// privacy
Privacy policy
Last updated 1 November 2026.
Live in Five ("we", "us") builds and looks after custom software for small businesses. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and your rights. We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and, for visitors in the UK and EU, the GDPR.
Summary
- We only collect what we need to reply to you, scope your build and run your account.
- We don't sell your information, and we don't add you to a mailing list.
- We use AI to suggest a scope from what you type. A person reviews every scope before anything is agreed or charged.
- Some of our service providers are overseas (mainly the United States).
- You can ask to see, correct or delete your information at any time: hello@liveinfive.ai.
What we collect
When you send an enquiry or a scope: your name, business name, email, phone number (optional), how you handle the work today, and anything you write in the message or notes. From the scope builder we also receive your idea, your answers to our questions, the features in your scope, and the screen-flow chart we showed you.
When you become a client: contact and billing details, the signed points sheet and agreement, our emails and messages, and notes from calls. With your agreement, we may record and transcribe scoping and training calls (see Calls and recordings).
Payments: card and bank details are entered directly with our payment provider, Stripe. We don't see or store your full card number.
Automatically, when you use the site: technical information such as your IP address, approximate location (country), browser and device type, and the pages and features you use. We use your country to show prices in a sensible currency, and your IP address to limit repeated submissions (spam protection).
Where your visit came from: the website or ad that sent you (the referring site, campaign tags such as utm_source, and ad click IDs from Meta, LinkedIn or Google if present in the link) and the page you landed on. If you send us an enquiry or a scope, this is included with it so we know which of our advertising is working.
Information about other people: if you describe your own customers or staff in an enquiry, please keep it general. We don't need their personal details to scope a build.
We don't ask for sensitive information (such as health information), and please don't send it to us.
How we collect it
Directly from you: through the forms on this site, by email, on calls and through the scope builder. Some technical information is collected automatically by our hosting provider, Cloudflare, when your browser loads the site.
You can browse the site without giving us any personal information. If you'd rather not use your name when asking a general question, you can, but we'll need contact details to reply and real details to take you on as a client.
Why we use it
- To reply to your enquiry and book a scoping call.
- To prepare your points sheet, agree your scope, and build, host and support your software.
- To bill you, keep business and tax records, and meet our legal obligations.
- To protect the site and our services from spam, fraud and misuse.
- To improve how we scope builds. For example, we compare what the scope builder suggested with the scope we finally agreed, so our suggestions get better.
We won't use your information for anything else unless you'd reasonably expect it, you agree, or the law requires or allows it.
AI and automated suggestions
The scope builder uses AI models running on Cloudflare's network (Cloudflare Workers AI) to work out which questions to ask, suggest which features your app needs, and describe how the screens fit together. To do this, the AI receives your idea, your answers and the features selected. It doesn't receive your name or contact details.
These are suggestions only. Our own code works out points and budgets, and a person reviews every scope with you before anything is agreed or paid for. No decision about you, such as whether we take you on or what you pay, is made by AI or any other automated process alone.
If we use AI to help prepare a points sheet from a call transcript, a person reviews that too.
Calls and recordings
We only record or transcribe a call if you agree. We'll ask in the booking confirmation and again at the start of the call, and you can say no, or ask us to stop, at any time. Recordings and transcripts are used only to prepare and check your scope and to support your build. They may be processed by AI tools (as above) and are deleted when no longer needed for that.
Cookies and browser storage
- Currency cookie (
lif_currency): remembers the currency you chose, for up to 12 months. - Scope builder progress: kept in your browser's session storage so you don't lose your place. It stays on your device and is cleared when you close the tab.
- Where your visit came from: kept in session storage for the visit (see above), and cleared when you close the tab.
We don't use advertising or tracking cookies.
Analytics
We use PostHog to understand how people use the site: which pages they visit, where they came from, and how far they get through the scope builder (for example, which step they reach, whether they used an example, and how many points their scope came to). We use it in a cookieless mode: it sets no cookies and stores nothing on your device. Instead, PostHog derives a temporary, privacy-preserving identifier on its servers so it can count visits.
We don't send analytics your name, email, phone number or the text you type (such as your idea or messages). Analytics data is sent through our own website address and processed by PostHog in the United States. We don't use advertising pixels or tracking cookies on this site.
