Is an AI receptionist for your trade business actually Privacy Act compliant?

Short answer: usually yes, but only if you check three specific things first: call recording consent, where the transcript is stored, and whether the vendor is contractually accountable to you for it. Most AI-receptionist products for tradies don't mention any of the three on their pricing page.

The pitch for these tools is consistent and genuinely true: tradies on tools all day can't answer calls, and a missed call is often a missed job. What's missing from almost every pitch is that the moment the tool starts recording and transcribing a customer's voice, you've created a new category of personal information you're responsible for under the Privacy Act, separate from the job data already sitting in ServiceM8 or Tradify.

Does the tool need consent to record the call?

Yes, in most cases. Australian call-recording law generally requires at least one party's consent, and reasonable practice is to disclose it up front ("this call may be recorded for quality and follow-up"). If the AI receptionist doesn't play a disclosure before it starts capturing audio, that's the first thing to raise with the vendor, not something to assume they've handled.

Where does the recording and transcript actually live?

A lot of these tools are US-built SaaS products, which means customer voice data and transcripts may be stored offshore, sometimes fed into a third-party AI model provider on top of that. Neither is automatically a problem, but it means your customer's phone number, name, and job details are now sitting in at least two more systems than they were before, and it's worth asking, in writing, whether the vendor uses your customers' calls to train their own model.

Who's accountable if the vendor is breached?

Disclosing customer information to a third-party tool doesn't transfer your responsibility for it. Under Australian Privacy Principle 11, you remain accountable for taking reasonable steps to protect information even once it's sitting with a supplier. A one-line data processing clause in the vendor's terms (or the lack of one) is worth reading before signing up, not after something goes wrong.

None of this means don't use an AI receptionist. Missed-call revenue loss is real and these tools solve a genuine problem. It means asking the vendor these three questions before rollout costs you nothing and closes the actual gap.