Privacy policy
Last updated 14 October 2026
This policy explains how Peak State Global (we, us) handles personal information in Convo, the tool Andrew Ramsden uses to book and hold conversations. It covers the booking pages at convo.peakstate.global and the record of each conversation. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
What we collect
- Booking details. Your name and email address, and, if you give them, your organisation, your role and what prompted you to book. We also keep the time you chose, your time zone and the code of the link you used (for example, the event where we met).
- The conversation record. When Andrew records a conversation, he tells you at the start. The record holds the transcript, Andrew’s preparation notes, the actions and commitments either of you made, facts you chose to share (such as a goal or a project), and a written summary.
- Audio recordings. When Andrew records a conversation that convo did not capture live (a phone call or a meeting in person), he tells everyone at the start, and convo stores the audio file in private storage in Sydney. Convo keeps the audio only until it has made the transcript from it, then deletes it. If making the transcript fails, convo keeps the audio to try again. Andrew can delete a recording at any time, and deleting it removes the audio at once.
- Public information about you. Before a sales or networking conversation, convo searches the public web for your name, organisation and role, and keeps short facts about your work (your role, your employer, your organisation’s news, things you published, talks and awards), each with its source and date. It never keeps anything about health, politics, religion, family or sexuality, and never reads pages behind a login or a paywall. Andrew can delete any fact.
- Technical data. The booking form checks that you are a person with Cloudflare Turnstile. To stop abuse, we count booking attempts per hour against a one-way hash of your IP address and email address. Each count is deleted within 10 minutes after its hour ends, so a hash is kept for at most 70 minutes. Error reports hold technical details only, never your answers or the transcript.
We use cookies only to run the booking pages. We do not use advertising or tracking cookies.
How we use it
- to book, confirm, remind you of, reschedule and cancel the meeting;
- to prepare for the conversation and to follow up afterwards;
- to help Andrew during the conversation, for example to keep track of questions and commitments;
- to keep the service secure and to fix faults.
We do not sell personal information, and we do not use it for advertising.
AI processing
Convo uses AI models to organise the transcript and preparation notes, to prepare for the conversation and to draft summaries. Every model call that reads your words (the transcript, your booking answers, notes, the preparation and the coaching after the call) goes only through providers that do not keep them after the request (zero data retention). The public-web search is different: it sends only your name, organisation and role, through OpenRouter to the search provider Exa, and both handle that search under their own retention terms, not zero data retention. Andrew checks what the AI produces; it can be wrong.
Who we share it with
We share personal information only with the services that run Convo, and only so that they can run it:
- Supabase, which stores the data in Sydney, Australia;
- Vercel, which hosts the web pages;
- Google, for the calendar invitation and the video call;
- Resend, which sends the booking emails;
- Cloudflare, for the person check on the booking form;
- Sentry, for error reports with your words removed;
- OpenRouter and the AI providers it routes to, under zero data retention for anything that reads your words;
- OpenRouter and Exa for the public-web search, which carries only your name, organisation and role, under their own retention terms;
- Google Drive, which holds the database backups.
Andrew may keep notes from selected conversations in his own private knowledge base, which no one else can read. We may also disclose information when the law requires it.
Overseas disclosure
The database is in Australia. Some of the services above process data outside Australia, mainly in the United States. We take reasonable steps to make sure they handle it consistently with the APPs.
Security
Data is encrypted in transit, and access is limited to Andrew. No system is fully secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.
How long we keep it, and deletion
We keep a booking and its conversation record until Andrew deletes the conversation or you ask us to delete it. A deleted conversation stays in the recycle bin for 30 days unless Andrew empties it, so a mistaken delete can be undone. Then Convo removes its audio recordings, its transcript, the record of what happened in it, the notes and everything made from them from the live database. A conversation with a meeting that has not happened yet cannot be deleted until that meeting is cancelled, and Google tells you of the cancellation.
Until Google has been told about that cancellation, we keep the booking itself: the meeting time, your time zone, the link code, the calendar event’s id, your name and email address, and a link to your contact record. Convo tries up to 3 times and deletes the booking as soon as Google has answered, or after the last try fails.
Deleted data leaves our backups when they age out. We keep 7 daily, 8 weekly and 12 monthly backups, so deleted data is gone from every backup within 12 months. We do not restore deleted data from a backup except to recover from a fault, and then we delete it again.
Your contact record stays after a conversation is deleted. It holds your name, email address, organisation and role, the link code of your first booking, how well Andrew knows you, Andrew’s notes about you, and facts from your other conversations. We keep it until you ask us to delete it, and then we delete all of it.
Access and correction
You can ask to see or correct the personal information we hold about you, or to have it deleted. Email andrew@peakstate.global. We answer within 30 days.
Complaints
Contact us first at andrew@peakstate.global. If you are not satisfied with our answer, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
Children
Convo is for adults. We do not knowingly collect information from anyone under 18.
Changes
We may update this policy. The date at the top shows the latest change.