Skip to main content
Topues

Legal

Privacy Policy

This policy explains what we collect, how we use it, and your rights. It is written to the Australian Privacy Act 1988 and the Australian Privacy Principles.

Last updated 19 April 2026.

About this policy

Topues AI Studio ("we", "us", "our") is a Melbourne-based studio that builds websites for small businesses across Australia. This policy applies to topues.com and to any project we deliver.

If anything here is unclear, email [email protected]. We'll reply in plain English.

What we collect

We collect only what we need to reply to you and run the business:

  • Contact details you send us — name, email, phone, business name, project type, budget range and the message itself.
  • Booking details you enter on our calendar (Cal.com).
  • Usage information — pages visited, referrer, device type. Collected in aggregate via privacy-respecting analytics.
  • Error diagnostics — error type, page URL, browser. Collected via Sentry to keep the site working.

We do not collect sensitive information. We do not sell data.

How we use it

We use your information to reply to enquiries, deliver projects we've agreed on, send invoices, keep the site working, and improve our services. We do not use it for unrelated marketing.

Cookies and tracking

The site uses a small number of cookies for essential functionality (preferences, consent state) and, only with your consent, for analytics. The banner on first visit lets you accept, reject, or manage your choice. You can change your choice at any time via the link in the footer.

Third-party processors

We use a small set of vendors to run the business. Each only receives what they need for their role:

  • Resend — transactional email delivery (enquiry notifications).
  • HubSpot — CRM record for enquiries and client communication.
  • Slack — internal notifications when an enquiry arrives.
  • Cal.com — booking calendar.
  • Sanity — content (blog posts) management.
  • Cloudflare — DNS, CDN, and Turnstile bot protection on forms.
  • Vercel — hosting.
  • PostHog + Google Analytics 4 — privacy-respecting analytics, only with your consent.
  • Sentry — error monitoring.

Some vendors process data outside Australia. We review their privacy posture before use.

Your rights

Under the Australian Privacy Principles you have the right to:

  • ask what personal information we hold about you
  • ask us to correct information that is wrong
  • ask us to delete your information where we have no legal reason to keep it
  • make a complaint about how we've handled your information

To exercise any of these, email [email protected]. We reply within a reasonable time, usually within a few business days.

If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Security

We use HTTPS, modern hosting, access control, and vendor selection to protect your information. No system is perfectly secure — we'll tell you promptly if something material happens.

Changes to this policy

If we update this policy we'll update the "last updated" date at the top. Material changes will be announced on the homepage or via email where appropriate.

See also our Terms of Service.