What I collect, and what happens to it.

Visiting the site

This site sets no cookies and stores nothing in your browser to follow you. There are no third-party scripts, fonts or embeds. The only things your browser loads come from this site, with one exception: if you use the Check your website page, the report may show the site at the address you entered in a frame, as described below. I do count visits, in a way that does not identify anyone. That is described under Counting visits.

The site is hosted by Netlify. Like any web host, Netlify keeps server logs of requests, which include your IP address, the page you asked for and the time. Netlify uses those logs to run its service. I don't use them to identify visitors.

Counting visits

To see which pages are read and where visitors come from, I use PostHog, an analytics service. Its servers are in the United States. Your browser does not talk to PostHog. It sends each count to this site, and Netlify passes it on, so no PostHog script or cookie reaches your browser.

What a count holds: the page you opened (its path, with nothing after a question mark), the site that sent you and any utm tags on the link you clicked, your browser, operating system and device type, and the time. A few actions are counted by name only: opening Ten AI, pressing Talk to Brad, pressing Book and pay (with which of the three options), following a link to my Cal.com booking page, sending a form (which form, never what you wrote), and the steps of Check your business (opened, run, finished, result shown, plan sent, Yes book this in, booking link pressed).

What a count never holds: your name, email, phone number, anything you type, your chat messages, your answers, the website address you enter in the check, what the check finds, or your location. PostHog sees your IP address only long enough to work out an anonymous visitor ID that changes every day, and my account is set not to keep it. Because the ID changes daily, I can't tell that a visitor who comes back on another day is the same person, and I can't work out where anyone is.

Counting does not run if your browser sends Do Not Track or Global Privacy Control, and it does not run on my own browsers. PostHog's own privacy policy covers how it handles the data it receives.

Getting in touch

The contact form asks for your name, your email address and a few words about your business. Your business name and website are optional. I ask only for what I need to reply, and I use it only to reply.

The register interest form for AI for you or your team asks for your name, your email address, who it's for and whether you'd like to meet in person or online. Your business name is optional. It goes the same way as the contact form.

When you press Send, the form first goes to a small check on my server on Netlify. It looks for signs of an automated sender and stores nothing. The form then goes to Netlify, which stores it and emails a copy to my Tenfold mailbox, which runs on Google Workspace. Netlify stores form submissions in the United States. Netlify filters form spam with Akismet, a spam service run by Automattic, which receives the submission to check it. Google stores my mail in the regions it uses for Workspace accounts.

Discovery calls

Discovery calls and AI for you calls are booked through Cal.com, a separate US-based service. If you book a time, in the chat's Book a call card or on Brad's Cal.com page, Cal.com sends you the invite and keeps the details you enter, such as your name and email, under its own privacy policy. Brad gets your name, email and business name. From the chat, nothing from the conversation goes with the booking. No Cal.com code runs on this site: the chat card talks to this site, which passes the booking on.

With your permission, I transcribe our discovery calls and AI for you calls, online or in person, using Granola. No audio is kept. Granola stores the transcript in the United States, and I've switched off its use of my notes to improve its models. I use Claude, by Anthropic, to read the transcript and find the opportunities. Anthropic doesn't use it to train AI models and deletes its copy within 30 days. My copies are deleted within 30 days if we don't go ahead, or 12 months after our work ends.

For monthly AI for you clients, I keep notes of where we're up to, only to run the service.

Paying

The Book and pay button for AI for you takes you to Stripe, a separate service, to pay by card. Stripe collects your name, email address, your business name if you give one, and your card details under its own privacy policy, and I can see the payment, your name, your email address and your business name in my Stripe account. Your card number never reaches this site or me. After you pay, Stripe sends you to a Cal.com page to book your first call. This site only links to Stripe: no Stripe code runs here. The terms you agree to are on the terms page.

Who sees it

I do. My team is a set of AI agents, and they help me read, sort and file enquiries and draft replies. I check their work and I answer you myself. The agents treat anything you write as information, not as instructions. They don't act on requests inside a message.

I don't sell or share your details, and I don't use them to train any AI model. The only outside companies that handle them are the ones named on this page.

