Privacy Policy

1. Who We Are

Should-I Inc. is an Australian business providing location-based market intelligence and business diagnostics reports to small business owners and entrepreneurs. References to "Should-I", "we", "us", or "our" in this policy refer to Should-I Inc.

This policy applies to all information collected through our website (should-i.ai), our report platform, associated funnels, and any related communications.

2. What Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you:

• Submit an opt-in form to request a free or paid report (first name, email address);
• Complete a post-opt-in segmentation survey (business stage, industry type);
• Purchase a paid report (name, email, payment details processed via Stripe);
• Contact us via email, our website contact form, or other communications; or
• Participate in any research, survey, or feedback program.

2.2 Information We Collect Automatically

When you visit our website or funnels, we may automatically collect:

• Browser type and version;
• Device type and operating system;
• IP address and approximate geographic location;
• Pages visited, time spent, and referring URL;
• Click behaviour and engagement data; and
• Cookie identifiers (see Section 7 on Cookies).

2.3 Information You Provide for Report Generation

To generate a market intelligence report, we collect:

• Your business location (suburb, address, or geographic coordinates);
• Your business industry or type; and
• Whether you are an existing business owner or evaluating a new idea.

2.4 Information from Third Parties

We may receive information about you from:

• Meta (Facebook) — if you interact with our advertisements, we may receive limited engagement data via Meta's Conversions API (CAPI) integration;
• Payment processors — Stripe provides transaction confirmation data but does not share full card details with us; and
• Publicly available data sources — our reports use ABS Census data, Google Places API, and Mapbox, which are publicly available and do not involve your personal data.

3. How We Use Your Information

We use your personal information to:

• Generate and deliver your market intelligence report;
• Send you the report and any follow-up communications you have requested;
• Segment communications to ensure relevance (e.g. separating new business ideas from existing owners);
• Process payments and manage your account;
• Send marketing emails and product updates (you can opt out at any time — see Section 9);
• Improve our services, platform, and report quality;
• Comply with legal obligations; and
• Measure and optimise the performance of our advertising campaigns.

We will not use your personal information for any purpose that is incompatible with the purposes listed above without first seeking your consent.

4. Third-Party Services We Use

Should-I uses the following third-party services that may handle your data. Each has its own privacy policy:

GoHighLevel — CRM and Automation

We use GoHighLevel to manage contacts, email communications, and automated workflows. Your name and email address are stored in GoHighLevel. See gohighlevel.com/privacy-policy.

Meta / Facebook — Advertising

We run advertising campaigns on Facebook and Instagram. If you engage with our ads, Meta may share limited conversion data with us via the Conversions API. See facebook.com/privacy/policy.

Stripe — Payment Processing

All payment transactions are processed by Stripe. We do not store your credit card details. See stripe.com/au/privacy.

Google Places API — Location Data

We use Google Places API to identify local businesses for competitor analysis in reports. This involves location-based queries only and does not involve your personal data. See policies.google.com/privacy.

Mapbox — Mapping

We use Mapbox to generate catchment area maps in reports. See mapbox.com/legal/privacy.

Vercel — Website Hosting

Our website is hosted by Vercel. Vercel may collect standard server log data. See vercel.com/legal/privacy-policy.

n8n — Workflow Automation

We use n8n for certain internal automation tasks. This tool may process limited contact data as part of automated workflows.

5. Data Storage and Security

Your personal information may be stored on servers located in Australia and the United States, depending on which third-party platforms are involved. We implement reasonable technical and organisational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS);
• Access controls limiting who can access your data;
• Reputable third-party platforms with their own security certifications; and
• Regular review of our security practices.

No method of transmission or storage is 100% secure. In the event of a data breach that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches (NDB) scheme.

6. Retention of Your Data

We retain your personal information for as long as necessary to deliver our services, maintain records required for business or legal purposes, or comply with applicable law. If you request deletion of your data, we will delete or de-identify your information within a reasonable timeframe, unless we are required to retain it by law.

7. Cookies and Tracking

Our website uses cookies and similar tracking technologies. Types of cookies we use include:

• Essential cookies — required for the website to function;
• Analytics cookies — help us understand how visitors use our site;
• Advertising cookies — used by Meta and Google to measure ad performance and enable retargeting; and
• Functional cookies — remember your preferences.

You can control cookie settings through your browser. Note that disabling certain cookies may affect the functionality of our website.

8. Your Rights

Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or out-of-date information;
• Request deletion of your personal information (subject to legal obligations);
• Opt out of direct marketing communications at any time; and
• Make a complaint if you believe we have mishandled your information.

To exercise any of these rights, please contact us at hello@should-i.ai. We will respond within 30 days.

9. Marketing Communications

If you have opted in to receive marketing communications from Should-I, we may send you information about new reports, features, business insights, and promotional offers. You can opt out at any time by clicking the unsubscribe link in any email, or by contacting us at hello@should-i.ai.

Opting out of marketing does not affect transactional communications such as delivery of a report you have purchased.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

11. International Data Transfers

Some of the third-party services we use (including GoHighLevel, Stripe, and Meta) may transfer and store your data in countries outside Australia. Where this occurs, we take reasonable steps to ensure those parties handle your data in accordance with Australian privacy law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the 'Last updated' date at the top of this page when changes are made. For significant changes, we may also notify you by email. We encourage you to review this policy periodically.

13. Complaints

If you believe Should-I has handled your personal information in breach of the Australian Privacy Principles, you may:

• Contact us directly at hello@should-i.ai — we will investigate and respond within 30 days; or
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you are not satisfied with our response.

14. Contact Us

For any questions, requests, or concerns relating to this Privacy Policy, please contact:

Should-I Inc.
Email: hello@should-i.ai
Website: should-i.ai/contact