1. Who we are
TrackYaTradie is operated by Bailey Holdsworth trading as TrackYaTradie (ABN 29 813 854 114) ("we", "us", "our"), an Australian business. This policy explains how we collect, use, store and share personal information across the TrackYaTradie web app, iOS app and Android app (together, the "Service"), and on our website.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Questions or requests can always go to support@trackyatradie.com.
2. Personal information we collect
When you use the Service, we collect:
- Account details - your name, email address, phone number, company name, trade type and team size, collected when you register.
- Business profile - details you add for quoting and invoicing, such as your business name, ABN, logo, and the bank account name, BSB and account number you want shown on invoices.
- Team member details - the name, email address, phone number and hourly pay rate of workers you add to your company.
- Work records - projects, per-day hour logs (including the free-text work descriptions your team writes), tasks, supply costs, quotes, invoices, and photos or documents uploaded to projects and tasks.
- Payment details - your subscription payments are processed by Stripe. We never see or store your full card number; we hold your Stripe customer and subscription identifiers.
- Partial signup details - if you start the free trial form and enter your email but do not finish, we keep that email address and the ad-attribution details of your visit so we can follow up and measure our advertising.
- Technical data - IP address (used for rate limiting and abuse prevention), browser and device information, and hosting logs. If our error reporting service is enabled, error reports may include your IP address, browser details and the page you were on.
3. Your clients' information
When you add clients to TrackYaTradie, you give us their personal information - name, email address, phone number, address and any notes you write. You are responsible for having the right to share that information with us; we store and process it on your behalf so the Service can work for you. In particular:
- We email your quotes, invoices and variations to your clients (including PDF attachments) using our email provider, sent on your behalf with your business name.
- Quotes and invoices can be viewed by your client through a private link, without a login. Anyone with the link can view that document, so share links carefully.
- If you enable online payments (where that feature is available on your account), your client pays through Stripe. Their card or bank details go directly to Stripe on your connected Stripe account - we never see them. Their email address may be pre-filled on the payment page.
If one of your clients contacts us about their information, we will work with you to resolve the request. Clients can also contact us directly at support@trackyatradie.com.
4. How we use personal information
- Providing and operating the Service, including syncing across web, iOS and Android
- Billing, account management and customer support
- Service emails - things like welcome emails, receipts, payment issues and security notices
- Marketing emails about features and offers, which you can opt out of at any time (section 12)
- Measuring and improving the Service and our advertising (section 5)
- Preventing fraud, spam and abuse
- Meeting our legal obligations
5. Advertising and measurement
We advertise on Meta (Facebook/Instagram) and Google, and we measure whether that advertising works. Here is exactly what that involves:
- Meta Pixel and Google Ads tags run on our public website, including the login/registration and payment confirmation pages. We do not include them in the signed-in app (your dashboard and billing pages) or on the pages where your clients view quotes and invoices, and no advertising events are sent from those pages.
- Server-side measurement (Meta Conversions API) - when you start a trial or purchase a subscription, we send Meta a conversion event that includes your email address and phone number in hashed form, plus your IP address, browser information and Meta's ad-click identifiers (the fbc/fbp cookie values).
- Google enhanced conversions - when you start a trial or purchase, your email address is shared with Google to match the conversion to the ad you clicked.
- Attribution - we record how you found us (ad-click identifiers, campaign tags, referrer and landing page) in your browser's storage and against your company record, so we know which advertising brought you in.
You can opt out of personalised advertising through Meta ad preferences and Google ad settings. See the Cookie Policy for the full list of cookies and how to block them.
6. Cookies and local storage
We use a small number of advertising cookies (set by Meta and Google), a bot-protection cookie on the signup form, and browser local storage for sign-in and convenience features. The Cookie Policy lists each one, what it does, and your choices.
7. Who we share information with
We do not sell personal information. We share it only with the service providers that run TrackYaTradie, and only for the purposes described here:
- Google Firebase - authentication, database and file storage (all app data, including photos and attachments)
- Stripe - subscription billing, and online invoice payments from your clients if that feature is available and you enable it (see section 3)
- Vercel - website and API hosting, including server logs
- Resend - sending email, both to you and, on your behalf, to your clients
- Cloudflare Turnstile - bot protection on the signup form
- Sentry - error reporting, when enabled
- Meta and Google - advertising measurement, as described in section 5
- Xero - only if you connect it. Depending on which syncs you use, we send Xero your invoices, bills and costs, and for payroll timesheet sync, your workers' names, hours and pay information matched to your Xero employees.
- Trustpilot - we only fetch our public review rating for display; we send them nothing about you
We may also disclose information where the law requires it, or to protect our rights, safety or property.
8. Overseas disclosure
Some of the providers above - including Google, Meta, Stripe, Cloudflare, Vercel, Resend and Sentry - are based in the United States or store data in overseas data centres. Where personal information is disclosed overseas, we rely on the providers' contractual commitments and security practices to protect it to a standard consistent with the Australian Privacy Principles.
9. Security
Data is encrypted in transit and at rest. Access to company data is isolated per company through database security rules. Xero connection tokens are encrypted and accessible only to our servers. Payment card details are handled entirely by Stripe. No online service can promise perfect security, but we take reasonable steps to protect your information from misuse, interference, loss and unauthorised access.
10. Retention and backups
- We keep your data while your account is active.
- If your subscription ends, we retain your data so you can export it or pick up where you left off if you return. You can request deletion at any time.
- We run automated backups of our database; deleted data may persist in backups for a limited period before rotating out.
- Billing and transaction records may be kept for up to 7 years as required by Australian tax law.
- De-identified, aggregated usage data may be retained for service improvement.
11. Access, correction and deletion
You can view and edit most of your information directly in the app. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing support@trackyatradie.com.
To delete your account and data, follow the steps on the account deletion page. Deletion requests are processed within 7 business days.
12. Marketing emails
We send marketing emails - product news, tips and offers - in line with the Spam Act 2003 (Cth). Every marketing email identifies us as the sender and includes a working unsubscribe link. Opting out stops marketing emails only; you will still receive service emails about your account, billing and security.
13. Data breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
14. Complaints
If you think we have mishandled your personal information, email support@trackyatradie.com and we will respond within 30 days. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
15. Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect personal information from children.
16. Changes to this policy
We may update this policy as the Service changes. The date at the top shows when it was last updated; significant changes will be flagged on the website or by email.