Privacy Policy

1. About This Policy

Quoteroo Pty Ltd ("we", "our", "us") operates quoteroo.com.au (the "Service"). We are committed to protecting your privacy and complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our AI-powered quoting platform for Australian tradies.

2. Information We Collect

Personal Information

We collect the following types of personal information:

• Account Information: Name, email address, phone number, business name, Australian Business Number (ABN)
• Business Details: Trade type, business address, logo, payment information
• Quote Data: Customer information, project details, pricing, line items, communications
• Usage Information: Log data, device information, IP address, browser type, usage patterns
• Communications: Chat messages, email correspondence, voice recordings, support tickets

Automatically Collected Information

• Technical information about your device and internet connection
• Usage statistics and interaction patterns with our Service
• Location information (general geographic area based on IP address)

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: Creating quotes, generating PDFs, managing your account, processing payments
• AI Processing: Training and improving our AI quoting algorithms to provide better pricing suggestions
• Communication: Sending quotes to customers, account notifications, support responses
• Business Operations: Billing, accounting integration, customer support, fraud prevention
• Improvement: Analyzing usage patterns to enhance our Service and develop new features
• Legal Compliance: Meeting legal obligations, tax requirements, and regulatory compliance

4. Information Sharing and Disclosure

Third-Party Service Providers

We share your information with the following trusted service providers:

• Supabase: Database hosting and user authentication (data stored in Australia/Singapore)
• Vercel: Web hosting and content delivery
• Stripe: Payment processing and subscription billing
• Resend: Email delivery services
• AI Providers: Anthropic (Claude), OpenAI (GPT), Google (Gemini) for quote generation
• Xero: Accounting software integration (when you connect your account)

Legal Disclosures

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

While we strive to protect your information, no internet-based service can be completely secure. We encourage you to take steps to protect your account, such as using strong passwords.

6. Data Retention

We retain your personal information for as long as:

• Your account remains active
• Required to provide our services
• Necessary for legal, regulatory, or business purposes
• Required for tax and accounting obligations (typically 7 years)

When we no longer need your information, we securely delete or anonymize it in accordance with our data retention policies.

7. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Complaint: Lodge a complaint about our handling of your personal information
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us using the details provided below. We will respond to your request within 30 days.

8. Overseas Disclosure

Your personal information may be stored or processed outside Australia by our service providers:

• United States: Vercel (hosting), Stripe (payments), AI providers
• Singapore: Supabase (database)
• European Union: Some service providers have EU operations

We ensure these providers maintain appropriate privacy and security standards compatible with Australian privacy laws.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns
• Improve service performance

You can control cookies through your browser settings, but this may affect service functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us