Effective date: 29/06/2026 · Last updated: 29/06/2026

1. Introduction

This Privacy Policy explains how Kaelan Taeni, trading as Echocast (ABN 61 398 670 220) ("Echocast", "we", "us", "our"), collects, uses, holds, discloses, and protects personal information.

We are committed to protecting your privacy and handling personal information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act"), the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), the Do Not Call Register Act 2006 (Cth), and other applicable Australian laws.

By using our website, engaging our services, or otherwise providing us with personal information, you acknowledge that you have read and understood this Policy.

2. About Echocast and the scope of this Policy

Echocast provides AI-powered receptionist, communication, and marketing-automation services to businesses, which may include AI voice call answering, automated and AI-voice outbound calling, SMS messaging and automation, appointment booking, customer review requests, website design and related services.

This Policy applies to:

• Visitors to our website;
• Prospective and current clients who engage or enquire about our services; and
• End customers of our clients, whose information we may handle when operating services on a client's behalf.

Two roles. In some cases we collect and use personal information for our own purposes (for example, information about our clients), here we act as the entity responsible for that information. In other cases we handle personal information on behalf of a client (for example, an end customer who calls a phone number we operate for that client), here we act as a service provider, and the relevant client is primarily responsible for that information. Section 12 explains how we handle information processed on behalf of clients.

3. What is personal information

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in a material form or not. "Sensitive information" is a subset of personal information that has additional protections (for example, government identifiers and certain identity documents).

4. The personal information we collect

Depending on your interaction with us, we may collect:

• Identity and contact information: name, business name and role, email address, phone number(s), and postal or business address.
• Business information: details about your business operations provided during onboarding, such as services, hours, pricing, frequently asked questions, calendars, and customer-handling preferences.
• Identity and registration documents (sensitive information): where required to register or operate a telephone number on your behalf, documents such as business registration records (for example, ABN registration records or company extracts), proof of address (such as utility bills, rates notices, tax notices, or leases), and government-issued photo identification (such as a driver licence or passport). We collect these only where necessary and with your consent.
• Communications data: records, logs, metadata, transcripts, and where applicable recordings of calls and messages handled through our systems, including content of SMS and call interactions.
• Customer/contact lists: where you provide lists of your customers or contacts for us to process (for example, for review requests or follow-up), including their names and contact details.
• Payment and billing information: billing details and transaction records. Card payments are processed by our third-party payment provider; we do not store full card numbers.
• Technical and usage information: IP address, device and browser information, pages visited, and interactions with our website, collected through cookies and analytics tools (see Section 9).
• Any other information you choose to provide to us.

5. How we collect personal information

We collect personal information:

• Directly from you: through forms, onboarding, calls, emails, messages, and other communications;
• Automatically: through our website, cookies, analytics, and our service systems;
• From our clients: where a client provides information (such as contact lists) for us to process on their behalf; and
• From end customers: where an individual interacts with a service we operate for a client (for example, by calling a number we manage), in which case we handle that information on the client's behalf.

Where reasonable and practicable, we collect personal information directly from the individual concerned. Where we collect information from a third party (such as a client's contact list), we rely on that party having the authority and any necessary consent to provide it.

6. Why we collect, hold, use and disclose personal information

We collect, hold, use, and disclose personal information for purposes including:

• providing, operating, setting up, and improving our services;
• registering and operating telephone numbers on your behalf with our telecommunications and number-registration providers;
• communicating with you about your account, enquiries, and our services;
• on a client's instruction, delivering communications (including calls and messages) to that client's customers;
• processing payments and managing billing;
• maintaining records and the security and integrity of our systems;
• understanding and improving website and service performance; and
• complying with our legal, regulatory, and contractual obligations.

We will only use or disclose personal information for the purpose for which it was collected, a directly related secondary purpose you would reasonably expect, or as otherwise permitted or required by law or with your consent.

7. Calls, messages and direct marketing

Our services include automated, pre-recorded, AI-voice, and SMS communications.

