Legal
Last updated: 26 March 2026 (v2.1)
This document should be reviewed by a qualified legal professional. It is provided as a framework and may require adjustments to suit specific legal requirements.
This Privacy Policy explains how Slok Studios Pty Ltd (ABN 12 616 136 871), trading as FlowWorks ('we', 'us', 'our'), collects, uses, discloses, and safeguards your personal information. We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Spam Act 2003 (Cth). Our registered address is 470 St Kilda Rd, Melbourne VIC 3004, Australia. This policy applies to all interactions with our website at flowworks.com.au, our services, our AI tools, our voice AI systems, and any other contact you have with us. By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
We collect different types of personal information depending on how you interact with us. Website visitors: When you browse our website, we automatically collect analytics data through Google Analytics 4 (GA4) and Microsoft Clarity, including your IP address, browser type and version, device type, operating system, pages visited, time spent on pages, referring website, and general geographic location. Quiz submissions: When you complete our Free AI Audit, we collect your name, email address, company name, phone number, audit responses, and your calculated readiness score. Contact form submissions: When you submit our contact form, we collect your name, email address, company name, phone number, and your message. Voice AI calls: When you interact with our Voice AI system, we collect your phone number, call recordings, call transcripts, call duration, and the content of your conversation. Client engagements: During service delivery, we may access business data within your systems, including data in your accounting software, CRM, email platform, and other business tools relevant to the engagement. Access to this data is governed by our separate Service Agreement. Payment information: Payment processing is handled by third-party payment providers. We do not store credit card details, debit card details, or other sensitive payment information on our servers. We may retain records of transaction amounts, dates, and invoice references for accounting purposes.
We collect information through the following means. Directly from you: When you fill in forms on our website, contact us by email or phone, complete our Free AI Audit, book a meeting through our scheduling tool, or engage us for services. Automatically via cookies and tracking technologies: When you visit our website, cookies and similar technologies collect analytics and usage data. See section 7 for details on our cookie practices. From third-party integrations: When you engage our services, we may receive information from third-party platforms that you authorise us to connect to, such as your CRM, accounting software, or other business platforms. From publicly available sources: We may collect business information that is publicly available, such as information on your company website or public business directories.
We use the personal information we collect for the following purposes. To respond to your enquiries and requests submitted through our website, email, phone, or Voice AI system. To deliver our services, including AI consulting, automation implementation, AI Employees, Private AI, workflow design, and related services as agreed in our Service Agreement. To send you your AI readiness score, personalised report, and relevant recommendations following audit completion. To improve our website, services, and user experience based on analytics and feedback. To comply with our legal obligations under Australian law, including the Privacy Act 1988, tax laws, and other applicable legislation. To send marketing communications about our services, industry insights, and relevant updates. We will only send marketing communications where you have provided consent or where we have a reasonable basis to believe the communications are relevant to you. You may unsubscribe from marketing communications at any time. To maintain records for accounting, audit, and business administration purposes. To protect our rights, property, and safety, and the rights, property, and safety of our users and the public.
FlowWorks uses artificial intelligence and automation to deliver better outcomes for our clients. We believe in being transparent about how AI is used, what data it processes, and what safeguards are in place. Your data is never sold, never used to train AI models, and never shared beyond what is necessary to deliver the service you engaged us for. How AI supports our services: AI systems help us analyse workflows, identify automation opportunities, generate recommendations, build automations, deploy AI Employees and Private AI systems, and deliver insights. These tools allow us to work faster and more accurately on your behalf. AI service providers we use: We work with established AI providers including Anthropic (Claude), Google (Gemini), and Vapi (Voice AI). Our telephony is provided by Twilio. These providers process data in accordance with their own privacy policies and data processing agreements. Data may be processed in the United States and Australia. We select providers based on their security practices, data handling policies, and compliance standards. Data minimisation: We only process the minimum amount of data necessary to deliver the service. We do not send your entire database to an AI provider. We send only the specific data points relevant to the task at hand. Data processed in transit: Client data processed through AI systems is processed in transit for the purpose of generating outputs. We do not permanently store your business data on our servers. Your data remains within your own systems and platforms. No AI model training: Your data is never used to train AI models. The AI providers we use do not train their models on data submitted through their API services. Human oversight: All AI outputs are reviewed by our team before being actioned or delivered to clients. AI-generated content, recommendations, and analysis are advisory in nature and are always subject to human review and approval. Voice AI: Calls handled by our Voice AI system are recorded for quality assurance and accurate information capture. Recordings may be reviewed by our team. Call transcripts may be generated using AI transcription. Recordings are retained for 90 days and then permanently deleted. Private AI: Where we deploy Private AI systems on your premises, your data remains entirely within your own infrastructure. Private AI data is not transmitted to FlowWorks servers or any third-party cloud service. All processing occurs locally on hardware you control. FlowWorks may access your systems during setup and support, but only with your authorisation and under the terms of our Service Agreement.
