How Frontlatch handles personal information.

Frontlatch is operated by BuildABusiness Pty Ltd, ABN 29 653 210 130, Sydney NSW. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Privacy questions and requests go to [email protected] with “Privacy” in the subject.

People who send a request through AI

The name, an email address or phone number, the job description, the suburb, an optional postcode and an optional preferred time. If an owner has switched sign-up on, a sign-up sends the name, email and chosen plan to that business. A password or card number is never sent through us.

Business owners

Your email address, your password (stored only as a salted hash), your Google account id if you sign in with Google, the businesses you claim and how you proved it, the address where you want job cards, and the replies and quotes you send. If you pay us, Stripe holds your card; we keep only the Stripe customer and subscription ids.

Partners

Agency name, website, contact name, email, number of client sites and the platforms you use, from the partner application.

Scan requests

The domain you ask us to scan and the email address you give for the report. With each scan started on frontlatch.com we also keep where you first came from: the address of the page that linked here (the site and page only, plus any campaign tags in that link), the page you landed on and when.

The business index

Information businesses publish about themselves, including sole traders: business name, website, category, location and published contact details, gathered from the business’s own site, OpenStreetMap and Common Crawl. A business can claim, correct or remove its listing.

Visitors to frontlatch.com and to sites running the Tracker

On frontlatch.com we set a sign-in cookie, a campaign cookie and a first-visit cookie (see cookies). We use your IP address briefly to limit repeated sign-in and code attempts; we do not store it. The Tracker on a business’s site records browser signals such as the user agent, the page path and the referring site, and never your IP address, a cookie or anything typed into a form.

• To pass a request to the business it is for, and to carry the business’s answer back.
• To run accounts, verify that a claim is genuine and keep the console secure.
• To build and keep up to date the business index that AI searches.
• To send scan reports, sign-in codes, job cards and the account emails you asked for.
• To follow up a scan request, by email, at the address given for the report.
• To bill, pay partner shares and meet our tax obligations.
• To tell agent traffic from human traffic for the businesses that install the Tracker.

If your business is in our index and you have not claimed it, we collected its details ourselves. We did that to help people find it and to pass on requests from AI assistants.

• What we hold: business name, website, category, suburb and the contact details you published.
• Where it came from: your own website, OpenStreetMap and Common Crawl.
• Who sees it: anyone searching the index, and the AI assistants they use.
• Your choices: claim it, correct it, or remove it. Removal is immediate and we keep a note so it is not added again.

You can also ask us to stop all messages to your business. Every email and text we send has a one-step link to do this, and we do not message that business again. Or write to [email protected].

When a customer asks an AI assistant to book a business we have not yet heard from, we send the business one message with the request, to the address or number it published. The message says who we are, why the business got it and how to stop further messages. We keep a list of businesses that opted out and check it before every send. Opting out also lets the customer know and releases any card hold on the request.

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected]; we answer within 30 days. A business can also remove its listing from its own page in the index.

If you have a complaint, tell us first and we will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.