Legal

Privacy Policy

Last updated: 28 October 2026 · Version 2.2

This Privacy Policy governs how Conexity Pty Ltd handles personal information. We may update it from time to time; material changes will be notified on this page with at least 14 days notice before they take effect.

1. Who we are

Conexity Pty Ltd ("Conexity", "we", "us", "our"), ABN 40 695 628 810, builds websites, provides marketing services, and supplies AI automation and custom software to Australian businesses, including Manni, our AI assistant for lead follow-up, call answering and appointment booking, and our lead qualification and workflow platform for mortgage brokers. Conexity is not a mortgage broker or credit provider.

2. Information we collect

We collect personal information you provide to us directly or that is generated through your use of our services. This may include:

• Identity and contact details (name, email, phone number, business name).
• Enquiry context (for example loan type, timing, employment indicators, property context, or the job or service you need) that you give us through our forms, Manni or calls, including when you contact a business that uses our services (sections 3 and 4).
• Account and billing data (subscription tier, payment status — payment card details are handled by our PCI-compliant processor and are not stored by Conexity).
• Voice call recordings, transcripts, and metadata where you interact with our AI voice agent. Calls are recorded for quality and compliance, as disclosed at the start of each call.
• Business contact details from public sources: the name, address, phone number, email address, website and similar details of Australian businesses, collected from public sources such as Google business listings (through Google's official Places service), the business's own website, and the Australian Business Register (ABR). We use these to build free website previews and to contact businesses about our services (section 3). These are business details, but they can include a person's name, work email address or phone number, for example for a sole trader.
• Content and account connections from our customers: photos, logos, text, brand details and other content our customers give us to build their website or run their marketing, and access to the accounts they connect or share with us for that purpose (for example their Facebook Page, Instagram account or Google Business Profile), including the access keys those platforms issue to us.
• Technical data (IP address, browser type, device, cookies) collected automatically when you visit our website.
• Website and advertising activity: the pages you view on conexity.com.au, whether you made a free website preview, opened your own preview with your private link, started checkout or paid, and the Meta cookie identifiers described in section 8.
• Messages and comments you send to our Facebook Page or Instagram account (section 9).

3. How we use your information

We use personal information to:

• Provide our services to the businesses that use them. When you contact a business that uses our services (for example, when Manni answers that business's calls, messages or website enquiries), we handle your information on behalf of that business: to answer you, book appointments and pass your enquiry to that business.
• Operate and improve our AI voice qualification, scheduling, and CRM workflow features.
• Build free website previews for businesses from the public business details described in section 2, and build the websites and run the marketing our customers ask us to, using the content and account access they give us.
• Communicate with you about service updates, support, billing, and security.
• Direct marketing to businesses: we may email a business about our services at an email address it has published (for example on its website or business listing). If you ask us to email you your free preview, we send it and up to two reminders. Every marketing email identifies Conexity and tells you how to opt out: reply “no” or “stop”, or use the unsubscribe link where there is one (you can also email us and ask us to stop). We honour opt-outs within 5 business days, and usually much sooner.
• Measure our advertising and show Conexity ads on Facebook and Instagram, including to people who have visited our website or made a free preview (retargeting), and help Meta show our ads to people likely to be interested (see section 8).
• Maintain operational records, prevent fraud, and comply with our legal obligations.

4. Disclosure

We may share information with:

• The business you contacted. When you contact a business that uses our services, we share your information with that business, for example your contact details, your enquiry, any booking, and records of your conversation with Manni. That business handles it under its own privacy policy.
• Service providers who help us run our services (cloud hosting and storage, telephony, AI, email delivery, payments, analytics), under appropriate confidentiality terms. Some of them are overseas (section 5).
• Meta Platforms, Inc. (United States), which runs Facebook and Instagram, for advertising measurement and retargeting (section 8).
• Regulators, law enforcement, or other parties where required by law.

We do not sell personal information.

