Privacy Policy
Last updated: 18 October 2026
This policy describes how aufintools handles personal information when you use the Natterback website and service for Australian trade businesses.
Who we are
aufintools (“we”, “us”) operates Natterback, a service that helps Australian trade businesses reply to Google reviews. We text you each new review with a draft reply, and you approve it by text or on our website. Contact: hello@natterback.com. Website: natterback.com. More about us: aufintools.com.
What we collect
- Sign-up: email address, mobile number, and a record of your consent to receive texts from us: when you gave it, the wording you agreed to, and that you confirmed your number with a code we texted you.
- Product use: Google Business Profile connection details, review and reply content needed to draft and post responses, billing details via Airwallex, and message delivery logs.
- Website analytics: usage data via Google Analytics and PostHog (for example pages viewed, device type, and how you interact with forms and buttons). Our analytics don't store your IP address. Our hosting and payment providers process IP addresses to deliver the site, protect it from abuse, and prevent fraud. You can control cookies through your browser settings.
- Communications: messages you send us (email or SMS replies such as “yes” or your own wording).
How we use information
- To set up your account, connect your Google Business Profile, and provide the service.
- To draft review replies, text them to you for approval (you can also approve them on our website), and post approved replies to Google on your instruction.
- To bill for subscriptions and provide support.
- To improve the service and keep it secure.
- To meet Australian legal obligations (including spam and privacy rules).
SMS and the Spam Act 2003
If you opt in to SMS, we record your consent (including a timestamp where available). You can opt out at any time by replying STOP or contacting us, and opt back in by replying START. We record when you opt out and stop texting you straight away. We do not sell your phone number.
Google Business Profile data
When you connect a Google Business Profile, we process review text and related listing data only to provide the Natterback service. Nothing is posted to Google without your explicit approval (for example, replying “yes” or sending your own wording). When you disconnect Google at natterback.com/account, or your subscription ends, we revoke our access with Google and delete our copy of your access token.
Payments
Card payments are processed by Airwallex. We do not store full card numbers on our servers. Airwallex’s privacy terms apply to payment data they process.
Who we share with
We use service providers that help us operate Natterback (for example hosting, SMS delivery, email, analytics, payments, and AI drafting). They may only use data to provide their services to us. We do not sell personal information.
Storage and security
We take reasonable steps to protect personal information against misuse, interference, loss, and unauthorised access. Access is limited to people who need it to run the service.
Overseas disclosure
Some of our providers process personal information outside Australia: Twilio (text messages) and Discord (internal alerts) in the USA, PostHog (analytics) in the EU, Cloudflare and Google (hosting, sign-in, Business Profile and AI drafting with Gemini) on global networks, and DeepSeek in China as a backup AI drafting provider, used only if Gemini is unavailable. DeepSeek receives the review text, star rating, reviewer’s first name and business name, never your contact details. We take reasonable steps so information remains protected.
Your rights
You can ask to access or correct personal information we hold about you, or raise a concern about how we handle it. Email hello@natterback.com. You may also contact the Office of the Australian Information Commissioner (OAIC).
Retention
We keep information only as long as needed for the purposes above, or as required by law. You can ask us to delete sign-up details when no longer needed (subject to legal holds).
Children
The Natterback service is aimed at business owners and operators, not children.
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site or service after changes means you accept the updated policy.
Contact
Questions about privacy: hello@natterback.com.