Terms of Service

1. About these terms

These terms apply to all consulting, automation, training and support services ("Services") provided by Like a Pro AI Consulting ("we", "our", "us") to a client ("you", "your"). By engaging us, accepting a proposal or Statement of Work, or using the Services, you agree to these terms.

Each engagement is described in a Statement of Work ("SOW") or written proposal that sets out scope, deliverables, timing and fees. Where the SOW, a signed Data Processing Agreement ("DPA") or a non-disclosure agreement conflicts with these terms, that document prevails for that engagement.

Nothing in these terms excludes, restricts or modifies any right or remedy you have under the Australian Consumer Law that cannot lawfully be excluded.

2. Services and scope

We provide AI and automation consulting for professional services firms, including workflow design and implementation, custom connectors and integrations, private AI deployments, staff training, and ongoing support and optimisation.

• Work outside the SOW is quoted separately and proceeds only on your written approval.
• Timeframes are estimates in good faith. They depend on timely access, information and decisions from you, and on third-party platforms behaving as documented.
• We may decline or pause work that we reasonably believe would breach the law, a professional obligation, a platform's terms of use, or the privacy commitments in section 8.

3. Fees and payment

• Project work requires a deposit, stated in the SOW, before work begins. The balance is due on completion of the deliverables or the milestones in the SOW.
• Support retainers are billed monthly in advance and continue until terminated under section 19.
• All fees are in Australian dollars and exclusive of GST unless stated otherwise. Invoices are payable within 14 days.
• Third-party costs — platform subscriptions, API usage, hosting, SMS credits and similar — are billed to accounts held in your name (section 5) and are not included in our fees unless the SOW says so.
• Overdue amounts may accrue interest at 2% per annum above the Reserve Bank of Australia cash rate, and we may suspend Services on 7 days' written notice while an invoice remains unpaid.

4. Your responsibilities

You agree to:

• Provide timely access to the systems, people and information reasonably needed to deliver the Services.
• Ensure you have the right, under the Privacy Act 1988 (Cth), your professional rules and any client agreements, to have the data you provide processed as described in the SOW and data-flow record.
• Nominate a contact with authority to make decisions and approve changes (section 13).
• Maintain your own AI use policy, or adopt one we help you prepare, and ensure staff follow it.
• Keep humans in the loop for the review steps identified in the SOW, particularly for anything client-facing, regulatory or financial (section 16).

5. Customer-owned accounts and platforms

All platforms used to deliver a workflow — automation tools such as Zapier, Make or n8n; AI services such as Microsoft 365 Copilot, Google Workspace with Gemini, Anthropic, OpenAI; hosting; databases; messaging — are subscribed to and paid for in your name, under your terms with the provider, unless the SOW expressly says otherwise.

• We are added as a named user, delegated administrator or collaborator, with the minimum permissions required.
• API keys are generated within your accounts. Where a provider allows, keys are scoped to the specific workflow and named so they can be identified and revoked individually.
• You remain the account owner at all times and may remove our access at any time without affecting the workflow's operation.
• If, for practical reasons, we temporarily hold an account or key on your behalf, we transfer it to you before the engagement closes and record this in the handover (section 14).

6. Credential handling and access

• We use only credentials you issue to us. We do not share logins between people, and we do not use personal accounts for client work.
• Multi-factor authentication is enabled on every account we access where the platform supports it.
• Credentials, keys and secrets are stored in an encrypted password manager. They are never sent by email, chat, or in documents, and never committed to code repositories.
• We request the least privilege needed for the task, and ask for elevated access only for a defined purpose and period.
• We keep a register of every account and key we hold for you. It forms part of the handover and is used to confirm removal at the end of the engagement (section 19).
• If we suspect a credential we hold has been exposed, we treat it as a security incident under section 11 and ask you to rotate it immediately.

7. Confidentiality

Each party will keep the other's Confidential Information confidential, use it only for the engagement, and disclose it only to personnel and advisers who need it and are bound by equivalent obligations. Confidential Information includes business processes, client lists and files, financial information, pricing, credentials, and the contents of any system we are given access to.

• These obligations survive for five years after the engagement ends, and indefinitely for personal information, trade secrets and credentials.
• They do not apply to information that is public through no fault of the receiving party, independently developed, or required to be disclosed by law — in which case we notify you first where lawful.
• We will sign your firm's non-disclosure agreement before receiving any client information if you prefer it to this clause.
• We do not use your Confidential Information, or any output derived from it, to train AI models, build products for other clients, or as case-study material without your written consent.

