Privacy Policy
Last updated 26 July 2026
Social Web is a registered business name of the Kritsotakis Family Trust (ABN 45 984 876 899), operating from New South Wales, Australia. We build and maintain websites, content tools and AI assistants for small businesses.
This policy explains what personal information we collect, why, where it goes, and how you can have it deleted. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. Who this policy covers
Two different groups, with different data:
- Our clients: the businesses who engage us to build a website, run a content Studio, or operate an assistant.
- Visitors to our clients' websites: people who browse a site we built, or send a message to an assistant we operate on our client's behalf.
For that second group, our client is the business you are actually dealing with. We process that information on their instructions, as their service provider.
2. What we collect
| Information | Why we hold it |
|---|---|
| Client contact details (name, business name, email, phone, address, ABN) | To provide the service, invoice, and communicate |
| Business content you supply (menus, services, prices, hours, photos, logos, brand assets) | To build your site and train your assistant |
| Assistant conversations (messages sent to an assistant, and its replies, with timestamps) | To operate the service, and so there is a record if an answer is ever disputed |
| Contact details a visitor voluntarily gives an assistant (such as a phone number for a callback) | Passed to the business so they can respond |
| Basic technical data (IP address, browser type, pages viewed) | Security, abuse prevention, and keeping sites working |
We do not sell personal information, ever. We do not use your data, or your customers' data, to train our own AI models. We do not run advertising networks across our clients' sites.
3. Sensitive information
We ask clients not to load sensitive information (health, racial or ethnic origin, political or religious views, sexual orientation, criminal record, biometric data) into a Studio or an assistant's knowledge base.
Assistants we build are instructed never to request health information and never to give health, medical, legal or financial advice. Where a question touches on safety, allergies or health, the assistant is designed to hand the conversation to a human rather than answer it.
4. Who we share it with
We use a small number of established providers to run the service. Some store or process data outside Australia.
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting, DNS, security, data storage | United States and global edge network |
| Anthropic, PBC | The AI model that generates assistant replies | United States |
| Google LLC | Business email and workspace | United States |
| Stripe, Inc. | Payment processing | United States and Australia |
| Meta Platforms, Inc. | Publishing posts to a client's own Facebook or Instagram, where the client has connected those accounts | United States |
We share information with these providers only so far as it is needed to run the service. We may also disclose information where the law requires it.
5. Social media account connections
If a client chooses to let us publish on their behalf, they connect their own social media accounts to us through that platform's official authorisation process. We receive only a token permitting us to publish to the accounts they selected.
- We never see or store social media passwords.
- We use the connection only to publish content the client has approved, and to confirm it published.
- A client can disconnect at any time, either from within their own platform account settings or by asking us. Disconnecting revokes our access immediately.
6. How long we keep it
- Client business records and content: for the life of the engagement, then up to 7 years where tax or legal obligations require it.
- Assistant conversation logs: 24 months by default, unless a client asks for a shorter period.
- Technical logs: typically 30 days.
7. Accessing or deleting your information
You can ask us at any time to tell you what personal information we hold about you, correct it, or delete it.
How to request deletion
Email privacy@socialweb.ai with the subject line "Data deletion request", and tell us:
- your name and the email address or phone number you used,
- which business's website or assistant you interacted with, if you know it.
We will confirm receipt within 7 days and complete the deletion within 30 days. We will tell you if any information must be retained, and why (for example, a record we are legally required to keep for tax purposes).
If you are a visitor to one of our clients' sites, you can also ask that business directly and they can instruct us on your behalf.
Deleting data held via a social media connection
If a client has connected a social account to us and wants that connection and its associated data removed, they can revoke our access from within their own platform account settings, or email privacy@socialweb.ai and we will remove the connection and delete the stored authorisation token and any related publishing records.
8. Security
Data is transmitted over encrypted connections and stored with the providers listed above. Access is limited to people who need it to deliver the service. No system is perfectly secure, and we will notify affected individuals and the OAIC where a data breach is likely to result in serious harm, as required by the Notifiable Data Breaches scheme.
9. Cookies
Our own website uses only what is needed to serve the site and keep it secure. We do not run advertising or cross-site tracking cookies on socialweb.ai. Websites we build for clients may use analytics if that client chooses; where they do, it is disclosed on that client's own site.
10. Complaints
If you think we have mishandled your personal information, contact us first at privacy@socialweb.ai and we will respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.
11. Changes
If we change this policy we will update the date at the top. Material changes affecting existing clients will be communicated directly.
12. Contact
Social Web
Kritsotakis Family Trust, ABN 45 984 876 899
New South Wales, Australia
privacy@socialweb.ai