5. Storage, security and overseas disclosure

We store information on the servers and cloud services we use to run Conexity. Some of our service providers are based overseas, and they may store or process personal information in the United States and other countries. These include providers of:

• AI services (Google, including Gemini; Anthropic; OpenAI), to understand and answer calls and messages, summarise conversations and draft content;
• telephony and voice (Twilio; ElevenLabs), to make, receive and record calls and text messages and to produce Manni's voice;
• email (Resend for our service emails; Instantly for our outreach emails);
• payments (Stripe);
• hosting, storage, security and website delivery (Cloudflare);
• social media and advertising (Meta, for Facebook and Instagram);
• calendars and productivity tools (Google; Microsoft, where a customer connects an Outlook calendar);
• image and video generation for our customers' marketing (HeyGen; Higgsfield).

We share information with these providers only so they can provide their services to us. The laws of those countries may not protect your information in the same way as the Australian Privacy Principles.

Information we send to Meta (section 8) is disclosed overseas to Meta Platforms, Inc. in the United States, and Meta may process it in other countries where it operates. Meta handles it under its Business Tools Terms and its own Privacy Policy; overseas law may not protect it in the same way as the Australian Privacy Principles. We apply reasonable technical and organisational safeguards but no system is completely secure; we cannot guarantee absolute security of information transmitted to us or stored on our systems.

6. Access, correction, and complaints

You may request access to or correction of your personal information by contacting us at the address below. We aim to respond within 30 days and in line with the Australian Privacy Principles.

If you have a complaint about how we have handled your personal information, email us with the details. We will respond to your complaint within 30 days. If you are not satisfied with our response, or we have not responded within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

7. Cookies and tracking

Our website uses cookies and similar technologies for analytics, session management, improving the user experience and, where switched on, advertising measurement with Meta (section 8). See our Cookie & Tracking Notice for details and how to opt out.

8. Meta Pixel and Conversions API (advertising)

We may use Meta's advertising tools, the Meta Pixel and the Conversions API, to measure whether our Facebook and Instagram ads work and to show our ads to people who have shown interest in Conexity.

• Where: the Meta Pixel runs only on our own website, conexity.com.au. We never place it on the websites we build for our customers (for example conexitymarketing.com.au/<business-name>) and never on our internal test servers.
• What Meta receives from your browser (Pixel): the page you are on, the action (page view, free preview made), your IP address, browser and device details, and Meta cookie identifiers (_fbp, _fbc). If you are logged in to Facebook or Instagram, Meta may link this to your account.
• What Meta receives from our server (Conversions API): the action (free preview made, the owner opening their own preview with their private link, checkout started, purchase), its time, the purchase value and currency, your IP address and browser details, and Meta cookie identifiers where available. Your email address and phone number are included only if you gave them to us yourself (for example at checkout or when asking us to email your preview), and only as a one-way hashed code (SHA-256), never in readable form.
• What we never send to Meta: your name, business details we obtained from Google or the Australian Business Register, enquiry or loan details, call recordings or transcripts, or payment card details.
• Meta's own use: Meta also uses this information under its own Privacy Policy, for example to improve its advertising systems.
• Opting out: choose "Opt out of ad tracking" in the notice on our website or on our Cookie & Tracking Notice page. We also respect your browser's Do Not Track and Global Privacy Control settings. To stop the server events about your preview or purchase, email us. You can also manage ads in your Facebook ad preferences.
• Email and text messages: this does not change how we send emails or texts. Marketing emails are sent only as described in section 3, and you can always opt out by replying “no” or “stop”.

9. Messages to our Facebook Page and Instagram account, and deleting them

If you message or comment on a Conexity Facebook Page or Instagram account, Meta sends us your message, your name as shown on Facebook or Instagram, and an ID that Meta assigns to you for our Page. We store these to read and answer your message. When you message us on Messenger or Instagram, an automatic instant greeting may be sent straight away; it is a standard message we set up in Meta's own tools, not a reply written to you. Every other reply is approved by a person on our team before it is sent (Manni, our AI assistant, may suggest the wording). We do not use your messages for advertising.

