We help Australian businesses use AI without doing something they'll regret with their data. It would be a poor look to be vague about our own. So this is written in plain English, it says where your information actually goes — including the parts most policies leave out — and it tells you how to get it back or deleted.
Last updated 28 July 2026 · Helexian Pty Ltd
On this page
This policy applies to Helexian Pty Ltd, trading as Helexian AI, and to this website at ai.helexian.com. In this policy "we", "us" and "our" mean Helexian Pty Ltd.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Some obligations under that Act don't apply to a business of our size. We've chosen to work to them anyway — we'd rather hold ourselves to the standard we advise our clients to meet.
Our analytics record the pages you visit, roughly where you are, what device and browser you're using, how you arrived, and how long you stay. This is tied to a random identifier, not to your name.
Depending on which one, we collect: your name, your email address, your role, your business name, your website, your industry, your location, your team size, and the answers you give to that tool's questions.
Your name, email address, phone number if you give it, what you tell us about your business, and the content of the messages between us.
Business and contact details, billing details, the names and contact details of the people we work with in your business, and whatever information we need to do the work. For some services that includes access to your accounts on other platforms — always by an invitation you control and can revoke.
We don't sell your personal information. We don't rent it, and we don't share it with anyone for their own marketing.
We use Google Analytics to understand how the site is used. It sets cookies and collects an identifier along with your approximate location, device and browsing behaviour on this site. We don't use advertising or remarketing cookies.
Some of our free tools save your answers in your own browser's local storage so you don't lose them if you refresh. That stays on your device and clearing your browser data removes it.
We load fonts from Google Fonts, which means Google receives your IP address when a page loads.
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics entirely using Google's opt-out browser add-on. The site works fine either way.
We use third-party services to run the business. Each one only gets what it needs to do its job.
| Who | What they do for us | What they may hold |
|---|---|---|
| Netlify | Hosts this website | Technical logs, IP addresses |
| Supabase | Database behind our forms and tools | Form and enquiry details, client service data |
| Google (Analytics, Fonts, Workspace) | Analytics, fonts, our email, calendar and files | Usage data, IP address, correspondence |
| Brevo | Email and marketing contacts | Name, email, engagement history |
| Cal.com | Booking calls | Name, email, booking details |
| Anthropic (Claude) | AI assistance in drafting and analysis | The content we submit for a task |
| Apify | Collecting publicly posted reviews for review-management clients | Publicly available review content |
We may also disclose information to our professional advisers (such as our accountant or lawyer), and where we're required to by law. If we ever sold or transferred the business, information could transfer with it — and we'd tell you before that happened.
Most policies bury this. We'd rather be direct about it, because it's the thing an Australian business owner is most likely to care about and least likely to be told.
Our other providers are also based outside Australia, and may store or process information in the United States, the European Union or elsewhere, depending on the provider.
By giving us your information you accept that it may be handled overseas. We take reasonable steps to use reputable providers with proper security, but we can't control or guarantee how the laws of another country might apply to information held there.
If this is a problem for your business, tell us. For client work we can talk about what can be kept onshore.
Some of our services involve handling information that belongs to our client's business rather than to us — and sometimes information about our client's own customers.
Our Guest Review Desk service is the clearest example. For accommodation clients we collect guest reviews that have already been published publicly on platforms like Google, Booking.com, TripAdvisor and Agoda. Those reviews include the reviewer's name or username, their rating, and whatever they've written, which sometimes includes complaints about safety, health or how they were treated. We store this in a review ledger our client can access, and we use it to write replies and monthly reports for that client.
If you're a guest who has left a review and you want to know what we hold, contact the accommodation operator first, since it's their service and their decision. You're also welcome to contact us directly and we'll help.
We're an AI consultancy, so it would be strange not to use it. Being straight about how:
We use access controls on our systems, encrypted connections, multi-factor authentication where it's available, database security rules that deny access by default, and role-based access to any client platform account we're invited into. We keep the number of people with access small — currently that's the director and one assistant, both bound by confidentiality obligations.
No system is perfectly secure, and we won't pretend otherwise. If a breach happened that was likely to cause serious harm, we would tell the people affected and the Office of the Australian Information Commissioner, as the law requires.
If you ask us to delete something and we're legally required to keep it, we'll tell you that rather than quietly keeping it.
You can ask us to:
Email engage@helexian.com with "Privacy request" in the subject line. We'll respond within 30 days, and usually much sooner. There's no charge. We may need to confirm who you are first, so that we're not handing your information to someone else.
If you think we've mishandled your information, tell us first — email engage@helexian.com with "Privacy complaint" in the subject. We'll acknowledge it within 5 business days and give you a written answer within 30 days.
If you're not satisfied with how we handle it, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
We'll update this page when what we do changes, and we'll change the date at the top. If a change materially affects how we handle information we already hold about you, we'll tell you directly rather than relying on you to notice.
Helexian Pty Ltd
Email: engage@helexian.com
Web: ai.helexian.com
Privacy questions go to the same address and come to the director directly.