Privacy Policy

Tragent Technologies Pty Ltd (ABN 99 696 232 050) operates Tragent. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and this policy explains how.

Personal information means information about an identified individual, or someone who is reasonably identifiable from it. In a trade business that is mostly names, addresses, phone numbers and email addresses — yours, your staff’s, and your customers’.

Your account

Your name, email address, and a securely hashed version of your password. We never store the password itself.

Your business

Business name, ABN, address, phone, logo, the bank details printed on your invoices, default terms and quoting settings.

Your team

The name, email address and role of each person you invite, and the hours they record against jobs.

Your customers

Whatever you enter about them — name, site and postal address, email, phone, and the quotes, jobs, invoices, notes and photos attached to them.

Your work

Quotes, jobs, appointments, timesheets, expenses, receipt images, job photos and invoices, including the amounts on them.

Billing

Your plan, subscription status and billing history. Card details go straight to Stripe and are never stored on our systems.

Technical

IP address, browser and device type, pages visited, actions taken in the app, and error diagnostics. We use these to keep the app working and to see which features get used.

Mostly directly from you — when you sign up, fill in your business profile, add a customer, or upload a receipt or photo.

Some is collected automatically as you use the app: log data, analytics events and error reports. Some comes from services you connect — Stripe tells us the status of your subscription, and Xero tells us about the organisation you have authorised.

Where we hold information about your customers, we collected it from you rather than from them. That means you need the right to give it to us — see “Information about your customers” below.

• to give you the service — building quotes, running jobs, sending invoices, scheduling work
• to send transactional email on your behalf, such as a quote or invoice to your customer
• to verify your email address and keep accounts secure, including the bot check at sign-up
• to bill you and manage your subscription
• to answer your support questions
• to find and fix faults, and to keep the service secure and reliable
• to understand which features are used so we can improve the product
• to meet our legal and tax obligations

We do not sell personal information, and we do not disclose it for anyone else’s marketing.

When you use the app you are the one deciding what to record about your customers. We hold and process that information on your behalf and under your instructions.

So it is up to you to collect it fairly, to tell your customers how it will be handled, and to have their consent where the law requires it. If a customer of yours approaches us about their information, we will refer them to you.

If you use the AI quote builder or receipt scanning, the description, photos, receipt images and quote details involved are sent to our AI provider so it can produce a draft. Price checks may also send a search query about the materials you are quoting to a web search tool.

We use these providers under commercial API terms that do not allow your content to be used to train their models. Only what a feature needs is sent — we do not hand over your customer list or your financial records.

We use service providers to run the app. They only get what they need for their part of it, and they cannot use it for their own purposes.

Hosting and database

Runs the app and stores your records.

Object storage

Holds uploaded logos, receipts and job photos.

Stripe

Takes subscription payments and holds your card details.

Resend

Delivers email — verification, quotes and invoices.

OpenAI

Powers AI quote drafting and receipt reading.

Google Maps Platform

Suggests and validates Australian addresses.

Cloudflare

Runs the bot check on the sign-up form.

PostHog

Product analytics — which features get used.

Sentry

Error and performance diagnostics.

OneSignal

Sends push notifications, if you turn them on.

Xero

Receives accounting transactions, if you connect it.

We may also disclose information where the law requires it, to enforce our terms, or to protect someone’s safety. If the business is ever sold or merged, your information may transfer with it, and this policy would continue to apply.

Several of the providers above are based outside Australia, mainly in the United States and the European Union, and your information may be stored or processed there.

Before we use an overseas provider we take reasonable steps to satisfy ourselves that it handles personal information consistently with the Australian Privacy Principles, including through the terms of our agreement with it.

We use cookies to keep you signed in and to remember basic preferences. Those ones are necessary — the app cannot work without them.

We also use product analytics and error monitoring to see how the app performs and where it breaks. You can block cookies in your browser, but parts of the app will stop working if you block the necessary ones.

While you have an account we send service email you cannot opt out of — verification, password resets, billing notices and important service changes.

Any product or marketing email we send includes an unsubscribe link and honours it. Push notifications stay off until you turn them on, and you can turn them off again in your browser or device settings at any time.

• traffic to and from the app is encrypted in transit
• passwords are stored hashed, never in plain text
• credentials for connected accounting services are stored encrypted
• uploaded files are private, and are served through short-lived signed links
• access is scoped to your business — one business cannot read another’s records
• access to production systems is limited to the people who need it

No system is perfectly secure. If a data breach happens that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

We keep your information while your account is open, and for as long afterwards as we need it for legal, tax or dispute-resolution reasons.

When a team member deletes their own login, their personal details go and the business records they worked on stay — hours recorded against a job keep the hours and lose the name, so a job’s costs do not move because someone left.

When an owner closes the business account, we delete the business and everything in it: customers, quotes, jobs, invoices, expenses, uploaded files, and every team login attached to it. Backups age out on their normal cycle.

You can see and correct most of your information in the app, and download your quotes and invoices as PDFs at any time.

For anything you cannot reach yourself, email sam@tragent.com.au and ask. We will check who you are and respond within 30 days. There is no charge for asking, though we may charge a reasonable amount for a large or complicated request — we will tell you before we do.

If we cannot give you access, or cannot make a correction you have asked for, we will tell you why in writing.

Email sam@tragent.com.au with what happened. We will acknowledge it within 5 business days and aim to resolve it within 30 days.

If you are not happy with how we handle it, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We update this policy as the product changes. The date at the top always shows the current version, and we will email you before a change that materially affects how we handle your information.

Email

sam@tragent.com.au

Post

Tragent Technologies Pty Ltd

Our Terms of Service cover the rest of the agreement between us.