Privacy Policy
This policy explains how QuoteLeads (ABN 83 894 208 171, "we", "us") handles personal information in connection with Reactivate: this website, demo bookings, our client dashboard, and the SMS, AI and calling service we run for businesses. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Whose information, and our role
- Our clients and website visitors. When you book a demo or become a client, we collect your information for our own business purposes, and this policy applies in full.
- Leads. If a business has texted you through Reactivate, it gave us your details because you enquired with it. We handle your information on that business's behalf, only to run its campaign. That business is responsible for having your consent to contact you, and its own privacy policy also applies. You can opt out at any time by replying STOP, or ask us or the business for access or correction (see section 11).
2. What we collect
| Who | Information |
|---|---|
| Demo bookings | Name, business name, email, mobile, industry, approximate number of leads, any notes you add, your booked time and timezone. To stop spam we also keep a one-way hash of your IP address (we can't recover the IP address from it). |
| Clients and their staff | Name, email, business details, login details, settings, billing preferences, and records of usage and charges. Card payments are handled by Stripe; we only receive the card brand and last four digits, never the full card number. |
| Leads (on a client's behalf) | Name, mobile number, email, what you enquired about and when, any other details the business provides, the messages you send and receive, your answers to qualifying questions, any callback time you agree, transcripts of calls you make to our number, and whether you have opted out. |
| Website visitors | Standard technical information (such as IP address, browser and pages requested) processed by our hosting, font, content delivery and anti-spam providers when the site loads. |
We don't ask for sensitive information, such as health information. Businesses must only give it to us if it's necessary and the person has consented as required by law.
3. How we collect it
Directly from you when you book a demo, sign in, message us or call our number, and from our clients when they give us their lead lists. Leads can deal with us without identifying themselves only where that is practicable; replying by text or calling our number necessarily shares your phone number.
4. How we use it
- To arrange and hold demos, and to answer your enquiries.
- To provide the Service to our clients: contacting their Leads, holding conversations, qualifying Leads, booking callbacks and notifying the client.
- To honour opt-outs and keep our do-not-contact list.
- To bill clients, prevent fraud and spam, keep the Service secure, and fix problems.
- To comply with the law.
We don't sell personal information, and we don't use a client's Lead Data to market to those Leads for anyone else.
5. AI and phone calls
Messages and call audio are processed by our AI provider, OpenAI, to understand replies and write responses in real time. Under OpenAI's API terms, data sent through its API is not used to train its models by default, and we don't use Lead Data to train AI models. Our AI agent tells callers at the start of a call that it is an AI assistant and that the call is transcribed. We keep the transcript so the business has the details for its callback; we do not keep audio recordings.
6. Who we share it with
We share personal information only as needed to run the Service, with:
| Provider | What for |
|---|---|
| Supabase | Database, logins and server functions (where your information is stored) |
| Twilio | Sending and receiving SMS, and connecting phone calls |
| OpenAI | AI that writes and understands messages, answers calls and transcribes them |
| Stripe | Card payments and billing |
| Resend | Sending emails, such as demo confirmations and booking alerts |
| GitHub | Hosting this website |
| Google Fonts, jsDelivr and Cloudflare | Delivering fonts and code for the website, and Cloudflare Turnstile to block spam on the demo form |
A Lead's information is also shared with the business that ran the campaign, which sees its own Leads' conversations and bookings. We may also disclose information where required or authorised by law, for example to a regulator or law enforcement agency.
7. Overseas disclosure
Some of our providers store or process information outside Australia, including in the United States and other countries where they or their sub-processors operate. Before disclosing personal information overseas, we take reasonable steps to make sure our providers handle it in a way consistent with the APPs, including by using reputable providers bound by contractual privacy and security commitments.
8. Messages and opting out
Every first message from a business names that business and explains how to opt out. Reply STOP at any time and you will receive one confirmation and no further messages from our number, for any business. If you booked a demo, you can ask us to stop contacting you by replying to any email or emailing contact@quoteleads.com.au.
9. Security
We protect personal information with measures that include encryption in transit, access controls so each business can only see its own Leads, signed and verified connections with our SMS, AI and payment providers, and keeping secret keys only on our servers. No system is perfectly secure. If we have a data breach that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
10. How long we keep it
- Lead Data: while the client's account is active, then deleted within 90 days after it ends, unless the client asks us to delete it sooner.
- Opt-out records: kept for as long as we operate our numbers, so we never message someone who opted out.
- Demo bookings: up to 24 months, unless you become a client or ask us to delete them sooner.
- Billing records: as long as tax and accounting law requires (generally 5 to 7 years).
11. Access and correction
You can ask for access to, or correction of, the personal information we hold about you by emailing contact@quoteleads.com.au. We will verify your identity and respond within 30 days. If you are a Lead, we may pass your request to the business that ran the campaign, as it controls that information. If we refuse a request, we will tell you why, where the law allows.
12. Cookies and browser storage
We don't use advertising or analytics cookies. If you sign in to the dashboard, your browser stores a login token so you stay signed in. Cloudflare Turnstile may use cookies or similar technology on the demo booking page to tell people from bots.
13. Complaints
If you have a privacy concern, email contact@quoteleads.com.au and we will respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
14. Changes and contact
We may update this policy, and will post the new version here with a new date. Questions or requests: contact@quoteleads.com.au, QuoteLeads, ABN 83 894 208 171.