Legal

Privacy

DRAFT. A lawyer has not reviewed this page. It is not a finished privacy policy under the Privacy Act 1988.

Helyx Design is a studio of Helyx Digital, Australia. We collect the least we need to design and host your site.

What we keep

• Your name, email, and optional phone.
• Answers you type or correct after talking. The edited text is the interview we keep.
• A recording, if you choose to make one, and the transcript the worker writes from it.
• Payment records through WooCommerce / Stripe. We do not store full card numbers.
• Images you upload (logo, photos). We check they are pictures, not programs.

Interview, recording, and models

DRAFT. A lawyer has not reviewed this text.

Recording stays off until you accept this version.

If you record, the browser sends the audio to the Helyx worker. Transcription runs on that server with faster-whisper. The recording is not sent to a browser speech service.

We strip personal details that the website does not need before a model sees the text. The edited answer you send is what we keep as the interview.

The worker can send that redacted text to Amazon Bedrock on an Australia inference profile configured for Sydney (ap-southeast-2). The code records data retention as off, which means the content is not used to train the model. That profile can run in more than one place inside Australia. It is not a promise that every request stays in one Sydney building. Today the Bedrock adapter is a stub and does not make that call. The default model is the local fake provider.

A recording is deleted 30 days after it is captured. The clock is Australia/Sydney. We do not delete the recording the moment a transcript is saved. There is no separate step where you accept the transcript, and a bad transcript would otherwise lose the only recording.

The transcript, the interview answers, the design brief, files you upload, and the text sent to or returned by a model are deleted 12 months after the project ends. The project ends when the site goes live, or when the order is refunded or cancelled. A pause on credit hold does not start that clock. The 14-day, 7-day, and 90-day windows are about the booking and the fee. They do not delete this material.

You can ask for deletion sooner by emailing hello@helyxdesign.com.au, or from My website once you are logged in. You can delete one recording yourself. That cannot be undone, and it does not take down a website that has already been built. Asking to delete everything else logs the request and tells the studio. The studio still does that full deletion, because it can affect a site that is still in progress.

Deletion removes the database fields, the files on disk, and the copy the worker reads. It does not rewrite a backup that was already taken. Local backup archives are deleted whole after 90 days. A copy sent off the server stays until that store deletes it on the same timetable. Shop payment records are not deleted by this button.

The decision log stays. The words in it are erased. What remains is the time, the stage, the model version, the token counts, and the cost, plus a line that the personal information was deleted on a date by request or by this retention rule.

What we do not do

• We do not sell your list.
• We do not send the raw recording to a browser speech service or to a model.
• We redact details we do not need for the website before a model sees the text.

How long, from the code

• A recording is deleted after 30 days, on the Australia/Sydney clock.
• Transcripts, interview answers, briefs, uploaded files, and model inputs and outputs are deleted 12 months after go-live or cancellation.
• 14 days to finish the conversation after the deposit. 7 days to approve the design pack. The deposit then remains as credit for 90 days. These are booking and fee windows. They do not delete personal information.

Gaps a lawyer needs to close

• Shop orders still hold the billing name, email, and address. The deletion button does not erase them. A lawyer needs to set how long those tax records are kept.
• A backup archive that has already been written cannot be edited. Local archives are deleted whole after 90 days. This code does not delete an offsite copy. That copy holds personal information until that store’s own rule removes it.
• backup_days (90) is the backup-file lifetime in config. It was not one of the personal-information periods that were approved. Confirm it.
• There is no control that marks a transcript accepted, so a recording waits the full audio period even after transcription succeeds.
• The 14-day, 7-day, and 90-day figures in the terms are a booking window and deposit credit. They are not the personal-information retention schedule.
• Bedrock “data retention off” is a flag on the stub provider. It is not a measured storage period, and the live call is not implemented.

Asking for deletion

Email hello@helyxdesign.com.au, or use My website once you are logged in. You can delete one recording there. That cannot be undone, and it does not remove the website already built. Asking to delete everything else logs the request and tells the studio. An owner still deletes the whole project from the WordPress project screen after typing a confirmation, because that can affect a site that is still in progress. The decision log keeps the time, stage, model, tokens, and cost. The words in it are erased. A row records that personal information was deleted on a date.