8. Data processing and privacy

Where the Services involve personal information you hold, you are the entity responsible for that information under the Privacy Act and we act on your instructions as a processor. The Office of the Australian Information Commissioner is clear that privacy obligations apply when personal information is entered into an AI system, and the Services are designed on that basis.

For any engagement that involves personal information we enter into a Data Processing Agreement with you. Our standard DPA, available on request, contains at least the following commitments:

• Instructions only. We process personal information solely to deliver the SOW and never for our own purposes.
• No consumer AI tools. Personal information is processed only through enterprise or API services whose terms exclude use of the data for model training, or through AI features you already license operating inside your own environment.
• Data minimisation. Each workflow sends the minimum fields needed. Identifiers are redacted or tokenised where the task does not require them. Sensitive information as defined in the Privacy Act is processed only where the SOW expressly provides for it and with additional controls.
• Cross-border disclosure. Before any workflow sends personal information to a provider that processes data outside Australia, we identify that provider and location in the data-flow record so you can satisfy Australian Privacy Principle 8. Australian-region processing is used where it exists.
• Data-flow record. Every deliverable includes a written record of what data goes in, which provider processes it, where, for how long, and who can see it — suitable for inclusion in your privacy policy and AI policy.
• Assistance. We assist, at reasonable cost, with access requests, correction requests, privacy impact assessments and regulator enquiries relating to the workflows we build.
• Deletion. On completion or termination we return or delete personal information as set out in section 12.

9. Subprocessors and AI providers

We do not engage subcontractors to perform the Services without your prior written consent. Third-party platforms that process your data do so under your own accounts (section 5) and are listed in the engagement's data-flow record. The providers we typically recommend are:

• AI models: Microsoft 365 Copilot (within your tenant), Google Gemini for Workspace (within your tenant), Anthropic API, OpenAI API — enterprise and API tiers only.
• Automation: Zapier, Make, n8n (self-hosted or cloud as you elect).
• Hosting and storage: your existing Microsoft 365 or Google Workspace environment; where separate hosting is required, Australian-region Microsoft Azure or Amazon Web Services, or hardware you own.
• Private AI deployments: open-weight models running on infrastructure you control, with no external processing.

If we recommend a provider not on this list, or a provider materially changes where or how it processes data, we tell you before the change takes effect and you may object. We do not add any provider to a live workflow without your approval under section 13.

10. Security responsibilities

Security is shared. The division below applies unless the SOW says otherwise.

We are responsible for

• Designing workflows to the principles in section 8 and following secure configuration guidance for each platform used.
• Handling credentials as set out in section 6, and protecting our own devices with full-disk encryption, current patches, endpoint protection and MFA.
• Testing workflows on sample or de-identified data before they touch live client information, wherever that is practicable.
• Logging and monitoring for the workflows we build, to the extent the platforms allow, and reviewing logs during a support retainer.
• Reporting incidents under section 11.

You are responsible for

• The security of your own tenant, devices, network and user accounts, including enforcing MFA and removing departed staff.
• Approving the data each workflow may access, and revoking our access when it is no longer required.
• Backups of your own systems and data, unless a backup service is expressly included in the SOW.
• Meeting your own legal, professional and insurance obligations, including notifications to regulators, clients and professional bodies.

11. Incident response and breach notification

A security incident is any actual or reasonably suspected unauthorised access to, or loss, disclosure or corruption of, your data or a system we have access to, whether caused by us, a platform, or a third party.

• Notification. We notify your nominated contact without undue delay and in any case within 48 hours of becoming aware of an incident affecting your data or systems, by phone and in writing. We do not wait for a full investigation before telling you.
• Containment. We take immediate steps to contain the incident — disabling affected workflows, revoking or rotating credentials, isolating systems — and coordinate with you before any step that would interrupt your operations.
• Investigation. We provide a written root-cause analysis within 10 business days, including what happened, what data was involved, how it was contained, and what we are changing.
• Your obligations. You remain the entity responsible for assessing whether an incident is an eligible data breach under the Notifiable Data Breaches scheme and for notifying the OAIC and affected individuals. We provide the information and assistance you reasonably need to make that assessment within the scheme's timeframes.
• Cooperation. We cooperate with your insurers, IT provider and any regulator, and preserve relevant logs and evidence.

