Plain English, current practice, no hidden surprises. This policy applies to anyone who interacts with the Attorus website, submits a booking enquiry, or messages a business that uses the Attorus platform.
Attorus Pty Ltd is an Australian company based in Adelaide, South Australia. We build and operate AI communication agents on behalf of business clients. This privacy policy explains how Attorus handles personal information collected through attorus.com, and personal information we process on behalf of business clients that use the Attorus platform (section 10).
For matters relating to this policy or your information, you can reach us at [email protected].
We collect personal information when you submit the booking form on /booking. Specifically:
Through attorus.com, we do not collect any information beyond what you actively enter into the booking form. Section 10 covers data we process for our business clients.
We collect this information for one purpose: to prepare for the 30-minute consultation you've requested, and to follow up with you about that consultation.
We do not sell your information. We do not use it for marketing campaigns unrelated to your enquiry. We do not profile you for advertising. We do not pass your information to clients of Attorus.
Booking enquiries are stored in our customer relationship management system, which is operated by a trusted third-party software provider. Access is restricted to Attorus staff who need it to respond to your enquiry. Communication between your browser and our systems is encrypted using HTTPS and TLS.
If you proceed to become a client of Attorus, your enquiry information is retained for the duration of our working relationship and for a reasonable period after, for record-keeping and tax compliance purposes.
If you do not proceed to become a client, your booking enquiry information is automatically deleted six months after submission.
You can request earlier deletion at any time by emailing [email protected]. Requests are processed within 30 days.
Some of the supporting software and systems we use to process booking enquiries may be based in the United States, including our customer relationship management platform. Where this is the case, we have taken reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles, including through their own published privacy commitments and enterprise data protection agreements.
If you would prefer your information not be processed using overseas-based systems, please email us before submitting the booking form so we can discuss alternatives.
Under the Australian Privacy Principles, you have the right to:
To exercise any of these rights, email [email protected]. We respond to all requests within 30 days.
Questions, requests, or complaints about this policy or how we handle your information can be sent to:
We will acknowledge your enquiry within two business days and respond substantively within 30 days, in line with the Australian Privacy Principles.
When a business connects a messaging channel to Attorus, such as its WhatsApp Business Account through Meta's Embedded Signup, we process information on that business's behalf to run the shared inbox and AI communication services it has engaged us for. This can include:
We use this information only to provide the service to that business: showing conversations to its authorised staff, sending replies on its behalf, assigning conversations and, where the business switches it on, suggesting replies. We do not sell it, use it for our own marketing, or use it to train AI models. We handle information received through Meta's platforms in line with the Meta Platform Terms and the WhatsApp Business policies.
The information is stored with our cloud database provider and is sent to Meta to deliver WhatsApp messages and, where reply suggestions are switched on, to Anthropic to generate them. Some of these providers are based outside Australia, including in the United States, and we take the same reasonable steps described in section 06 to ensure they handle it consistently with the Australian Privacy Principles. We keep it for as long as the business uses Attorus and delete it within 30 days after the business disconnects, unless the business asks us for an export first.
If you messaged a business that uses Attorus and want your information corrected or deleted, contact that business, or email [email protected] with the phone number you messaged from and we will work with the business to action it within 30 days. Step-by-step instructions are on our data deletion page.