Privacy Policy

TradieCEO Pty Ltd ("TradieCEO", "we", "our", or "us") operates the website at https://www.tradieceo.com.au and the TradieCEO application (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By accessing or using TradieCEO, you agree to this Privacy Policy.

TradieCEO is built for Australian trade businesses and complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2.1 Information you provide directly

• Account registration details (name, email address, phone number, business name)
• Business profile information (ABN, trade type, service areas, logo)
• Billing and payment details (processed securely via Stripe — we do not store card numbers)
• Content you create in the Service (quotes, invoices, job notes, customer records)
• Communications you send to us (support requests, contact form submissions)

2.2 Information collected automatically

• Log data (IP address, browser type, pages visited, time and date of visits)
• Device information (operating system, device identifiers)
• Usage data (features used, actions taken within the app)
• Cookies and similar tracking technologies (see Section 8)

2.3 Information from third-party integrations

When you connect third-party services to TradieCEO, we receive information necessary to provide the integration:

• Google Calendar — calendar events, availability, and scheduling data accessed via the Google Calendar API. We use this data solely to book and sync jobs on your behalf.
• Xero / QuickBooks — invoice and accounting data necessary to sync financial records.
• Stripe — payment processing data (we receive transaction confirmations, not raw card details).

TradieCEO's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar at any time from Dashboard → Settings → Integrations. Disconnecting immediately revokes our access and we delete your stored refresh token within 30 days.

We use the information we collect to:

• Provide, operate, and improve the TradieCEO Service
• Process transactions and send related information (receipts, invoices)
• Book jobs, sync calendars, and manage scheduling on your behalf
• Send automated customer communications (quotes, job confirmations, review requests) that you have configured
• Respond to your comments and support requests
• Send you technical notices, updates, and security alerts
• Monitor and analyse usage to improve our features and user experience
• Detect, investigate, and prevent fraudulent or illegal activity
• Comply with legal obligations

We will not use your personal information for purposes unrelated to providing the Service without your prior consent.

We do not sell your personal information. We share information only in these circumstances:

• Service providers — trusted third parties who assist us in operating the Service (e.g. Supabase for database hosting, Twilio for SMS, OpenAI for AI features). These parties are bound by confidentiality obligations and may only use your data to provide their services to us.
• Your team members — information you share within your TradieCEO account is visible to other users you have added to your account.
• Legal requirements — if required by law, court order, or government authority, or to protect the rights, property, or safety of TradieCEO, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.
• With your consent — for any other purpose with your explicit consent.

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

When you close your account, we will delete or anonymise your personal data within 90 days, except where we are legally required to retain it (e.g. financial records under Australian tax law, which we retain for 7 years).

Google Calendar refresh tokens are deleted within 30 days of disconnecting the integration.

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction:

• All data is encrypted in transit using TLS 1.2+
• Sensitive credentials (e.g. OAuth refresh tokens) are encrypted at rest using AES-256
• Access to production systems is restricted to authorised personnel only
• We use Supabase Row Level Security to enforce data isolation between tenants
• Regular security reviews and dependency audits

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you become aware of a security issue, please contact us at tradieceo@gmail.com.

We use cookies and similar tracking technologies to operate the Service and understand how you use it. The types of cookies we use:

• Strictly necessary — required for authentication and session management. Cannot be disabled.
• Analytics — help us understand how users interact with the Service so we can improve it. These are anonymised.

You can control cookies through your browser settings. Disabling strictly necessary cookies may prevent the Service from working correctly.

Under the Privacy Act 1988 (Cth) and applicable law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request we correct inaccurate or incomplete information
• Deletion — request deletion of your personal information (subject to legal retention obligations)
• Portability — receive your data in a structured, machine-readable format
• Opt-out — unsubscribe from marketing communications at any time
• Withdraw consent — for processing based on consent (e.g. disconnect Google Calendar)

To exercise any of these rights, contact us at tradieceo@gmail.com. We will respond within 30 days.

TradieCEO is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.

Our servers are hosted in Australia and the United States (via Supabase). Some of our service providers may process data in other countries. Where we transfer data outside Australia, we ensure appropriate safeguards are in place consistent with the Australian Privacy Principles, including contractual protections with our service providers.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or a prominent notice on the Service before the changes take effect. The "Effective Date" at the top of this page indicates when this policy was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Privacy Officer:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).