Privacy Policy
Last updated: 30 October 2026
This policy explains how Comma 5 (Pty) Ltd (“we”, “us”) handles information in Comma5 Live, formerly Comma5 Wallboard (the “Service”). We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. What we collect
Your account: your name, email address and profile picture from Google when you sign in.
Your settings: your board settings, business description, logo, and a weather location (a suburb or town).
Data from services you connect. You choose what to connect, and all access is read-only:
Google Analytics: website traffic figures (e.g. visitor counts, pages viewed, search impressions).
WooCommerce: order counts, sales totals and top-selling products.
Xero: Profit & Loss and Bank Summary report totals.
Comma5 CRM: summary totals such as leads, quotes and orders.
We use aggregated figures only. We don’t collect your customers’ names, contact details or individual records from these services.
Connection credentials: access tokens and API keys that let the Service read the data above. They’re stored encrypted and are never shown in your browser.
2. How we use it
To display your figures in Comma5 Live, and to keep your figures and settings up to date.
To generate AI insights. Aggregated figures and your business description are sent to our AI provider, Anthropic, to write short plain-English summaries. No personal information about your customers is included.
To look up weather for the location you set, via Open-Meteo. Only the place’s coordinates are sent.
To keep the Service secure and working.
We do not sell your information, use it for advertising, or use your data to train AI models.
3. Google user data
If you connect Google Analytics with Google sign-in, the Service requests read-only access to your Analytics data (analytics.readonly). We use it only to show your figures in Comma5 Live and in your AI insights. The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don’t transfer this data to others except as needed to provide the Service (as described above), comply with law, or protect security, and we don’t allow humans to read it except with your consent, for security, or as required by law.
4. Where it’s stored and who processes it
Your data is hosted on Google Cloud and Firebase in Sydney, Australia. Service providers that process data on our behalf: Google (hosting, sign-in), Anthropic (AI insights; this may be processed outside Australia) and Open-Meteo (weather). We only share what each needs to do its job.
5. Security
Connections use HTTPS. Credentials for connected services are encrypted at rest. Access is limited to invited accounts, and display links are read-only and can be replaced or turned off at any time.
6. Keeping and deleting your data
Disconnecting a service in Settings deletes its stored credentials and, where supported, revokes the Service’s access with that provider.
Deleting your account: email team@comma5.au, and we’ll delete your account and Comma5 Live data within 30 days.
7. Browser storage
We keep a sign-in token in your browser’s local storage so you stay signed in. We don’t use advertising or tracking cookies.
8. This website (comma5.au)
This section covers the comma5.au website itself, not Comma5 Live (the Service).
Contact form: when you send us an enquiry, we keep the details you enter (name, company, email, phone, topic and message) so we can reply and follow up. They are stored with our website host, SiteGround, and emailed to our team.
Lead-source cookie: on your first visit we set a first-party cookie called c5lb_src. It remembers how you found us (the site that referred you, the page you landed on and any campaign tags in the link) for 30 days, and we only read it if you send an enquiry. If Google Analytics cookies are set, we also note your Analytics ID with the enquiry, so we can see which visits lead to enquiries.
Location: when you send an enquiry, we look up your approximate country and city from your IP address using ipwho.is, an outside service that may process it outside Australia. We keep only the country and city with your enquiry, not your IP address.
Accounts and Google sign-in: if you create an account on this website or log in with Google, we keep your name, email address and Google profile picture (Google shares these only when you agree), plus a username and the date you joined, so you can log in again. We don’t receive your Google password or access to anything else in your Google account. Logging in sets WordPress login cookies, which end when you log out or after at most 14 days. You can ask us to delete your account at team@comma5.au.
You can block or delete cookies in your browser settings. The contact form still works without them; logging in needs them.
9. Your rights
You can ask to access or correct your personal information, or to have it deleted, at team@comma5.au. If you’re unhappy with how we’ve handled a privacy matter, contact us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
10. Changes
We’ll update this page when things change, and let you know of significant changes.
team@comma5.au