Privacy policy
Last updated 27 September 2026
TradeFlowAu (ABN 54 341 947 739) is an Australian business based in New South Wales ("TradeFlowAu", "we", "us"). This policy explains what personal information we handle, why, and your choices. We aim to follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Two kinds of information
Your account information. When a business or staff member signs up, we collect names, email addresses, passwords (stored encrypted by our login provider, never readable by us), business details such as ABN, phone, address, logo, and payment details you choose to show on invoices.
Information businesses enter about their customers. Businesses using TradeFlowAu store their own customers' names, contact details, addresses, job notes and photos, quotes and invoices. For that information, the business is responsible for how it's collected and used, and we handle it on the business's behalf only to provide the service.
What else we collect
- When a customer accepts a quote online: the name they type, the time, their IP address and browser type, kept as a record of the acceptance.
- Messages sent through our contact form: name, email, phone, business name and message.
- Usage records needed to run plan limits, such as how many emails a business has sent this month.
We don't use advertising trackers and we don't sell personal information.
Why we use it
- To provide TradeFlowAu: sign-in, storing jobs, quotes and invoices, and sending emails a business asks us to send.
- To answer enquiries and support requests, and to arrange paid plans.
- To keep the service secure, prevent misuse, and apply plan limits.
- To meet legal obligations.
Who we share it with
We use these service providers to run TradeFlowAu. They process information only to provide their service to us:
- Supabase: database, sign-in and file storage.
- Render: website and email-server hosting.
- Resend: delivering emails such as quotes, invoices and sign-in emails.
- Google Fonts: loading the fonts used on our pages.
- Stripe: processing payments for paid plans, once online payments are offered.
Some of these providers are based in, or store information in, other countries including the United States. We choose providers with strong security practices. We may also disclose information if required by law.
How long we keep it
We keep account information while the account is active. When a business owner deletes their business in Settings, its records, photos, files and staff logins are deleted. Staff can delete their own login at any time. Enquiries are kept for as long as needed to respond and for our records. Backups held by our providers may take some time to expire.
Security
All connections are encrypted, each business's data is separated from every other business at the database level, and staff logins only see the jobs assigned to them. No system is perfectly secure, so please use a strong password and keep it private.
Access, correction and complaints
You can view and update most of your information in the app. To ask for a copy of your information, a correction, or to make a privacy complaint, email us at tradeflowaustralia@gmail.com. We'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
If you're a customer of a business that uses TradeFlowAu, please contact that business first about information they hold about you.
Changes
We may update this policy. We'll change the date at the top and, for significant changes, let account holders know by email or in the app.