Where we communicate with you, we will only send marketing communications where permitted by law and you may opt out at any time (by replying STOP to messages, asking to opt out on a call, or contacting us at [email protected]).

Where we operate communications on behalf of a client, the client is responsible for ensuring valid consent has been obtained from each recipient under the Spam Act, the Do Not Call Register Act, and other applicable laws, and for the content of those communications. We act on the client's instructions.

Recording and logging. Calls and messages handled through our systems may be recorded, transcribed, or logged for service delivery, quality, training, troubleshooting, and record-keeping. Where calls are recorded, appropriate notification will be given as required by law.

8. Anonymity and pseudonymity

Where lawful and practicable, you may deal with us anonymously or using a pseudonym (for example, when making a general enquiry). However, we may be unable to provide our services or respond fully if we do not have sufficient information.

9. Cookies, analytics and tracking

Our website uses cookies and similar technologies, and may use analytics and advertising tools (for example, Google Analytics and Meta Pixel), to operate the site, understand usage, and improve performance. You can control or disable cookies through your browser settings, although some features may not function properly as a result.

10. Disclosure of personal information

We may disclose personal information to:

• Service providers and sub-processors who help us deliver our services, including our software/CRM platform, telecommunications and number-registration providers, AI and communications providers, hosting providers, analytics providers, and payment processors;
• Our clients, where we handle information on their behalf;
• Professional advisers (such as lawyers and accountants) where reasonably necessary;
• Authorities or other parties where required or authorised by law, or to protect our rights, safety, or property; and
• A successor entity in connection with a sale, merger, or restructure of our business.

We require our service providers to handle personal information consistently with this Policy and applicable law. We do not sell personal information.

11. Overseas disclosure

Some of our service providers may store or process personal information outside Australia, including in the United States and other countries where our providers operate. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs, except where an exception under the Privacy Act applies. By providing your information, you acknowledge that overseas recipients may be subject to different data-protection laws than those in Australia.

12. Information we process on behalf of clients

Where we handle personal information of a client's end customers in the course of operating services for that client:

• we act on the client's instructions and for the purposes of providing the service;
• the client is responsible for having appropriate notices and consents in place with its customers;
• we hold and secure that information in accordance with this Policy and our agreement with the client; and
• on termination or on the client's reasonable request, we will return or securely delete that information, except where we are required to retain it by law.

If you are an end customer and have a query about how your information is handled, please contact the relevant business directly; you may also contact us at [email protected] and we will direct your request appropriately.

13. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure, including measures such as access controls and authentication, secure storage, encryption in transit, restricted staff access, and supplier security requirements. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Handling of identity and registration documents

Where you provide identity or business-registration documents so we can register or operate a telephone number for you, we:

• collect only the documents reasonably necessary for that purpose;
• use them only to complete and maintain the relevant registration;
• store them securely and limit access to authorised personnel; and
• delete or de-identify them once the registration is complete or the documents are no longer required, unless we are required to retain them by law.

15. Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to provide our services, and to meet legal, accounting, and regulatory requirements. When no longer required, we take reasonable steps to destroy or de-identify it.

16. Accessing and correcting your information

You may request access to, or correction of, the personal information we hold about you by contacting us at [email protected]. We will respond within a reasonable period and in accordance with the Privacy Act. We may need to verify your identity before acting on a request. If we decline access or correction, we will explain why, except where the law provides otherwise. There is generally no fee to request access, though we may charge a reasonable cost for providing it.

17. Notifiable Data Breaches

We comply with the Notifiable Data Breaches scheme under the Privacy Act. If we become aware of an eligible data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

18. Children's privacy

Our services are directed to businesses and are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can address it.

19. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.

20. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us at [email protected]. We will acknowledge and investigate your complaint and respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

21. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on our website, with the "last updated" date shown above. Material changes will take effect when posted.

22. Contact us

For any privacy questions, requests, or complaints:

Kaelan Taeni, trading as Echocast
ABN 61 398 670 220
Email: [email protected]
Address: Northern Rivers, NSW, Australia