In accordance with the Privacy Act 1988 (Cth) and upcoming amendments effective December 2026, we provide the following transparency about how AI assists with decisions related to your personal information. AI-assisted processes at FlowWorks: Free AI Audit scoring: When you complete our audit, your responses are scored using a predefined algorithm to generate your AI readiness score and personalised recommendations. The scoring logic is rule-based and does not use machine learning on your personal data. Your score is calculated from your answers alone. Voice AI call handling: Our Voice AI system uses natural language processing to understand your enquiry, provide relevant information, book appointments, and route calls. The AI responds based on pre-configured business rules. If the AI cannot confidently handle your request, it escalates to a human team member. Lead prioritisation: We may use your audit score and enquiry details to prioritise follow-up communications. This helps us respond to the most urgent or relevant enquiries first. This does not affect your access to our services. Workflow analysis: During client engagements, AI assists in analysing your business workflows to identify automation and AI Employee opportunities. The analysis is always reviewed and validated by our consulting team before any recommendations are made. None of these processes make solely automated decisions that have legal or similarly significant effects on you. Every recommendation, report, and action is reviewed by a human member of our team. Your right to human review: You have the right to request human review of any AI-assisted decision or output that affects you. To request human review, contact us at ops@flowworks.com.au. We will respond within 14 days. How our AI systems work: Our AI systems process text and voice inputs using large language models to generate relevant outputs. They work by identifying patterns in language to understand your request and generate a helpful response. They do not profile you, build behavioural models about you, or make predictions about your future behaviour.
We do not sell your personal information. We may share your information with the following categories of third-party service providers for the purposes described in this policy. Website analytics and usage tracking providers Session recording and heatmap providers Customer relationship management (CRM) platforms Transactional email delivery services Meeting scheduling and booking platforms AI language model providers for service delivery Voice AI and telephony service providers Website hosting and deployment platforms We may also share your information with professional advisors (such as accountants and lawyers), regulatory authorities when required by law, and any successor entity in the event of a business sale, merger, or restructure. All third-party providers are selected with regard to their data handling practices. However, we are not responsible for the privacy practices of third-party services, and we encourage you to review their privacy policies.
Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us understand how you use our website. Essential cookies: These cookies are necessary for the website to function correctly. They enable core features such as page navigation and access to secure areas. These cookies do not require your consent. Analytics cookies: We use analytics and session recording tools to collect anonymised data about how visitors use our website. These cookies are placed with your consent and help us understand traffic patterns, popular pages, and user behaviour. Marketing cookies: Where applicable, marketing cookies may be used to deliver relevant advertisements and track campaign performance. These cookies are placed with your consent. Managing cookies: You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling cookies may affect the functionality of our website. You can manage your analytics preferences through your browser settings or through the cookie consent banner on our website.
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Data is stored in Australia where possible. However, some of our third-party service providers may process and store data in the United States or other overseas locations. By using our website and services, you consent to the transfer of your data to these jurisdictions. Our security measures include encrypted connections (SSL/TLS) for all data transmitted through our website, access controls limiting data access to authorised personnel only, regular security reviews and updates of our systems and processes, and secure authentication for all business tools and platforms. While we take all reasonable precautions, no method of data transmission or storage is completely secure. We cannot guarantee the absolute security of your information.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form and audit submissions: Retained for up to 2 years from the date of submission, unless you request earlier deletion. Client project data: We do not retain client business data after the completion of an engagement. All data remains within your own systems and platforms. Voice AI recordings and transcripts: Retained for 90 days from the date of the call, after which they are permanently deleted. Analytics data: Retained in accordance with the default retention settings of our analytics providers. Accounting and financial records: Retained for 7 years as required by Australian tax law. When personal information is no longer required, we will take reasonable steps to destroy or de-identify it.
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights in relation to your personal information. Access: You have the right to request access to the personal information we hold about you. We will respond to your request within 30 days. Correction: You have the right to request that we correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. Deletion: You may request that we delete your personal information where it is no longer needed for the purpose for which it was collected. We will comply with your request unless we are required by law to retain the information. Withdraw consent for marketing: You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly. Complain to the OAIC: If you believe we have breached the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. We encourage you to contact us first so that we can attempt to resolve your concern. To exercise any of these rights, please contact us at ops@flowworks.com.au.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information as soon as practicable. If you believe we may have collected information from a child under 16, please contact us at ops@flowworks.com.au.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the 'Last updated' date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact us. Email: ops@flowworks.com.au Business name: Slok Studios Pty Ltd trading as FlowWorks ABN: 12 616 136 871 Address: 470 St Kilda Rd, Melbourne VIC 3004, Australia We will respond to your enquiry within 30 days.