Measuring our Meta advertising
If you arrive by clicking one of our ads on Facebook or Instagram and then send us an enquiry or a scope, our server tells Meta that a lead came from that ad. This lets Meta measure which ads work and show them to people more likely to be interested. We send Meta:
- the ad click ID that Meta added to the link you clicked;
- your email address, phone number and name, hashed first (converted into a one-way code, so Meta can only match it to an account it already knows and can't read it);
- your country, IP address and browser type; and
- the type of lead (enquiry or scope) and the campaign.
We don't send this for visitors who didn't come from a Meta ad, and we never send your message, your idea or your scope. Meta handles this information under its own terms and privacy policy, and may process it in the United States and Ireland.
Who we share it with
We share personal information only with service providers who help us run the business, and only what they need. They handle it under their own privacy and security terms:
- Cloudflare: website hosting, security, form processing, email delivery and the AI models used by the scope builder.
- PostHog: website analytics (see Analytics).
- Meta: measuring our Facebook and Instagram ads, for visitors who came from them (see Measuring our Meta advertising).
- Our email and calendar provider: our business inbox and scheduling.
- Our video-call provider: scoping and training calls, and recordings and transcripts if you agree.
- Stripe: card payments and subscriptions.
- Xero: invoicing and bookkeeping.
- Professional advisers: our accountant and lawyers, when needed.
We may also disclose information if the law requires it, or to protect our rights or someone's safety. We never sell personal information.
Overseas disclosure
Several of these providers store or process information outside Australia. That mainly means the United States, and also other countries where they run data centres (Cloudflare operates a global network, so a request may be handled in the data centre nearest you). Before using an overseas provider, we take reasonable steps to make sure it protects personal information to a standard consistent with the APPs, usually through its contractual and security commitments.
The software we build for you
When we build and host an app for your business, you decide what information goes into it, including information about your customers and staff. We handle that information only to build, host, back up, support and secure your app, as set out in our agreement with you. We don't use it for anything else, and we don't use it to train AI models. You're responsible for telling your own customers and staff how you use their information.
How we keep it secure
We use reputable providers, encrypted connections (HTTPS), strong unique passwords with two-factor authentication on our accounts, and access only on a need-to-know basis. Our server logs deliberately leave out your contact details. No system is perfectly secure, so if we become aware of a data breach that's likely to cause serious harm, we'll tell the people affected and the Office of the Australian Information Commissioner (OAIC), in line with the Notifiable Data Breaches scheme.
How long we keep it
- Enquiries and scopes that don't go ahead: up to 2 years, so we can pick up where we left off if you come back, then deleted.
- Client records: for the life of our agreement, then as long as tax and business law requires (generally 5 to 7 years).
- Call recordings and transcripts: until your build is live and signed off, unless you ask us to delete them sooner.
- Technical logs: a short period (days to weeks), for security and troubleshooting.
- Analytics: kept in PostHog for the retention period of our plan, and no longer than 2 years.
When we no longer need information, we delete or de-identify it.
Marketing
We don't run a mailing list. We'll only contact you about your enquiry or your account. If we ever send marketing emails, it will only be with your consent, and every one will have an easy way to unsubscribe.
Accessing and correcting your information
You can ask to see the personal information we hold about you, or ask us to correct or delete it, by emailing hello@liveinfive.ai. We'll respond within 30 days and won't charge you for the request. If we can't do what you ask (for example, because we have to keep tax records), we'll explain why in writing.
Visitors in the UK and EU
If you're in the UK or EU, the GDPR gives you the right to access, correct, delete, restrict or object to our use of your information, and to receive a copy in a portable format. We rely on these legal bases: taking steps at your request before entering a contract, and performing that contract (enquiries, scoping and client work); our legitimate interests (keeping the site secure, improving our scoping, and measuring our advertising, which you can object to at any time); legal obligations (tax records); and your consent (call recordings, which you can withdraw at any time). Information is transferred to Australia and to our providers in other countries using the safeguards those providers offer, such as standard contractual clauses. You can also complain to your local data protection authority (in the UK, the ICO).
Questions and complaints
If you have a question or a complaint about how we've handled your personal information, email hello@liveinfive.ai and tell us what happened. We'll acknowledge it within 5 business days and aim to resolve it within 30 days.
If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, phone 1300 363 992.
Changes to this policy
We'll update this policy when our practices change, and show the date of the latest version at the top. If a change materially affects how we use information you've already given us, we'll tell you.
Contact
Live in Five · Australia
hello@liveinfive.ai