Privacy Policy

Last Updated: 18 April 2026

Sonistack ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, engage our services, or communicate with us.

We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs). Where applicable, we also take reasonable steps to align with international standards such as the EU GDPR for clients or users based in those jurisdictions.

1. Who We Are

Sonistack is an AI automation company based in Auckland, New Zealand, providing AI systems, voice agents, workflow automation, and integrations to businesses.

Privacy Contact Email: hello@sonistack.com Phone: +64 27 444 7239 Address: Auckland, New Zealand

2. Information We Collect

We collect personal information in the following ways:

2.1 Information You Provide

• Contact & Account Details — name, email, phone number, business name, role.

• Project Information — details about your business, workflows, goals, and challenges shared during onboarding or consultations.

• Payment Information — billing address and invoice details. Payment card processing is handled securely by third-party payment providers; we do not store full card numbers.

• Communications — records of emails, calls, messages, and meetings.

2.2 Client Data Processed on Your Behalf

When delivering our Services, we may process personal information about your customers, employees, or end-users (e.g., call recordings handled by AI voice agents, leads in a CRM, data flowing through an automation). We act as a processor on your behalf for this data, and you remain the controller.

2.3 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and approximate location

• Browser type and device information

• Pages visited, time on site, and referral sources

• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use personal information to:

• Provide, deliver, and support our Services.

• Respond to inquiries and communicate with you.

• Process payments and manage accounts.

• Improve our website, services, and client experience.

• Send service updates, relevant information, or marketing (you can opt out at any time).

• Comply with legal obligations and enforce our Terms.

• Build and test AI automation systems you've engaged us to create.

We will not use your personal information for purposes unrelated to those listed above without your consent.

4. Legal Basis for Processing

We collect and use personal information where:

• You have consented (e.g., submitting our contact form).

• It is necessary to perform a contract with you (e.g., delivering our Services).

• We have a legitimate business interest (e.g., improving our services, marketing to existing clients).

• We are required to comply with legal obligations.

5. How We Share Your Information

We do not sell your personal information. We may share it with:

5.1 Service Providers & Third-Party Tools

To deliver our Services, we use trusted providers including (but not limited to):

• Cloud & hosting platforms (e.g., AWS, Google Cloud, Vercel)

• AI providers (e.g., OpenAI, Anthropic)

• Automation tools (e.g., n8n)

• Communication & telephony (e.g., Twilio)

• CRM & email platforms (e.g., HubSpot, Google Workspace)

• Payment processors (e.g., Stripe)

These providers process data only as needed to deliver their specific function, and under their own privacy terms.

5.2 Legal & Compliance

We may disclose information if required by law, regulation, legal process, or to protect the rights, property, or safety of Sonistack, our clients, or others.

5.3 Business Transfers

If Sonistack is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected parties where required.

6. International Data Transfers

Because we use cloud-based services and AI providers that may be hosted outside New Zealand (including the United States, Europe, and other regions), your information may be transferred to and processed in those jurisdictions.

Where we transfer personal information internationally, we take reasonable steps to ensure it is protected to a standard comparable to the New Zealand Privacy Act 2020.

7. Cookies & Tracking

Our website uses cookies and similar technologies to:

• Keep the site functioning correctly.

• Remember your preferences.

• Analyse traffic and improve user experience (e.g., Google Analytics).

You can control cookies through your browser settings. Disabling cookies may limit some website functionality.

8. Data Security

We take reasonable technical and organisational measures to protect personal information, including:

• Encryption in transit (TLS/SSL) and at rest where feasible.

• Access controls and authentication requirements.

• Regular review of our systems, providers, and security practices.

• Confidentiality obligations for all team members and contractors.

However, no system is completely secure. You share information with us at your own risk.

9. Data Retention

We retain personal information only for as long as necessary to:

• Deliver our Services.

• Meet legal, tax, or accounting obligations.

• Resolve disputes and enforce agreements.

When information is no longer needed, we will securely delete or anonymise it. Client Data processed on your behalf is retained according to the instructions in your engagement and deleted upon request or termination, subject to any legal retention requirements.

10. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you.

• Correct information that is inaccurate, incomplete, or out of date.

• Withdraw consent to our use of your information (where consent is the basis for processing).

• Opt out of marketing communications at any time.

• Complain to us directly, or to the Office of the Privacy Commissioner if you believe we have breached your privacy.

To exercise any of these rights, contact us at hello@sonistack.com. We will respond within 20 working days.

Office of the Privacy Commissioner (NZ) Website: www.privacy.org.nz Phone: 0800 803 909

11. Children's Privacy

Our Services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have done so, please contact us so we can delete it.

12. AI & Automated Processing

Our Services involve AI systems, including voice agents and automated workflows. Where these systems make or influence decisions that affect individuals:

• We work with our clients to ensure appropriate human oversight.

• We do not use personal information to train public AI models without consent.

• Third-party AI providers may have their own data usage policies, and we select providers that align with our privacy standards (e.g., enterprise-grade APIs with no-training guarantees where available).

13. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before sharing personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent changes. Material changes will be communicated through our website or directly to affected individuals where appropriate.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Sonistack Email: hello@sonistack.com Phone: +64 27 444 7239 Auckland, New Zealand