Legal

Privacy Policy

Last updated 4 August 2026. This policy follows the Australian Privacy Principles under the Privacy Act 1988.

What we hold about you, the partner

• Your email address, trading name, contact name, phone and ABN, because they print on your proposals.
• A hash of your password. Not the password. We cannot read it and we cannot recover it for you.
• What you did in the app: searches run, scans performed, sites built, proposals made. We use it to enforce your quota and to show you your own activity.

What we hold about businesses you research

Publicly listed business contact details: trading name, suburb, phone, website, rating and review count. These come either from a listing service you connected with your own key, or from the public web page itself.

We also store what a scan read from that public page. We do not attempt to identify individuals, and we do not collect anything from behind a login.

If a business asks us what we hold about it, we will tell them, and if they ask us to delete it we will, without argument and without asking why.

What we hold about callers

When you deploy a receptionist, callers give it their name, number, suburb and what they need. That information belongs to you and your client. We store it so the summary can be delivered.

Every caller is told at the start of the call that it may be recorded or summarised. That notice is given regardless of which state the caller is in, because the surveillance devices laws differ by state and a single notice satisfies the strictest of them.

What we do not do

• We do not sell contact details to anyone, ever.
• We do not contact your clients or your prospects. That is your relationship.
• We do not use your data, your clients' data, or call content to train models.
• We do not run third party advertising or analytics trackers on this site.

Where it lives

On Cloudflare infrastructure. Data may be processed outside Australia, which is disclosed here because Australian Privacy Principle 8 requires it. Where you connect a provider with your own key, that provider handles that data under their own terms and their own jurisdiction, and you should read them.

How long we keep it

While your account is open, and for thirty days after you close it, except where a law requires us to keep a record longer. Call summaries are kept for twelve months unless you delete them sooner.

Your rights

You can ask what we hold, ask us to correct it, ask for a copy, or ask us to delete it. Email privacy@bower.au and we will action it within thirty days.

If you think we have mishandled your information, tell us first and we will try to fix it. If you are not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Cookies

One. It holds your sign-in session, it is marked HttpOnly and SameSite, and it does nothing else. There is no tracking cookie on this site, which is why there is no cookie banner.