To have this information deleted, email hello@conexity.com.au with the subject "Delete my Facebook/Instagram data" and the name on your Facebook or Instagram profile. We will delete your messages and Meta ID from our systems within 30 days and confirm by email, unless we must keep something by law. Removing Conexity from your Facebook or Instagram settings stops new messages reaching us. If you ask Facebook or Instagram to have your data deleted, they send us that request: we delete at once the messages and connection data we can match to you, give you a confirmation code and a status page, and delete anything else within 30 days.

9A. If you connect your Instagram or Facebook account

You can choose to connect an Instagram professional account or a Facebook account to Conexity. We only do this when you click a connect button and approve the permissions on Instagram’s or Facebook’s own screen. Connecting is optional: you can always upload your photos yourself instead.

What we read. If you connect Instagram or a Facebook Page while building a website preview, we read your profile (name, username, profile picture, account type and, where available, your bio or Page description) and your recent photos. We copy up to 30 of your recent photos into your preview, and you choose which ones appear on it. If you connect Facebook for Conexity Studio, we read the list of Facebook Pages you manage, the name and ID of the Page you choose, and the name and ID of the Instagram professional account linked to that Page. We do not read your friends, followers, private messages or insights, and we do not read anything outside what you approved. We also keep a one-way coded form of the ID that Facebook or Instagram gives you for our app, so that we can find and delete your data when you remove our app (we do not keep the ID itself).

What we do with it. Profile details and the photos you choose are used only to build your website preview. In Conexity Studio, we publish a post to your Page or Instagram account only when you have approved that post and scheduled it. We never post, comment, message or change anything on your accounts on our own. We do not sell this data, and we do not use it for advertising.

Access keys. When you connect Instagram or a Facebook Page for a website preview, the access key Instagram or Facebook gives us is used once to read your profile and photos, and then discarded; we do not keep it. When you connect Facebook for Conexity Studio, the access key is stored encrypted on our servers, used only to list your Pages and to publish the posts you approved and scheduled, and deleted when you disconnect or remove our app. Photos you did not choose for your preview are deleted from our servers within 30 days.

Deleting your data. You can disconnect at any time in Conexity Studio settings, or remove Conexity in your Facebook or Instagram settings (Settings > Apps and websites). When you remove our app, Facebook or Instagram tells us automatically and we delete what we hold from that connection straight away: the stored access key, the Page or Instagram account you connected, and the profile details and photos imported for a website preview you have not purchased. You can see the result on the status page linked from the confirmation code we return to Facebook or Instagram. You can also email hello@conexity.com.au with the subject "Delete my Facebook/Instagram data" and the name on your profile; we will delete the connection, access keys and imported profile data within 30 days and confirm by email, unless we must keep something by law. Photos you chose to put on a website you purchased remain part of that website until you ask us to remove them.

10. Changes

We may update this Privacy Policy from time to time. Where a change is material, we will post notice on this page at least 14 days before it takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

Version 2.2 (28 October 2026) adds section 9A on connecting your Instagram or Facebook account (for a website preview or for Conexity Studio): what we read, how we use it, the access keys, and automatic deletion when you remove our app. Section 9 now also explains deletion requests sent through Facebook or Instagram.

Version 2.1 (26 October 2026) describes more fully how we already handle information: business details from public sources and customer content (section 2), handling enquiries on behalf of the businesses that use our services and direct marketing to businesses (sections 3 and 4), the overseas providers we use (section 5), our 30-day complaint response (section 6) and the automatic greeting on Messenger and Instagram (section 9). It removes wording about matching enquiries to brokers by territory, which we no longer do.

Version 2.0 (26 October 2026) added the Meta advertising disclosures in sections 2, 3, 4, 5, 7 and 8, and section 9 on Facebook and Instagram messages and how to delete them. Meta advertising tracking will not be switched on earlier than 14 days after this version was published.

11. Contact