Privacy policy

Boring Ventures Pty Ltd (ABN 67 671 943 758) operates On Autopilot. This page describes how we handle your personal information, in accordance with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).

What we collect

When you submit a form on this site (the audit form, a service application, the AI Readiness Scorecard, the AI Savings Estimator or a resource download), we collect what you enter: your name, email address, phone number, business name, industry, the message you write and your answers to the form's questions. We use this information to respond to your enquiry and, if appropriate, to follow up about our consulting services.

If you email one of our @onautopilot.com.au addresses, we receive your email address, the name your email program sends with it, and whatever you write.

With a form submission we also record how you found us, so we know which pages and channels are useful: the page the form was on, the first page you visited on this site and the site or campaign link that referred you, the pages you viewed during that visit, your device type (mobile, tablet or desktop) and your approximate location (country and state) derived from your IP address. The first-visit details are kept in your own browser's storage and are only sent to us if you submit a form. To stop automated abuse of the forms we keep a one-way scrambled code (a hash) of your IP address, never the address itself, and we use Cloudflare Turnstile to check that a submission comes from a person rather than a bot.

We collect anonymised, first-party analytics about your visit (pages viewed, time on page, country, device type) using Google Analytics 4 with Consent Mode v2. Analytics are on by default, with IP addresses anonymised and advertising signals always off. You can switch analytics off at any time from the cookie banner, and we honour the Global Privacy Control signal in your browser: if it is on, no analytics are sent.

We do not run a newsletter at the moment, so we do not collect newsletter sign-ups. If we start one, we will update this policy first.

How long we keep it

We keep enquiries for as long as we need them to respond to you and for our business records. There is no automatic deletion schedule. If you ask us to delete your details, we will, unless the law requires us to keep them.

What we don't do

We do not sell your data. We do not share it with marketing partners. We do not use it to train AI models. We do not run behavioural-tracking pixels (Microsoft Clarity, Meta Pixel) by default, and if we add them, they will be gated behind explicit consent.

Who we share with

  • Cloudflare, processes form submissions (Cloudflare Workers), stores them in a database located in Cloudflare's Oceania region (Cloudflare D1), and runs the Turnstile bot check on our forms (privacy: cloudflare.com/privacypolicy)
  • Cloudflare Email Routing, forwards email sent to our @onautopilot.com.au addresses to our team inbox
  • Google Workspace, hosts the team inbox that receives enquiries and enquiry notifications (privacy: policies.google.com/privacy)
  • Resend, delivers the email notifications that pass your enquiry to our team; its email data is stored in the United States (privacy: resend.com/legal/privacy-policy)
  • Formspree, a backup that receives and stores a form submission on our behalf only if our own form service cannot be reached or cannot deliver it (privacy: formspree.io/legal)
  • Google Analytics 4, anonymised first-party page analytics (opt out any time from the cookie banner)
  • Hetzner Online, hosts this website on a server in Helsinki, Finland; its access logs include IP addresses

Cross-border data flows (APP 8)

Some of the services listed above store or process personal information outside Australia, in the United States and Finland. In the United States: Resend (enquiry notification emails), Formspree (backup form submissions), Google Workspace (our team inbox) and Google Analytics 4 (anonymised analytics). In Finland: Hetzner, which hosts this website and keeps its access logs. Cloudflare stores form submissions in its Oceania region, but because its network runs worldwide, a submission or an email to us may pass through a Cloudflare data centre outside Australia on its way.

Under Australian Privacy Principle 8 (Privacy Act 1988 Cth), by submitting a form or emailing us you consent to your personal information being disclosed to the relevant overseas recipient. We have taken reasonable steps to ensure the recipients handle the information in a way consistent with the Australian Privacy Principles, including reviewing their published privacy posture and contractual data-processing terms.

AI tools (use disclosure)

We use AI tools (currently including Anthropic's Claude and OpenAI's ChatGPT, on their paid commercial tiers) to assist with drafting, summarisation, categorisation, and analysis in our consulting work and in writing the guides on this site. AI tools do not train on our customer or reader data on the tiers we use. Articles are researched and drafted with AI tools, checked against the primary sources linked on each page, and published under Jenn Yang's name as the person responsible for them. How we do this is set out on our methodology page.

If our AI workflows ever touch your specific personal information (for example, drafting a reply to your enquiry), we use paid-tier or API-tier services with commercial data-processing agreements that disallow training on the data. You can ask us not to use AI tools in handling your specific matter; email hello@onautopilot.com.au to make that request.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@onautopilot.com.au with the request. We aim to respond within 30 days.

To report an error in something we have published, email editorial@onautopilot.com.au.

Complaints

If you're unhappy with how we've handled your personal information, contact us first at hello@onautopilot.com.au. If we can't resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Last updated: 03/10/2026