Clear about the data behind every conversation.

We collect personal information reasonably necessary to provide and operate Wattle, including:

• Account and business information: names, email addresses, authentication details, organisation information, team membership, preferences, subscription status, and billing records.
• Caller and contact information: phone numbers, names, email addresses, contact notes, appointment details, and other information supplied during a call or message.
• Communications: call and message metadata, messages, AI-generated summaries, transcripts and, where enabled, call recordings.
• Agent and knowledge information: instructions, prompts, workflows, business documents, and other content a customer supplies to configure an AI agent.
• Integration information: identifiers, configuration, and credentials needed to connect services such as calendars, communications platforms, accounting tools, and payment providers. Sensitive credentials are stored separately in encrypted form.
• Technical information: IP address, browser and device information, request and error logs, timestamps, and information about how the service is used.
• Verification information: business or identity information required by telecommunications providers when purchasing or porting phone numbers.

Payment card and bank details are handled by payment providers such as Stripe. Wattle receives transaction and account status information rather than complete card details.

If required information is not provided, some or all of the service may be unavailable.

We use personal information to:

• provide AI calling, messaging, booking, payment, hand-off, and connected workflow features;
• create and administer accounts, organisations, subscriptions, and support requests;
• route communications, maintain conversation history, and provide requested records to authorised customer users;
• secure, monitor, troubleshoot, and improve the reliability of the service;
• send service notices and, with consent where required, product or marketing communications;
• prevent fraud, misuse, and security incidents; and
• meet legal, regulatory, and telecommunications requirements.

We do not sell personal information. We do not use customer or caller communication content to train AI models owned by Wattle.

Wattle processes live audio, text, and related context so an assigned AI agent can answer and act during a conversation. This information may be sent to contracted AI and communications providers solely to operate the requested service.

Call recording and transcription are disabled unless a customer explicitly enables them. When enabled, Wattle may store recordings, transcripts, summaries, and extracted details for the customer’s authorised users.

Our customers decide how their agents are configured and which callers they communicate with. Customers are responsible for providing notices, obtaining consent, and using Wattle lawfully, including complying with call-recording, direct-marketing, and telecommunications laws.

Communications may contain sensitive information if a person chooses to provide it. Customers should not configure agents to collect sensitive information unless it is lawful and necessary.

We may disclose personal information to service providers that help us operate Wattle, including:

• Cloud and database services: Supabase and Vercel.
• AI services: OpenAI and xAI, depending on the agent selected by the customer.
• Communications services: Twilio, Telnyx, Meta and WhatsApp.
• Payment services: Stripe.
• Customer-selected integrations: services such as Google, Slack, Discord, Xero, QuickBooks, Cal.com, and n8n when a customer connects them.
• Professional advisers and authorities: where reasonably necessary or required by law.

Some providers process or store information outside Australia, including in the United States and other countries where they operate. Privacy protections in those countries may differ from Australian law. We take reasonable steps to use reputable providers and protect information handled overseas.

We may also disclose information as part of a business transaction, subject to appropriate confidentiality and legal protections.

Wattle uses essential browser storage and similar technologies for sign-in, security, session continuity, preferences, and core service functionality. Our infrastructure providers may also create technical logs needed to deliver and protect the service.

We do not currently use advertising cookies. If our use of non-essential analytics or tracking changes, we will update this policy and provide any consent controls required by law.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Measures include encryption for sensitive integration credentials, access controls, tenant separation, restricted storage, and service monitoring.

No online service is completely secure. Customers must protect their credentials, restrict account access, and notify us promptly if they suspect unauthorised activity.

We retain information only for as long as reasonably necessary to provide the service, meet customer instructions, resolve disputes, maintain security, and comply with legal obligations. Retention varies by data type and customer configuration. Information may remain temporarily in backups or be retained where required by law. When no longer required, it is deleted or de-identified where reasonably practicable.

You may ask to access or correct personal information we hold about you, request deletion where applicable, or opt out of direct marketing. Contact us using the details below. We may need to verify your identity before acting and will respond within a reasonable period.

If Wattle holds information solely for one of our business customers, we may refer your request to that customer because they control the purpose and context of the processing. We will explain if we cannot fulfil a request and provide available complaint options.

Send a description of your concern to the privacy contact below. We will investigate and aim to respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner or call 1300 363 992.

Wattle is a business service and is not directed to people under 18. We do not knowingly invite children to create accounts. If we learn that a child’s information was collected without appropriate authority, we will take reasonable steps to delete it.

We may update this policy when our practices, services, or legal obligations change. The current version will be published here with a revised effective date. We will provide additional notice where a change is material and it is reasonable to do so.

For questions, access or correction requests, deletion requests, or privacy complaints, contact the Privacy Officer: