Privacy
Who we are
Glow Line is operated by the Glow Tally team under an Australian sole-trader ABN, provided on request. Contact: hello@glowtally.com.au. This policy covers Glow Line, the product at glowtally.com.au and app.glowtally.com.au. It is written to be read.
What we collect from you
At sign-up: your business name, email address, password (stored hashed) and Australian mobile number, which we verify with a text code. On paid plans, a Stripe customer reference and invoice records; card details are entered on Stripe-hosted pages and never reach us.
As you use the product: the services, prices, hours and notes you save; booking requests and enquiries that come to your account; and, on paid plans, your phone number, each call's start and end time, the caller's number, the words exchanged and a summary.
Automatically: the IP address and browser of sign-ins and consent actions, and ordinary server logs.
What we collect about your callers and clients
When the assistant answers a call: the number it came from, the words exchanged, a summary, and any name, mobile, service and preferred time the caller gave. When a client uses your booking page: their name, mobile, service, preferred time and note. When an enquiry is forwarded or typed in: the sender's name, email or phone and the message. This information belongs to your business's dealings with its clients; we hold it for you and do not use it for anything else.
Why we use it
To run the product: answering calls from your profile, texting you after each call, listing requests and enquiries, billing, sign-in and support. To meet our legal obligations. On the Free plan, to carry out the marketing consent you gave (see Consent below). We do not sell personal information.
Consent on the Free plan
Free is paid for by a marketing consent you tick at sign-up. We record the exact sentence shown, its version, the time, your IP address and browser. Under that consent Glow Tally and the partner named on the partners page may contact you by email and phone, including automated voice calls, about business growth and advertising services. Never by text message. You can withdraw at any time by the unsubscribe link in any email, by replying stop, by asking the caller, or from your account; the withdrawal is recorded with its method. Paid plans involve no marketing consent.
Who processes it and where
The application runs on Vercel (Sydney region when live). The database is on Supabase (Sydney). Payments: Stripe. Email: Postmark. Text messages and phone numbers: Vonage. The voice assistant on calls: ElevenLabs. Data stays in Australia except where one of these providers processes it elsewhere: Stripe, Postmark, Vonage and ElevenLabs process data on infrastructure outside Australia as part of delivering payments, email, texts and the voice conversation. We choose providers that publish their own privacy and security terms, and we send them only what the service needs.
How long we keep it
Account data for as long as your account exists, and for a reasonable period after it closes so that invoices and consent records can be shown if asked. Call records, booking requests and enquiries stay with the account. Backups are taken daily and roll over.
Security
Passwords are hashed. Sign-in links and verification codes expire. Changing a password signs out every other device. Access to production systems is limited to the team. Card details never touch our systems.
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete your account and its data, by emailing hello@glowtally.com.au. A person answers within one business day on Melbourne time. If you believe we have mishandled your information you can complain to us first and then to the Office of the Australian Information Commissioner.
Changes
If this policy changes in a way that matters, account holders are emailed at their confirmed address before the change takes effect.