Privacy policy
Last updated: 4 November 2026. This is a plain-language draft and should be reviewed by a lawyer before the service is offered to the public.
Who we are
This policy explains how Michael Maxwell trading as XLG-GAMMA (ABN 13 357 764 307) handles personal information, in line with the Privacy Act 1988 and the Australian Privacy Principles.
What we collect
Depending on how the service is used:
- a person's name and phone number;
- text transcripts and written summaries of conversations with the assistant, kept as a journal;
- text messages sent and received through the service;
- a short profile of the person, written by the assistant from past conversations, so it can remember context next time;
- call details such as the time, length and cost of each call.
We do not keep audio recordings of calls as standard. Occasionally a call may be recorded to troubleshoot a technical problem, and that recording is kept only as long as needed to fix it.
Conversations may include health or wellbeing information, which is sensitive information under the Privacy Act, so we collect it only with consent.
Why we collect it
To provide the conversation and journaling service, to keep it working safely, and to improve it. We do not sell personal information and do not use it for advertising.
Consent
During development the service is used only by a small number of invited people. Before signing up, each person is told that xlg-gamma is an AI system and that their conversations are transcribed and kept as a journal, and signing up with their one-time code confirms their agreement. Every call also starts with the assistant introducing itself as an AI-powered system. A person (or their authorised representative) can withdraw consent at any time.
Who sees it
Only Michael Maxwell, who runs the service, has access to the journal and profiles. Journal contents are not shared with anyone else unless the person has agreed.
The assistant itself does not run on our own equipment. As we are still in development, we currently use overseas equipment and services, mainly in the United States, which process information on our behalf:
- Twilio: phone calls and speech recognition;
- Deepgram: speech recognition (converting speech to text);
- Anthropic (Claude) and Google (Gemini): the AI that understands and replies in conversations and writes summaries;
- Google Cloud: the assistant's speaking voice (text to speech);
- DigitalOcean: the server where the journal and all other information is stored;
- Messaging services: used to deliver messages a person asks us to send;
- Meta (WhatsApp): messages, once WhatsApp messaging is offered.
Each provider handles the information under its own privacy terms. By using the service you consent to your information being processed and stored overseas by these providers.
Storage and security
Information is stored on a single server in New York, USA. It is not currently stored in Australia. Connections to the service are encrypted, and the server can only be managed over a private, encrypted network; the only parts open to the internet are the web and phone connections the service needs. Access keys for the providers above are kept on the server and are not shared.
We keep transcripts, summaries and profiles until the person asks us to delete them.
Access, correction and complaints
You can ask to see, correct or delete your information by emailing admin@xlg-gamma.com. If you are unhappy with how we have handled your information, contact us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
If something serious happens
xlg-gamma is not monitored in real time, and the assistant cannot contact emergency services or anyone else on a person's behalf. Conversations are not reviewed as they happen, so nothing said to the assistant should be treated as a request for help. In an emergency, call 000.