Privacy Policy

This policy explains how [business legal name], ABN [ABN] handles personal information in SubbieChase, in line with the Australian Privacy Principles.

What we collect

• Account details: the email address and password of each person who signs in (passwords are never stored in readable form).
• Subcontractor details entered by builders: business name, contact name, email, optional mobile number and ABN, trade.
• Compliance documents and what is recorded about them (type, insurer or issuer, policy or licence number, dates). Documents can contain personal information such as names and licence numbers.
• Records of emails sent (to whom and when), and basic technical logs.

We don't collect health information, and we don't sell personal information or use it for advertising.

Why we use it

To provide SubbieChase: storing documents, working out expiry status, emailing reminders to subcontractors on the builder's behalf, producing reports, and billing.

Who else handles it (and where)

• Supabase — database and file storage, in Sydney, Australia.
• Vercel — runs the website; server processing in Sydney, Australia.
• Anthropic — when automatic reading is used, the uploaded file is sent to Anthropic's AI service (processed in the United States) to suggest the document's details. [Confirm Anthropic's current data-retention terms for API use.]
• Resend — sends our emails (processed in the United States).
• Stripe — processes payments; we never see or store full card numbers.
• GitHub — stores encrypted nightly backups (kept for 7 days).

How long we keep it

While the organisation's account is open. Builders can permanently delete a subcontractor or their whole organisation at any time; encrypted backup copies are overwritten within 7 days.

Access, correction and complaints

Subcontractors can see what a builder holds about them through their upload link, and can ask the builder to correct or delete it. Anyone can contact us at [contact email] to access or correct their information or to make a complaint; if you're not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).