least access needed to do the work, use it only for the agreed purpose, and remove our access when the engagement ends or on request.

8. Disclosure of Personal Information

We may share personal information with:

• Service providers: we use third parties for website hosting, email, AI processing, automation and scheduling. They process data on our behalf under their own terms. A current list of the providers used in your engagement is available on request.
• Google: where we manage a client's Google Business Profile, information is published to or handled through Google's services.
• Our clients: where we handle information belonging to their customers, it is shared with that client.
• Legal and regulatory authorities: where required by law or in response to a valid legal request.

9. Overseas Disclosure

Some of our service providers store or process data outside Australia, including in the United States. AI and hosting providers in particular are commonly located overseas. We take reasonable steps to ensure overseas recipients handle personal information in a way consistent with the APPs.

10. Storage, Security and Retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Measures include access controls, multi-factor authentication where available, encrypted transmission, and limiting access to what is needed to deliver the service.

We keep personal information only as long as we need it for the purpose it was collected, or as long as the law requires. When a client engagement ends, we delete or return client data on request, other than records we are required to keep.

11. Your Rights

Under the Privacy Act 1988 (Cth), you have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request that we delete your information, subject to our legal obligations
• Ask us to stop contacting you
• Lodge a complaint if you believe we have breached the APPs

To exercise any of these rights, contact andy@grayspark.ai. We will respond within 30 days.

12. Complaints

If you have a complaint about how we have handled your personal information, contact us first at andy@grayspark.ai. If we cannot resolve it to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at this URL, and the date at the top of the page shows when it last changed.

14. Contact

For any privacy-related question or request:

• Email: andy@grayspark.ai
• Website: grayspark.ai