Privacy policy
Redgum Lab is an Australian service that builds lead follow-up systems for businesses. It is operated from Victoria, Australia. This page explains what data this website touches, how information you share with us is treated, and how our internal automation uses Google user data. Questions or requests: ahmed@redgumlab.au.
This website
redgumlab.au is a static site. It has no user accounts, no login, and no forms of its own.
- Server logs. Our web server records standard request logs (IP address, browser user agent, pages requested, timestamps) for security and troubleshooting. Logs are not used for advertising and are not shared.
- No analytics cookies. The site does not set tracking cookies and does not run third-party analytics.
- Fonts. Pages load typefaces from Google Fonts, so your browser requests font files from Google's servers. Google's own privacy policy applies to those requests.
- Booking. "Book your free follow-up audit" links go to Calendly. Anything you enter there (name, email, meeting details) is collected by Calendly under Calendly's privacy policy and shared with us so we can hold the meeting.
Information you share with us
If you book an audit or correspond with us, we collect what you choose to share: contact details and information about how your business handles enquiries. We use it only to run the audit, prepare findings, and, if you engage us, deliver the work. We do not sell it, rent it, or share it with third parties except where needed to deliver the work you asked for or where the law requires. Ask at any time and we will tell you what we hold about you, correct it, or delete it.
Google user data
Redgum Lab operates an internal automation agent on a private, self-hosted server. The Google OAuth client associated with this site exists so that agent can access Google services for accounts that explicitly sign in and grant consent. It is an internal operations tool, not a consumer product, and only accounts we operate sign in to it.
- What it can access. Depending on the scopes granted at sign-in: Gmail (read, send, modify), Google Calendar, Drive, Docs, Sheets, and Contacts.
- How it is used. Only to carry out tasks the signed-in user explicitly asks the agent to perform, such as searching mail, drafting or sending messages, managing calendar events, and reading or updating documents and spreadsheets. Google user data is not used for advertising, not sold, and not shared with third parties, except as described below or where required by law.
- AI processing. To perform a requested task, relevant content retrieved through Google APIs may be processed by third-party large language model providers as part of generating the response to that task. We do not use Google user data to train AI models.
- Storage and security. OAuth tokens are stored on our private server, restricted to the server's administrator, and used only to maintain authorised access. Google user data is not copied into third-party integration platforms.
- Retention and revocation. Tokens remain until access is revoked. You can revoke access at any time from your Google Account under Security → Third-party access, and you can email us to have any stored data deleted.
Where data lives
Our server infrastructure is hosted with established providers. Website hosting and the automation server described above are located in Europe; booking data sits with Calendly. We take reasonable steps to protect information from misuse, loss, and unauthorised access.
SMS messages
If you give us your mobile number through our co-hosting enquiry form and tick the SMS consent box, we use it only to send texts about your enquiry and any calls you book with us. Consent to receive texts is not a condition of any purchase.
Mobile numbers and SMS opt-in consent are not shared with or sold to third parties or affiliates for marketing purposes. We pass your number only to the messaging provider that delivers our texts (Twilio), solely to send them.
Reply STOP to any message to opt out, or HELP for help. We keep a record of your consent (date, time and the wording you agreed to) and of any opt-out.
Australian privacy law
We handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth) to the extent they apply. If you have a concern, contact us first at ahmed@redgumlab.au and we will respond promptly. You can also contact the Office of the Australian Information Commissioner.
Changes
If this policy changes, the new version will be published at this address with an updated date above.