What we do with your data.

Who we are.

whatcould.ai is a two-person consultancy based in Australia. When you fill in a form on this site, send us an email, or book a call, you're talking to us directly - Finn and Max. There is no "team," no ticket queue, no automated funnel.

What we collect.

We only collect the information you actively give us, plus a bare-minimum layer of analytics to understand how the site is being used.

• Form submissions - name, business name, email, and the answers you provide in the operational audit or booking flow. Stored securely, seen only by us.
• Emails - the content of any email you send to [email protected], held in our inbox for as long as it's useful to the conversation.
• Site analytics - anonymised page views, referrer, country, browser. No personal identifiers, no third-party ad networks, no session recording.

Why we collect it.

• To reply to you.
• To prepare properly for a call or an audit response.
• To understand which parts of the site are actually useful, so we can improve them.

We do not sell your data. We do not share it with anyone outside the tools listed below, and we do not use it to build advertising audiences.

Who we share it with.

The only third parties who see any of your data are the tools we use to run the business:

• Google Workspace - for email and document storage.
• Cloudflare - for site hosting and delivery.
• Tally / Calendly / Make (or their successors) - for form submissions and scheduling.
• Anthropic - for AI-assisted drafting when preparing your audit response. Your data is not used to train their models.

Each of these providers has its own privacy commitments. We choose them because they take data protection seriously.

Your rights.

You can ask us at any time to:

• See what data we hold about you.
• Correct anything that's wrong.
• Delete it entirely.

Email [email protected] and we'll action it within a business day.

Cookies.

We use a small handful of essential cookies to keep the site working - session state, form progress, that sort of thing. No advertising cookies, no cross-site tracking. If your browser blocks them, most of the site still works fine.

Questions.

If any of this is unclear, or you want to know something specific about what happens to your data, just ask. [email protected] - one of us will reply.