1. Introduction
GRIVITY Pty Ltd (ACN 672 078 885), trading as GRIVITY (“we”, “us”, “our”), is committed to protecting your privacy. We are an Australian-based digital growth firm bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy explains how we handle personal information collected through our website, our client applications, and our automation and communication services.
We collect information to respond to your enquiries and design effective growth systems for your business. This includes:
- Identity data: Name, job title, company name.
- Contact data: Email address, phone number, and billing address.
- Enquiry and booking data: The details you provide in contact forms and appointment bookings, including your message and preferred times.
- Voice call data: Where we make a follow-up call, recordings and/or transcripts of that call.
- Technical data: IP address, browser type, time zone setting, and operating system.
- Usage data: How you interact with our website (such as pages viewed and clicks), measured using Google Analytics.
- Integration data: Performance metrics, campaign data, and account information retrieved from connected third-party platforms at the user’s request.
3. How we use your data
We use your information to:
- Respond to your enquiries and schedule and confirm appointments.
- Deliver contracted services (e.g., building your web app).
- Configure automation workflows and CRM pipelines.
- Improve our website performance using anonymous analytics.
- Provide relevant technical updates or marketing communications (you can opt out at any time).
4. AI and automation data handling
We use artificial intelligence (AI) and automation to deliver and support our services. We do this carefully:
- Redaction before analysis: Before any enquiry content is analysed by an AI model, we automatically remove personal identifiers from it, so the AI works on the substance of your enquiry rather than your personal details.
- Which AI we use: We use Google’s Gemini models through an enterprise Google Cloud environment, with primary processing configured to an Australian region. This is not the public Gemini service.
- No training on your data: Your data is processed under enterprise terms and is not used to train public AI models.
- Security: Data is encrypted in transit and at rest using enterprise-grade standards (AES-256).
5. Website enquiries, bookings, and follow-up calls
When you submit a contact form or booking request on our website, your information is handled by our internal systems to process and respond to your enquiry:
- Analysis: We redact personal identifiers and use AI (see section 4) to understand and prioritise your enquiry.
- Scheduling: If you book a time, we add the appointment to our calendar (Google Workspace) and send you confirmations by email and/or SMS.
- Follow-up calls: For some contact-form enquiries, we may telephone you to follow up. These calls may be handled by an automated, AI-assisted voice agent, and may be recorded and/or transcribed so we can keep an accurate record and improve our service. The agent will indicate when a call is automated, and you can ask us not to record the call or not to contact you again.
By submitting an enquiry or providing your contact details, you consent to us contacting you about your enquiry, including by email, SMS, and automated or AI-assisted call.
GRIVITY operates a client dashboard application ("the App") available at app.grivity.co. Users may connect third-party platform integrations to enable reporting, automation, and performance management features within the App.
Authentication:
- Users may sign in to the App using Google Sign-In. We collect your name and email address for authentication purposes only.
- Signing in with Google does not automatically connect any advertising or analytics platforms.
Users may optionally connect the following platforms to unlock additional App features. Each integration is authorised separately and only activated at the user’s explicit request:
- Google Ads: Used to retrieve campaign performance data for reporting within the App.
- Google Analytics: Used to retrieve website traffic and conversion data for reporting within the App.
- Google Search Console: Used to retrieve organic search performance data for reporting within the App.
- Google Business: Used to retrieve local listing data and review information for reporting within the App.
- Meta (Facebook/Instagram): Used to retrieve ad account performance, page insights, and lead data for reporting within the App.
For all integrations:
- We only request the minimum permissions necessary to deliver the features described above.
- We do not sell, share, or use platform data for advertising or to train AI models.
- Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.
- Users may disconnect any integration at any time via the App’s settings page, which will revoke our access to that platform’s data.
7. Sub-processors and overseas disclosure
We do not sell your personal information. To deliver our services we rely on a small number of trusted sub-processors. Specific vendors may vary by project, but typically include:
- Cloud infrastructure and AI: Google Cloud, including Google’s Gemini models via enterprise API, with primary processing in an Australian region.
- Email and SMS delivery: Providers used to send confirmations and transactional messages.
- Scheduling: Google Workspace (Google Calendar).
- Telephony and voice: Providers used to make and handle automated follow-up calls.
- Automation and CRM: Tools used to orchestrate workflows and manage client communications.
Overseas disclosure: While our primary data processing is located in Australia, some of our providers are located in or store data in the United States. By using our services or submitting your information, you consent to your personal information being disclosed to these overseas recipients. We take reasonable steps to ensure they handle your information in a manner consistent with the Australian Privacy Principles.
8. Cookies and tracking
We use cookies and Google Analytics (via Google Tag Manager) to understand how visitors use our website. You can control cookies through your browser settings, though this may limit site functionality.
9. How long we keep your data
We keep personal information only for as long as we need it:
- Enquiry and booking data: up to 24 months after our last contact with you, unless you ask us to delete it sooner.
- Call recordings and transcripts: up to 12 months, unless we need to keep them longer for a specific legal or dispute-related reason.
- Client records: for the duration of our engagement and for any period we are required to retain them by law (for example, financial records).
When we no longer need your personal information, we delete or de-identify it.
10. Your rights and how to complain
You can ask us to access, correct, or delete the personal information we hold about you, or to stop sending you communications, at any time by emailing contact@grivity.co. We will respond within a reasonable time.
If you are concerned about how we have handled your personal information, please contact us first so we can try to put it right. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Questions about this policy can be directed to our Privacy Officer at contact@grivity.co.