Privacy Policy

1. Who this policy applies to

This Privacy Policy applies to the TradieDocket website, web application and related support services. In this policy, "TradieDocket", "we", "us" and "our" refer to the operator of the TradieDocket service.

2. Information we collect

Depending on how you use TradieDocket, we may collect:

• account details, such as your name, email address and authentication information;
• workspace and business details, such as business name, ABN and contact details;
• information you enter about customers, jobs, work logs, expenses, quotes and invoices;
• billing status and subscription metadata from Stripe, but not your complete card number;
• device, browser, usage and diagnostic information used to operate and improve the service;
• approximate or precise location information when you actively enable location-based reminders or capture a job location; and
• communications you send to our support or privacy contacts.

3. How we collect information

We collect information directly from you when you create an account, configure your workspace, use the application, start a subscription or contact support. We also receive limited information from service providers that process authentication, billing, hosting, analytics and email delivery on our behalf.

4. How we use information

We use information to:

• provide, secure and maintain TradieDocket;
• authenticate users and keep workspace information separated;
• create and manage subscriptions and respond to billing issues;
• send account verification, password reset and service-related emails;
• provide requested location, address and reminder functionality;
• investigate errors, prevent misuse and protect the service;
• understand product adoption and improve user workflows; and
• comply with legal obligations and resolve complaints.

5. Service providers and disclosures

We use specialist providers to operate TradieDocket. They may process information only to provide their contracted services or as otherwise described in their own terms and privacy policies.

• Supabase provides database hosting, authentication and related backend infrastructure.
• Vercel provides website, application and server-function hosting.
• Stripe processes subscription payments, billing details and billing portal services.
• PostHog provides privacy-minimised product and website analytics. Our PostHog project is configured in the European Union region.
• Email delivery providers, including the provider connected to Supabase Auth, deliver verification, password reset and service emails.
• Address and mapping providers may process an address or coordinates when you request address matching or location functionality.

We may also disclose information when required by law, to protect legal rights or safety, or as part of a business transfer subject to appropriate protections.

6. Overseas processing

Some providers operate infrastructure or support teams outside Australia. This means information may be processed in Australia, the European Union, the United States and other locations where our providers operate. Provider locations can change as their infrastructure changes.

7. Analytics, cookies and local storage

TradieDocket uses browser storage, service workers and similar technologies to keep the app functioning, preserve form drafts, support installation and deliver updates. We use PostHog to understand product usage and conversion. Analytics properties are designed to use IDs, statuses, counts and other minimised data rather than sensitive customer or job content.

We do not currently use Meta Pixel unless and until paid Meta advertising is introduced. If advertising trackers are added, this policy and any required consent controls will be updated.

8. Data security and retention

We use reasonable technical and organisational safeguards, including authentication, workspace access controls, database security policies, encrypted connections and restricted production access. No online system can be guaranteed completely secure.

We retain information while your account is active and for as long as reasonably required to provide the service, meet legal and accounting obligations, resolve disputes, prevent fraud and maintain backups. Backup copies may remain for a limited period after active records are deleted.

9. Access, correction, export and deletion

You may request access to, correction of, export of or deletion of personal information by emailing support@tradiedocket.com. We may need to verify your identity and authority over the relevant workspace before completing a request.

Some information may need to be retained where required by law, for legitimate security or dispute purposes, or in routine backups until those backups expire.

10. Privacy complaints

Send privacy questions or complaints to support@tradiedocket.comwith the subject "Privacy request". We will investigate and aim to respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Children

TradieDocket is a business administration service and is not directed to children. You must be at least 18 years old or otherwise legally able to enter a binding agreement to open a paid account.

12. Changes to this policy

We may update this policy when our product, providers or legal obligations change. The updated version will be published on this page with a revised date.