12. Data retention and deletion

• We access your data within your systems wherever possible and avoid taking copies. Where a copy is unavoidable — for example a sample file used for testing — it is stored encrypted and recorded in the data-flow record.
• Within 30 days after an engagement ends, or earlier on your written request, we delete all copies of your data and personal information in our possession, other than what we must keep to meet legal, tax or professional record-keeping obligations, and we confirm deletion in writing.
• Data inside your own platforms and accounts is not affected — it is yours and stays where it is.
• Where a platform we use on your behalf keeps backups, deletion occurs according to that platform's backup cycle, which we identify in the data-flow record.
• Engagement records — contracts, invoices, SOWs, correspondence and the data-flow record itself — are retained for seven years for legal and accounting purposes.

13. Change control

Once a workflow is live, we change it only through the following process:

1. A change request records what will change, why, the data and systems affected, the risk, and the rollback plan.
2. Changes that alter what data a workflow accesses, add or replace a provider, or affect client-facing outputs require your nominated contact's written approval before they are made.
3. Changes are tested on sample or de-identified data before release wherever practicable.
4. Changes are made during agreed windows and logged in a change register you can inspect at any time.
5. Emergency changes needed to contain a security incident or stop a malfunctioning workflow may be made first and reported to you within one business day.

14. Business continuity and handover

Our engagements are designed so that your firm does not depend on our continued availability.

• All workflows run in accounts you own (section 5) and keep operating whether or not we are engaged.
• Every deliverable includes documentation sufficient for a competent IT provider to understand, maintain and modify it: a plain-English description, the data-flow record, configuration details, the credential register, and any code with comments.
• We identify which workflows are business-critical and recommend a manual fallback for each, so operations continue if a platform or model is unavailable.
• During a support retainer we respond to a reported outage of a workflow we built within one business day, and sooner for workflows identified as business-critical in the SOW.
• If we are unable to continue providing the Services for any reason, the documentation and your ownership of accounts and deliverables allow another provider to take over without our involvement.

15. Intellectual property

• Your data and systems. You own your data, your existing systems and all outputs generated from your data. Nothing in these terms transfers any of it to us.
• Deliverables. On payment in full, you own the workflows, configurations, prompts, templates, documentation and custom code we create specifically for you under the SOW ("Deliverables"), and may modify them and engage others to do so.
• Our pre-existing materials. We retain ownership of tools, frameworks, prompt libraries, code components and know-how that we created before or independently of your engagement ("Our Materials"). Where Our Materials are embedded in a Deliverable, we grant you a perpetual, royalty-free, non-exclusive licence to use and modify them as part of that Deliverable.
• General knowledge. We may reuse general skills, techniques and non-confidential knowledge gained during the engagement, provided we do not use your Confidential Information.
• Third-party platforms. Platforms, models and libraries remain subject to their own licences, which you accept by using them.

16. AI outputs, professional advice and human oversight

• AI systems can produce incorrect, incomplete or biased output. Deliverables are designed with review steps, and you agree to keep a suitably qualified person responsible for any output that is client-facing, relied on for a professional decision, or has legal, financial or regulatory effect.
• We are automation and AI consultants. Nothing we provide is legal, tax, accounting, financial or conveyancing advice, and references to legislation or regulator guidance are general information only. You remain responsible for compliance with the laws and professional rules that apply to your firm.
• You are responsible for how your staff use AI tools outside the workflows we build.

17. Insurance

We maintain professional indemnity insurance and cyber liability insurance appropriate to the Services we provide, with an Australian-licensed insurer. Certificates of currency are available on request and can be provided before an engagement begins. We recommend that you confirm your own cyber and professional indemnity cover extends to the use of AI and automation tools in your practice.

