Privacy policy

Who we are

Fiveways is operated by Fiveways Tech Pty Ltd (ABN 66 700 713 604), an Australian company. In this policy, “Fiveways”, “we”, “us” and “our” mean that company. Contact us at hi@fiveways.ai for privacy questions or requests.

This policy covers our website, enquiries, client services, AI assistants and connected applications, including the Google connection named Fiveways. Where we handle information for a client business, we also follow the agreed service instructions. That business remains responsible for its own collection notices and decisions about the information it supplies.

Information we collect

• Enquiries and service details: your name, email, mobile number, business type, selected systems and workflows, preferences, instructions and any notes you provide.
• Communications and working information: messages, voice notes, documents, attachments, contact details, customer and business records that you or an authorised client make available to a service.
• Connection information: account identifiers, granted permissions and access or refresh tokens used to connect services. Google handles your Google password; the Fiveways Google connection uses OAuth authorisation.
• Technical information: request and error logs, IP addresses, browser information and service activity needed to deliver and operate the website and connected services.

We collect information directly from you, from the business arranging your service, and from systems that an authorised user connects. You can make a general enquiry without identifying yourself, where practical. We need contact and account details to respond personally or provide a connected service. Please only supply information you are entitled to share, and avoid unnecessary sensitive information.

How information is used

We use information to respond to enquiries, plan and deliver work, provide the assistant features you request, maintain service records, troubleshoot problems, protect systems and meet applicable legal obligations. The website sends enquiry details to Fiveways by email using Resend. An enquiry may lead to the email, phone or WhatsApp follow-up you requested.

Connected services can find relevant records, summarise messages and documents, prepare drafts, assist with scheduling, and carry out agreed updates. Which actions are available depends on your deployment, permissions and approval rules. Submitting a website enquiry does not give us access to your Google account.

Google account data

When you connect Google, the consent screen identifies the permissions requested. Depending on the feature you enable, these can cover:

• Gmail: account identity, message and thread identifiers, senders and recipients, subjects, message content, labels and attachments, to find correspondence, answer questions and prepare work. Sending or modifying email requires an enabled feature and the relevant permission.
• Calendar: calendars, event details, attendees and availability, to help with scheduling and, where authorised, create or change events.
• Drive, Docs and Sheets: file identifiers and metadata, document content and spreadsheet records, to retrieve and work with the information needed for your task. Writes require the relevant permission and an agreed workflow.

We use OAuth tokens to make authorised requests, including background work where you have enabled it. Selected source content and results can pass into the assistant’s processing and working records described below. Access is limited by the permissions actually granted; a connection does not make every feature available.

Fiveways’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace API user data and developer policy.

Google data, including derived information, is used only for the requested, visible service features. It is not sold, used for advertising, creditworthiness or lending decisions, or used to train or improve general-purpose AI models. Transfers are limited to consented service delivery, security, legal requirements, or a business transfer with your prior explicit consent.

Human access to Google data is limited to your documented consent to specific information, necessary security or legal purposes, or aggregated and anonymised information for permitted internal operations. These restrictions apply to our personnel and service providers as well.

AI processing and sharing

Our assistants use third-party AI models to interpret requests and produce responses. Relevant messages, document excerpts, attachments, tool results and conversation context may be sent to the AI provider used for your service. This is processing to complete your task. We do not use Google account data to train general-purpose models or permit our AI providers to do so.

Information may also be processed by providers of hosting, storage, connected applications, communications and service support. Our website uses Vercel for hosting and Resend for enquiry email delivery. AI assistants may run on separate hosted infrastructure. The providers used for an individual client deployment depend on its agreed setup; you can ask us for those details before connecting an account.

When you ask an assistant to share an answer, send a message or update a connected system, the relevant information is disclosed to that destination. Other participants can see information posted in a shared conversation. Choose the audience with care. Google data sharing remains subject to the restrictions above.

Storage, security and overseas processing

Information can be held in business email, application databases, hosted assistant storage, working files, conversation history, logs and backups. OAuth tokens are held by the connection service or assistant environment used for that connection. We use access controls and authenticated connections to protect these systems. No online service can eliminate every security risk.

Our services use overseas providers, including providers in the United States. For example, our website hosting and enquiry delivery use Vercel and Resend. Other processing locations depend on the connected service and its providers. This policy does not promise Australian-only data storage. Contact us for the locations relevant to your deployment before supplying information if you have a location requirement.

Retention, disconnection and deletion

Retention depends on why information is held, the service arrangement and applicable legal requirements. Working records, correspondence and logs may remain after a task finishes. We do not promise one fixed retention period for all services.

You can withdraw Google access in your Google Account connections settings by selecting Fiveways and removing its access. You can also ask us to disconnect a service at hi@fiveways.ai. Revocation stops further authorised access through that grant; it does not automatically erase information already held by Fiveways or messages and records already shared with another service.

To request deletion, email us with the account and service concerned. After verifying your authority, we will arrange deletion of information we hold that is no longer needed, including relevant stored connection credentials and working copies. We will explain any information that must remain for a legal obligation or an ongoing authorised purpose, and any backup or provider limitation affecting completion. We will confirm the outcome. We do not claim that removal from every backup is immediate.

Where a client business controls the source records, we may need its instructions. Deleting a Fiveways working copy does not delete the original in your Google account or independently retained copies held by recipients.

Website technologies

Our website loads its typeface from Google Fonts, so your browser contacts Google to retrieve the font. Our hosting provider also processes technical requests needed to serve and protect the site. The current website code does not add advertising pixels or set advertising cookies.

Third-party websites and services linked from Fiveways have their own privacy notices. Your browser can restrict cookies, although restrictions may affect connected services.

Access, correction and complaints

You can request access to or correction of your personal information, ask about how it is handled, or make a privacy complaint by emailing hi@fiveways.ai. Include enough detail to identify the information or issue. We may need to verify your identity or authority before releasing or changing records; please do not send passwords or OAuth tokens.

We will review your request, investigate a complaint and explain our response and any next steps. If we cannot fulfil a request, we will explain why, subject to legal restrictions. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner, which can explain whether it can consider your complaint. Applicable privacy rights are not limited by this policy.

Changes to this policy

We will publish updates here with a revised date. If we propose a new use of Google data beyond what you authorised, we will provide the required notice and obtain consent before making that use.