Privacy Policy

Who we are

ReferralReady is operated by Seddon Digital (Australia). We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we participate in the Notifiable Data Breaches scheme. Contact: hilary@seddondigital.com.au.

What we collect

Your email address (that's your whole login — no passwords), the business profile you provide or approve, the presentations you create, and practice metrics (pace, timing, filler-word counts, transcripts and coaching feedback). Payment details are handled entirely by Stripe; we never see your card number.

Voice recordings are never stored

When you record a practice run, the audio is sent for transcription, analysed, and immediately discarded. We keep only the transcript and the measured metrics — and you can delete those any time from the app.

Where your data lives

Our database and application run in Sydney, Australia. Some processing partners (below) process data transiently outside Australia; this is disclosed under APP 8. Every partner is independently security-certified:

• •Vercel (app hosting, Sydney region) — ISO 27001, SOC 2
• •Neon (database, Sydney region) — ISO 27001, SOC 2
• •Stripe (payments) — ISO 27001, PCI-DSS Level 1
• •Anthropic (AI script drafting & coaching) — ISO 27001, SOC 2 Type II — API data is not used to train models
• •Deepgram (speech-to-text for practice feedback) — SOC 2
• •Postmark (transactional email) — SOC 2
• •Google Analytics (website usage measurement) — ISO 27001, SOC 2 — receives page views and device type, never your name, email or anything you write in the app

Your rights (APP 12 & 13)

From your account page you can view and edit your profile, delete individual presentations and practice sessions, download everything we hold about you as a file, and delete your account entirely. Account deletion removes your content immediately; billing records are retained for five years as Australian tax law requires.

Marketing email

We only send marketing or product-update emails if you actively opt in (the box is unticked by default, in line with the Spam Act 2003). You can turn it off any time from your account, and every such email carries an unsubscribe link. Turning it off never affects the essential emails below.

Analytics and cookies

We use Google Analytics to see which pages get used and how people find us, so we know what to improve. It sets cookies in your browser and tells us things like which pages were visited, roughly where in the world you are, and what sort of device you used. Your IP address is used to work out that rough location and is then discarded rather than stored. We don't send it your name, your email, or anything you've written in the app. You can block it with any ad blocker or your browser's privacy settings, and the app will work exactly the same.

Google is listed as a processing partner above, and processes this data outside Australia — disclosed under APP 8, like our other partners. Google's own privacy policy is at policies.google.com/privacy.

We also set one essential cookie to keep you signed in. That one isn't optional, because without it the app can't tell it's you.

What we don't do

We don't sell your data and we don't use it for advertising. The essential emails we always send are transactional: sign-in links, your scripts, billing reminders and support replies.

Questions or complaints

Email us first and we'll do our best to fix it. You can also contact the Office of the Australian Information Commissioner (oaic.gov.au).