How long I keep it

The visit counts hold no name, email, address or location, so they can't be tied to a person. They stay in PostHog so I can compare one month with the next.

Form submissions, including anything sent from Check your business, are deleted from the Netlify dashboard and from my mailbox at my monthly clean-up once they're more than 90 days old, unless you become a client. If you become a client, I keep what we need for the work, and I'll tell you how long when we agree the job.

The chat assistant

The chat assistant on this site, Ten AI, is an AI, and it says so when it opens. It answers from the same information as this site, can quote the prices published here, and hands you on to me for anything else. It doesn't ask for your details in the chat.

What you type is sent to Anthropic, the company whose model powers it, so it can reply. Anthropic doesn't use it to train its models, and deletes the messages sent through its API within 30 days.

I keep your questions, not Ten AI's replies, for 30 days so I can see what people ask and improve the answers. Before a question is saved, email addresses, phone numbers and web addresses are taken out. It's saved with the date only, not the time, and with nothing added that links it to you or to the rest of your conversation. It's kept in Netlify Blobs, Netlify's storage, and deleted automatically after 30 days. Nothing reads it back except me. Only email addresses, phone numbers and web addresses are removed automatically, so a saved question may still contain other details you typed in, such as a name.

To stop abuse, the site keeps short-lived usage counters for the chat, the website check, Google's page test, the forms and the Check your business counts. They're tied to a scrambled (hashed) form of your IP address, not the address itself, and they're deleted within 3 days.

If you use Talk to Brad in the chat, your name, email and note go to my mailbox the same way as the contact form. The conversation goes with them only if you tick the box. When it does, each Ten AI reply is checked against a signature my server adds, so I can tell its real replies from text added afterwards.

Check your business

Check your business has three parts: a check of your website, a few questions about your week, and a plan worked out from both. Everything stays on the page until you choose to send it. Your answers are never saved in your browser, put in the web address or logged.

If you check a website, the address you enter is sent to my server on Netlify. It reads the public pages at that address: the home page and up to seven pages it links to, plus the site's robots.txt and sitemap. It reads them as plain text, without running their scripts, and runs a fixed set of checks. The result is shown to you and not saved.

To take a picture of the site, my server also sends the address you entered to Google's PageSpeed Insights, Google's page test. Google loads that public page, takes a picture of it and measures it, and sends the picture and its scores back to my server, which passes them to your browser. Google receives the address from my server, not from your browser. What Google does with it is covered by Google's own privacy policy. Nothing from the test is saved here.

If the site at that address allows it, the report also shows it live, whichever site that is. Your browser loads it straight from that site into a closed-off frame on the page, and only after you press Check. The frame can't read or set cookies, open windows or send forms, and nothing it shows comes to me.

The questions about your week and the plan are worked out in your browser, from a fixed set of rules. Nothing is sent while you answer.

Nothing reaches me unless you send it. There are three ways to do that, and each shows you exactly what will be sent first. Send this to Brad and book a call sends your name, your email, any note, your web address, what the check found, Google's scores, your answers and the plan. Yes, book this in, under the website plan, sends your name, your email, your web address, the findings, the items you ticked with their totals, the monthly limits and a note that you're ready to go ahead. No payment is taken on this site: I reply myself with the agreement and a deposit link. Send this report to Brad uses the short Talk to Brad form, with your web address and the findings filled in for you to edit. Each goes the same way as the contact form, described above, and is kept as described under How long I keep it.

The booking link in Check your business adds "tenfold-check" to the Cal.com address, so I can see a booking came from the tool. Nothing you typed is added to it.

To see whether the tool is useful, the site keeps anonymous daily counts of how often it's opened, a website is checked, the questions are finished, a plan is shown, a plan is sent, Yes, book this in is pressed and the booking link is pressed. They're totals for each day, with no cookies and nothing that identifies a visitor, kept in Netlify Blobs for 13 months.

Your details, your call

Ask me any time what I hold about you, and I'll tell you, correct it or delete it. Use the contact form or email hello@tenfoldai.com.au. If I change how this site handles your information, I'll update this page and the date at the top.

Get in touch.