Privacy Policy
Last updated: 30 March 2026
This Privacy Policy describes how Ben Slater trading as Wonderfire, ABN 72 918 637 629, operating as CallSorted ("we", "us", "our") collects, uses, stores, and protects personal information in connection with the CallSorted service ("Service").
We are committed to protecting your privacy and handling your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
1. Who This Policy Applies To
This policy applies to:
- Subscribers: Trade businesses and sole traders who subscribe to CallSorted
- Callers: Individuals who call a number managed by CallSorted and interact with our AI assistant
- Website visitors: People who visit callsorted.com.au
2. Information We Collect
2.1 Subscriber Information
When you sign up for CallSorted, we collect:
- Full name and email address
- Phone number (personal mobile)
- Business name and trade type
- Timezone and general location
- Stripe Customer ID (payment information is stored securely by Stripe — we never see or store your card details)
If you connect your Google Calendar, we store a refresh token to access your calendar availability. We do not access any other Google account data.
2.2 Caller Information
When someone calls a CallSorted-managed number and interacts with our AI assistant, we collect:
- Caller's name and phone number
- Job description and requirements
- Suburb, address, and property type
- Urgency and preferred contact time
- Any photos sent via MMS following the call
2.3 Call Data
- Call recordings: All calls handled by our AI are recorded
- Transcripts: Calls are transcribed using AI
- AI summaries: The AI generates a summary of each call
- Call metadata: Duration, timestamps, call status
Caller notice: Callers are informed at the start of each call that they are speaking with an AI assistant. This serves as notice that the call is being recorded and processed.
2.4 Usage Data
- Call counts and feature usage per billing cycle
- Dashboard login timestamps
- SMS and notification delivery status
2.5 Website Data
We use Google Analytics on our marketing website to understand visitor behaviour. This collects anonymised data such as page views, referral sources, and device type. No personally identifiable information is collected through analytics.
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide the call answering service | Subscriber details, caller information, call recordings |
| Deliver lead notifications via SMS and email | Subscriber phone/email, caller details, AI summaries |
| Generate daily/weekly performance digests | Call counts, lead data, estimated values |
| Process payments and manage subscriptions | Stripe Customer ID, billing information |
| Send account and service notifications | Subscriber email and phone |
| Improve AI quality and service reliability | Call recordings, transcripts (anonymised) |
| Comply with legal obligations | As required by law |
4. Third-Party Service Providers
We use the following third-party services to operate CallSorted. Each processes data only as necessary to provide their specific function:
| Provider | Purpose | Data Shared |
|---|---|---|
| Twilio | Telephony, SMS, call recording | Phone numbers, call audio, SMS content |
| Google (Gemini AI) | AI call handling and transcription | Call audio in real-time (not stored by Google) |
| Stripe | Payment processing | Payment card details, billing info |
| SendGrid (Twilio) | Email delivery | Subscriber email addresses, email content |
| Cloudflare R2 | Photo/media storage | MMS images from callers |
| DigitalOcean | Server hosting | All service data (encrypted at rest) |
| Google Analytics | Website analytics | Anonymised browsing data |
We do not sell, rent, or trade personal information to any third parties for marketing or any other purpose.
5. Caller Privacy
We take the privacy of callers seriously:
- Callers are informed they are speaking with an AI at the start of each call
- Caller information is shared only with the specific subscriber (tradesperson) they called
- Caller data is never used for marketing by CallSorted
- Caller data is never shared with any subscriber other than the one the caller intended to reach
- Callers may request deletion of their data by contacting us at support@callsorted.com.au
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information (active subscribers) | Duration of subscription |
| Account information (after cancellation) | 90 days, then permanently deleted |
| Call recordings | 90 days from call date |
| Transcripts and lead summaries | Duration of subscription + 90 days |
| MMS photos | Duration of subscription + 90 days |
| Payment records | 7 years (legal requirement) |
| Website analytics | 26 months (Google Analytics default) |
7. Data Security
We implement appropriate technical and organisational measures to protect personal information, including:
- Encrypted data transmission (TLS/HTTPS) for all connections
- Encrypted data at rest on our hosting infrastructure
- Access controls limiting who can access subscriber and caller data
- Secure authentication for the subscriber dashboard
- PCI-compliant payment processing via Stripe (we never handle card data)
- Regular security reviews of our infrastructure and code
8. Cookies
Our use of cookies is minimal:
- Marketing website: Google Analytics cookies for anonymised visitor statistics
- Subscriber dashboard: Session cookies for authentication (essential, no tracking)
We do not use advertising cookies or tracking pixels. We do not participate in cross-site tracking.
9. Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Correct any inaccurate or incomplete information
- Request deletion of your personal information (subject to legal retention requirements)
- Withdraw consent for data processing by cancelling your subscription
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached
To exercise any of these rights, contact us at support@callsorted.com.au. We will respond within 30 days.
10. Children's Privacy
The Service is designed for use by businesses and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.
11. International Data Transfers
Some of our third-party service providers (including Twilio, Google, Stripe, and Cloudflare) may process data in jurisdictions outside of Australia, including the United States. Where data is transferred internationally, we ensure that appropriate safeguards are in place and that the transfer complies with Australian privacy laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. For material changes, we will notify subscribers via email. The "Last updated" date at the top of this page indicates when the policy was most recently revised.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:
- Email: support@callsorted.com.au
- Phone: 0468 005 180
- Entity: Ben Slater trading as Wonderfire, ABN 72 918 637 629
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).