Privacy Policy
Last updated: 8 October 2026
Who we are
Naxium Pty Ltd (“Naxium”, “we”, “us”) operates naxium.com.au and naxium.app. We are based in Melbourne, Victoria, Australia.
We handle personal information under the Australian Privacy Principles of the Privacy Act 1988, and we apply them whether or not the small business exemption happens to cover us in a given year.
What we collect
- What you enter in our intake form: your name, work email, company website, and the one thing slowing your business down, picked from a short list. The form does not ask for a phone number, a budget, a job title, team size, software, a timeline, or notes.
- Anything you send us by email, or type into the chat widget on this site.
- Notes, recordings and transcripts from discovery and diagnostic sessions you attend with us.
- Business information you hand over during an engagement so we can do the work: process documents, exports, and access to the systems you ask us to connect.
- If you become a client: the engagement record itself, and payment status. We never see or store your card details, which go directly to Stripe.
- Aggregate website traffic figures via Vercel Analytics. These are counts and trends, not a profile of you.
The intake form also saves a copy of your answers in your own browser so you can leave and come back. That copy stays on your device and clearing your browser data removes it.
How we use it
We use what you give us to assess where your business is losing time, to respond to you, and, if you engage us, to design, build and support the system you have paid for. Meeting notes and business information are read by Claude to draft the analysis and documents we produce for you; a person reviews everything before it reaches you or anyone else. Emails you send to contact@, billing@ or jacob@naxium.com.au may be read by Claude to tell us what needs a reply; a person decides what happens next.
We do not sell your data. We do not share it with advertisers. We do not use one client's data to do another client's work.
Who processes your data, and where
These are every third party that touches your data, what each one does, and the country it sits in.
| Service | What it does | Where the data sits |
|---|---|---|
| Google Cloud / Firebase | Where your records actually live: contact details, deal history, meeting notes, proposals and portal accounts. | Melbourne, Australia |
| Naxium's own automation server | Our own server. Moves records between the systems on this list. No other company has access to it. | Sydney, Australia |
| Stripe | Takes deposit and invoice payments. Card details go straight to Stripe and never reach our systems. | United States |
| Vercel | Hosts this website and the client portal, and reports aggregate traffic figures. Pages are served from Vercel's Sydney edge. | United States |
| Google Workspace and Gmail | Our email and calendar. Correspondence with you, the booking pages you use to schedule a session, and the confirmation email you get after submitting a form on this website. | United States and other countries |
| Granola | Records and transcribes meetings you attend with us. We tell you when it is running, and we stop it if you would rather we did not. | United States |
| Anthropic (Claude) | Reads your meeting transcripts, business information, and short excerpts of emails you send us, to draft the analysis, reports and replies we then review by hand. We store a pointer to the email and an excerpt of no more than 280 characters, never the full message. | United States |
| buildmyagent.io | The chat widget on this website. Anything you type into it passes through them. It does not run on the client portal. | United States |
Table last reviewed: 10 September 2026
Each of these has its own privacy policy. We add a processor only when the work needs it, and this table is updated in the same change.
What leaves Australia
Your records are stored in Australia. The database that holds your contact details, deal history, meeting notes and proposals runs in Google's Melbourne region, and our automation server runs in Sydney.
Some of the services we rely on are not Australian, and data sent to them is processed overseas. Those are Stripe, Vercel, Google Workspace and Gmail, Granola, Anthropic, and the chat widget on this site, all in the United States, with Google Workspace also using Google infrastructure in other countries. The practical effect is that your meeting transcripts and business information are processed in the United States when Claude drafts an analysis from them, and your email correspondence with us sits on Google infrastructure.
How long we keep it
If we have worked together, we keep your data for 24 months after the engagement ends, then delete it. If you enquired and we never worked together, we delete what you sent us 12 months after we last spoke.
Meeting transcripts are the exception: we delete them 90 days after the meeting, whether or not we work together. The notes and reports we write from them follow the periods above.
You can ask us to delete it sooner and we will, other than anything we are required to retain by law, which in practice means invoices and payment records kept for tax purposes.
Your data is yours
Your business data belongs to you. You can ask for a copy of it at any time, during an engagement or after it, and we will export it in a usable format rather than hand you something you cannot open. We do not hold your data hostage and there is no charge for getting it back.
We do not permit client data to be used to train AI models. Where we send your information to an AI provider to produce an analysis, that provider is contractually prohibited from training on it, and the tools we use to record and transcribe meetings are set not to.
Your rights
Under the Privacy Act 1988 you can ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Email contact@naxium.com.au and we will respond within 30 days.
If you are not satisfied with how we have handled a privacy matter, tell us first so we can fix it. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Keeping it safe
Access to client data is restricted to the people doing the work. Naxium business data and client portal data live in separate databases with separate credentials, so one cannot be reached with the other's keys. Where we hold credentials to a system you have asked us to connect, you can revoke them yourself at any time and the connection simply stops.
Changes to this policy
When we add or remove a processor, we update the table above and the date on it in the same change. If a change materially affects a current client, we tell them directly rather than relying on them to re-read this page.
Contact
Naxium Pty Ltd · Melbourne, Victoria, Australia · contact@naxium.com.au