Privacy Policy

Who we are

TradeWrapt Pty Ltd (ABN 00 000 000 000) makes TradeWrapt, a job record and invoicing app for solo tradies in Australia. In this policy, "we" means TradeWrapt Pty Ltd. "You" means the tradie holding the account.

We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

Your account

• Email address and login credentials.
• Your business profile: trading name, ABN, phone, address, GST registration status, and the BSB and account number you want printed on your invoices.
• Subscription status and the app store receipt that backs it.

Your clients

Whatever you type into a client record: name, phone, email, address and any notes you add. You enter it, you own it, and it is only ever visible to your account.

Your jobs

• Job title, description, status and the client it is attached to.
• Photos taken with the in-app camera, each with the time it was captured and any note you attach to it.
• Job notes.
• Expenses, invoice line items, totals and GST amounts.
• Payment records: amount, time, and whether it was a payment link or Tap to Pay.

Technical information

Basic app and server logs: device type, app version, timestamps and error reports. We use these to keep the app working and to fix crashes.

We do not collect background location. Photos are stored as you took them; we do not add location data to them.

Where it is stored

Account data, client records, job data and invoices sit in a Postgres database hosted by Supabase. Photos sit in Supabase object storage. Both are cloud-hosted and encrypted in transit.

Your photos are private to your account. They are not on a public URL. When the app or the web dashboard needs to show one, it requests a short-lived signed link that expires. Nobody can browse to your photos without a link generated for your account.

Jobs, photos and notes are also stored on your phone so the app works with no signal. They sync when you are back in range.

Who we share it with

• Stripe — payment links and Tap to Pay run through Stripe. Card details go straight to Stripe; we never see or store them. Stripe receives the amount, the invoice reference and your merchant details, and handles that information under its own privacy terms.
• Apple and Google — subscriptions are billed through the App Store and Google Play. They handle your billing details and tell us whether your subscription is active.
• Supabase — our database and storage provider, as described above.
• Anyone you send something to — when you send an invoice, a payment link or an evidence PDF, it goes to the address or number you choose, from your own email or SMS app.

That is the list. We do not sell your data. We do not share it with advertisers or data brokers. We do not use your job photos or client records to train anything.

We may disclose information if a law or a court order requires it. Some of our providers store data outside Australia; we only use providers that commit to protecting it to a comparable standard.

How long we keep it

We keep your data while your account is active.

Completed jobs work differently, and you should understand this before you start. When you press Complete, every photo and note attached to that job is locked. Locking is enforced by the database itself, not just the app, which means an individual locked photo or note cannot be edited or deleted afterwards. Not by you, not by us, not by our support staff. That is the whole point of it.

You can still delete the entire job, and you can still delete your account. Both remove the locked records with it. The app warns you before you do either, because the evidence goes with it.

After you close your account we remove your data within 30 days. The exception is anything we have to keep for tax or legal reasons, which is mostly invoice and payment records that we and Stripe are required to retain.

Your clients' information is your responsibility

When you enter a client's name, phone, email or address, you are the one collecting their personal information. We are just holding it for you. That means:

• Only collect what you actually need to do the job and send the invoice.
• Tell your clients how you handle their details if they ask.
• Be careful what ends up in a photo. If you shoot inside someone's home, the photo is evidence of your work, not a tour of their house.
• If a client asks you to correct or delete their record, handle it. You can edit and delete client records at any time.

If your own business is covered by the Privacy Act, you have obligations of your own. This policy covers what we do, not what you do.

Your rights

• Access — you can see everything in the app and the web dashboard. Ask us and we will send you a copy of what we hold.
• Correction — edit your profile and client records in the app. If something is wrong that you cannot change yourself, tell us and we will fix it.
• Deletion — delete a job or delete your account from Settings. Locked evidence goes when the job or the account goes.
• Complaints — contact us first and we will respond within 30 days. If you are not happy with the outcome, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Data is encrypted in transit. Access to your account is restricted by row-level security in the database, so one account cannot read another's jobs, clients or photos. Photos are served only through expiring signed links. No system is perfect; if we ever have a breach that is likely to cause you serious harm, we will notify you and the OAIC as required under the Notifiable Data Breaches scheme.

Children

TradeWrapt is a tool for running a business and is not intended for anyone under 18. We do not knowingly collect information from children. If we find out we have, we delete it.

Cookies and this website

This marketing site does not set tracking cookies and does not run advertising pixels. The web dashboard uses a session cookie to keep you logged in. That is it.

Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. For anything significant we will tell you in the app.

Contact

Privacy questions, access requests and complaints go through our contact page. Pick "Privacy request" from the subject list so it gets to the right place.