Privacy Policy
Plain Street AI, being operated by FastMovingWater (ABN 52 389 335 280) ("we", "us"), respects your privacy. This policy explains how we handle personal information, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. What we collect
- Clients and prospects: name, business name, role, email, phone, postal address, billing and payment details, and the content of our communications with you.
- Information in client systems: in delivering our services we may access personal information held by our clients about their own customers, staff or contacts.
- Website visitors: IP address, browser and device information, pages visited, and any details you submit through forms. We use cookies and analytics tools to understand website use.
We do not collect sensitive information unless you provide it voluntarily and it is reasonably necessary for our services.
2. How we collect it
Directly from you by email, phone, meetings, our website, and during service delivery. Occasionally from public sources such as company websites, LinkedIn or the ABN Lookup, or from referrals.
3. Why we collect it
To provide and quote for our services, communicate with you, manage projects, invoice and collect payment, meet our legal and record-keeping obligations, and (where you have not opted out) send you updates about our services. You can unsubscribe at any time.
4. Disclosure
We disclose personal information to:
- our staff and contractors, under confidentiality obligations;
- service providers who support our business, including cloud hosting, email, accounting, CRM and AI or software vendors;
- your nominated advisers, where you ask us to; and
- others where required or authorised by law.
We do not sell personal information.
5. Overseas disclosure
Some providers we use store or process data outside Australia, including in the United States and the European Union. We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs.
6. Client data and AI tools
Where we access or process personal information on behalf of a client, we do so only for the purpose of delivering the agreed services and in accordance with our agreement with that client. The client remains responsible for that information under the Privacy Act.
We use third-party AI and automation tools in delivering our services. Where we do, we take reasonable steps to select tools with appropriate security and data-handling terms, and we do not permit client data to be used to train third-party models unless the client has agreed in writing.
7. Security and retention
We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including access controls, encryption in transit and storage with reputable providers. We keep personal information only as long as needed for the purposes above or as required by law, then destroy or de-identify it.
8. Access, correction and complaints
You can ask us for access to, or correction of, the personal information we hold about you. Contact us at the details below. We will respond within 14 days. If we refuse, we will tell you why.
If you think we have breached the APPs, contact us first. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
9. Contact
We may update this policy. The current version is always available.
Last updated: 20 August 2026.