18. Warranties and liability

• We warrant that the Services will be performed with due care and skill by suitably experienced people, and that Deliverables will perform materially as described in the SOW for 30 days after delivery. We will re-perform or correct any non-conforming Service or Deliverable notified within that period at no cost.
• Except for those warranties and any guarantee under the Australian Consumer Law that cannot be excluded, we give no other warranty, including as to the accuracy of AI output or the continued availability or behaviour of third-party platforms.
• To the extent permitted by law, each party's total liability to the other arising out of an engagement, whether in contract, tort (including negligence), statute or otherwise, is limited to the fees paid or payable under that engagement in the 12 months before the event giving rise to the claim.
• To the extent permitted by law, neither party is liable to the other for loss of profit, revenue, goodwill or data, or for indirect or consequential loss.
• The limitations above do not apply to a party's breach of confidentiality (section 7), a party's wilful misconduct or fraud, or liability that cannot lawfully be limited. Where the Australian Consumer Law applies and permits, our liability for a failure to comply with a consumer guarantee is limited to re-supplying the Services or paying the cost of re-supply.

19. Termination and access termination

• Either party may terminate an engagement or retainer on 30 days' written notice. Either party may terminate immediately if the other commits a material breach that is not remedied within 14 days of written notice, becomes insolvent, or, in our case, if continuing would breach the law or a professional obligation.
• On termination you pay for Services performed and non-cancellable third-party costs incurred to the termination date. Prepaid retainer fees for the unused period are refunded if we terminate without cause.
• Access termination. Within 5 business days after the engagement ends, or within 1 business day of your request at any time, we remove ourselves from every account listed in the credential register, delete any keys or credentials we hold, and confirm removal in writing. You should also revoke our access from your side; we provide the register to make that straightforward.
• Handover. We deliver the documentation described in section 14 and transfer any account temporarily held on your behalf (section 5).
• Deletion. We return or delete your data under section 12.
• Sections 7, 8, 11, 12, 15, 16, 18 and 20 survive termination.

20. General

• Governing law. These terms are governed by the laws of Queensland, Australia, and the parties submit to the non-exclusive jurisdiction of the courts of Queensland.
• Disputes. Before starting proceedings, the parties will attempt in good faith to resolve any dispute by discussion between senior representatives within 21 days, and then by mediation in Brisbane, other than for urgent injunctive relief.
• Changes to these terms. We may update these terms by publishing a new version on this page. Changes apply to engagements that start after publication; existing engagements continue on the version in force when the SOW was accepted unless you agree otherwise.
• Notices. Notices must be in writing to the email addresses nominated in the SOW. Incident notifications under section 11 are also made by phone.
• Entire agreement. These terms, the SOW and any DPA or NDA form the entire agreement for an engagement and replace prior discussions. If any provision is unenforceable it is severed and the rest continues.
• Assignment. Neither party may assign an engagement without the other's written consent, not to be unreasonably withheld.

21. Contact

Questions about these terms, requests for our standard Data Processing Agreement, or certificates of currency:

Email: john@tweaked.com.au
Like a Pro AI Consulting, East Brisbane, Queensland

22. Website packages

22.1 About these package terms

• This section applies when you order a website package from us through our website preview tool at likeapro.com.au/projects/ or by quote.
• The rest of these terms also apply. If they conflict with this section, this section prevails for your package, including on GST (22.2) and cancellation (22.10), which replace sections 3 and 19 for packages.

22.2 Packages and prices

• We code, you host: $100 one-off.
• We code, we host: $100 one-off + $20 per month hosting.
• We code, we host, we maintain: $100 one-off + $20 per month hosting + $20 per month maintenance ($40 per month in total).
• All package prices are in Australian dollars and include GST.
• Anything outside the package scope (22.3, 22.5 and 22.6) is quoted separately as "Custom" work. We'll tell you the price first and won't start without your approval.

22.3 The $100 build

• Included: your chosen design from our template range, built with your existing content and images; your homepage plus up to 3 inner pages (for example About, Services and Contact); one round of revisions; a standard contact form that emails enquiries to you; and a mobile-friendly, standards-compliant build with basic on-page SEO (page titles, descriptions, headings).
• Not included (available as Custom work): new copywriting, new photography or stock images, logo design, extra pages, extra revision rounds, online shops or payments, booking systems, membership or login areas, blogs with content management, integrations with other software, and migrating content from pages other than the four above.
• Revision round: after we show you the finished build, you can send us one consolidated list of changes within 14 days. Changes must be within the chosen design and the agreed content, for example wording, image swaps, section order or colours. If we don't hear from you within 14 days, the build is treated as approved.
• Timing: we aim to deliver the first version within 10 business days of receiving your payment and anything we've asked you for. Delays waiting on your content or approvals extend this.
• Your input: you'll provide any content, access or approvals we reasonably need, and tell us promptly if anything we've taken from your current site is out of date or wrong.

