Fitzsimmons Automation Privacy Policy

Last updated: 14 July 2026

Who we are

Fitzsimmons Automation (Australia) provides an SMS assistant service for Australian trade businesses. Questions or requests about this policy or your data: georgefitz086@gmail.com.

The information we handle

To run the service we handle three kinds of information:

• Business account information - the details a business owner gives us when we set up their assistant: business name, owner name, mobile number, working hours, service area, prices they choose to publish, and their Google review link.
• Customer communications - phone numbers, SMS messages and missed-call records between a business's customers and that business's assistant number, carried by our telephony provider (Twilio). This is the material the assistant needs to reply, follow up quotes, and book jobs.
• Google user data - only if the business owner connects their Google Calendar. Detailed in the next section.

Google user data (Google Calendar)

Connecting Google Calendar is optional. If a business owner connects it, the service requests two Google OAuth scopes and uses them for exactly the following:

• Calendar free/busy (read-only scope): before offering a booking time to a customer, the assistant queries the calendar's free/busy information to check which times are already busy, so the assistant never double-books the owner. We query busy intervals only. We do not read, display or store the titles, descriptions, locations or attendees of the owner's events.
• Calendar events (events scope): when the assistant books, moves or cancels a job, it creates, updates or deletes the corresponding calendar event that it created itself (identified by event IDs derived from our own booking records). It never modifies events it did not create.

What we store: an OAuth refresh token, encrypted at rest with AES-256-GCM, and the IDs of the events the assistant itself created. We do not store the contents of the owner's calendar.

What we derive: the assistant uses free/busy information only to compute which appointment windows are open. Those derived open windows (never raw calendar data or event contents) are processed by our AI provider solely to compose the booking messages the owner's customers see - that is the user-facing feature the calendar connection exists for.

In plain terms: Google user data is used only to provide the booking features described above. It is not sold, not used for advertising, not used to determine credit-worthiness or for lending, not used to develop, improve or train generalised artificial-intelligence or machine-learning models, and not read by humans except with the owner's explicit consent for support, or where necessary for security or to comply with law.

Service providers

We use a small set of processors to run the service: Twilio (SMS and voice), Supabase (database hosting), Vercel (application hosting), Google (calendar integration, at the owner's choice) and Anthropic (the AI that composes the assistant's messages; it does not train on this data). Each receives only what it needs to perform its function.

Retention and deletion

• A business owner can revoke the assistant's calendar access at any time from their Google Account security settings, or by contacting us - we then delete the stored token.
• When a business leaves the service, its number is released and automation stops; stored tokens are deleted. Business records and message history are deleted on request.
• Customers can stop all messages at any time by replying STOP - this is honoured immediately and recorded, as required by the Australian Spam Act 2003.

Security

OAuth tokens are encrypted at rest (AES-256-GCM). All traffic uses TLS. The database enforces row-level security with no public access, verified by an automated daily audit. Access to production systems is limited to the operator.

Changes and contact

If this policy changes materially we will update this page and its date. Contact for anything in this policy, including data access or deletion requests: georgefitz086@gmail.com.