22.4 Payment

• The $100 build fee is paid up front, before we start.
• Monthly hosting and maintenance fees are charged monthly in advance, starting on the day your new site goes live on our hosting.
• If a monthly payment is more than 14 days overdue, we may suspend hosting and maintenance after giving you 7 days' written notice, and restore them once the account is paid.

22.5 Hosting ($20 per month): what's included and fair use

• Included: hosting of your package website on our shared hosting platform, an SSL certificate (https), daily backups kept for 14 days, and uptime monitoring.
• Fair use: hosting is designed for a typical small-business brochure website. It includes up to 2 GB of storage and 50 GB of data transfer per month, and covers a static or simple PHP site with a contact form.
• Not included: email hosting or mailboxes, databases or web applications beyond the contact form, Docker containers, Node.js or other server applications, online shops, large file or video hosting, and third-party software licences.
• If your site regularly goes over the fair-use limits, we'll contact you to discuss options, such as a Custom hosting quote. We won't charge extra without your agreement, but we may limit service if heavy use affects other customers.
• We aim for high availability but can't guarantee uninterrupted service. Planned maintenance is done outside business hours where practical.

22.6 Maintenance ($20 per month): what's included and fair use

• Included: up to 30 minutes of work, or 2 small change requests, per month, whichever comes first. Typical requests are updating text, prices, opening hours or staff details, swapping images, and fixing broken links. We also apply security and software updates for your site.
• Unused time doesn't roll over to the next month.
• We aim to complete requests within 3 business days.
• Larger changes (new pages, new features, redesigns) are quoted as Custom work.

22.7 Your content and responsibilities

• You confirm you own, or have permission to use, all content, images, logos and trademarks on your site, including those we take from your existing website at your request.
• You're responsible for the accuracy and legality of your site's content, including prices, claims and any legally required information (for example your ABN or professional disclosures).
• You'll check and approve the site before it goes live.

22.8 Ownership

• Once the build fee is paid, you own your content and the website files we build for you.
• Our templates and their underlying code are reused for other customers, so we keep ownership of them. We grant you a permanent, royalty-free licence to use, change and host the template code as part of your own website, including after you leave us. You can't resell the template itself.

22.9 Your domain and email

• Your domain name stays yours and should stay registered in your (or your business's) name. If we need access to point the domain at your new site, we'll only change the settings needed for that.
• Your existing email service isn't affected or moved as part of a package.

22.10 Cancellation: no lock-in

• Hosting and maintenance are month to month with no minimum term. You can cancel any time by emailing us.
• Cancellation takes effect at the end of the month you've already paid for. We don't refund part months.
• When you leave, we hand over your website files (a downloadable copy of the built site) within 5 business days of your request or of cancellation, so you can host them anywhere.
• You can cancel maintenance on its own and keep hosting.
• We delete the hosted copy of your site and our backups 30 days after your service ends.

22.11 When we can suspend or end a package

We may suspend or end a package, with notice where practical, if fees remain unpaid after the notice in 22.4, or if the site is used for unlawful, infringing, harmful or abusive content or activity. If we end a package for our own convenience, we'll give you at least 30 days' notice, refund any fees paid for the unused period, and hand over your files.

22.12 Consumer guarantees

Our services come with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in these terms limits those rights. Otherwise, the warranties and liability limits in section 18 apply.

22.13 Changes to prices and these package terms

We'll give you at least 30 days' written notice of any change to monthly fees or to this section that affects your existing package. If you don't agree, you can cancel under 22.10 before the change takes effect.

23. Website preview tool

• The preview tool at likeapro.com.au/projects/ is free. A preview is a temporary demonstration, not a live website, and may contain errors or placeholder text marked as such.
• By starting a preview you confirm that you own the website you enter, or are authorised by its owner to request the preview.
• We read the homepage you enter, and up to two pages it links to on the same website (such as an About page and a Services page), once each. We identify our tool honestly and respect robots.txt. Content may be processed by our AI provider (Anthropic) as described in our Privacy Policy.
• Previews are private, are hidden from search engines, and are deleted after 60 days (120 days if you request a rebuild). You can ask us to delete yours sooner at any time.
• We may decline or remove any preview, limit use of the tool, or change or withdraw it at any time.
• You must not use the tool for anyone else's website without permission, to overload any website, or to try to get around our limits or security checks.