Privacy policy
Last updated 28 October 2026
OzTrady handles personal information in line with the Australian Privacy Principles. This explains what we collect and why.
What we collect
- Account details: name, email address and role of each person a business invites, and, if they give it, their mobile number and whether they agreed to receive WhatsApp messages.
- Employment details the business records about its team: employment type, position, start and finish dates, ordinary hours, award and classification, pay basis and pay or charge-out rates, payroll ID, a contractor's business name and ABN, and an emergency contact (name, relationship, phone). Pay details are shown only to the business's owners and admins and to the person. OzTrady does not collect tax file numbers, bank or superannuation details.
- Licences and tickets: the type (for example White Card, gas fitting licence, first aid), its number, who issued it, issue and expiry dates, notes, and whether a manager has checked it. Used to remind the person and the business before a licence expires and to warn when work needing a licence is given to someone without a current one. Seen by the person and by the business's people who manage the team; people who give out work see only which types each person holds and when they expire.
- Work records the business enters: jobs, tasks, notes, photos and documents, inventory, supplier quotes (including the name of the person who replied for the supplier), material requests from the crew, purchase orders, deliveries (including photos of delivery dockets) and supplier bills, quotes, invoices and payments, the business's customers and their contact people (name, role, email, phone, billing and site address, and whether they agreed to job updates on WhatsApp), and the suppliers it buys from and their contact people (name, role, email, phone).
- When a customer views, accepts or declines a quote online (from the private link the business sends): when it was opened, and for an acceptance the name they type, the time, their internet (IP) address and browser, and the version of the quote they accepted; for a decline, any reason they give. This is kept with the quote as the business's record of the agreement.
- Location: only if a team member chooses to share it from the phone app, and when they check in or out of a job (where their phone is at that moment and how accurate the reading is, kept with their time record so the business can confirm they were on site). It is not read in the background or outside work. Team members are shown a notice and accept it before their first check-in.
- Phone app: a notification address for the phone, so job and task updates can reach it.
- Technical data: sign-in times, device and browser type, and error logs, to keep the Service secure and working.
Why we use it
To run the Service for the business, send invitation, password, quote and invoice emails and the job updates a business sets up for its customers (by email, or WhatsApp where the customer agreed), send phone notifications and (where the business switches it on) WhatsApp messages about work, keep a history of changes, protect against misuse, and give support. We do not sell personal information or use it for advertising.
Who sees it
Each business can see only its own information, and access inside a business depends on a person's role. We use trusted providers to run the Service. They handle data only to provide their part of it:
- Hosting, storage and sign-in: Amazon Web Services, in Sydney, Australia.
- Email: our email provider sends invitations, password resets, quotes and invoices.
- Phone notifications: Expo, Google (Firebase) and Apple deliver notifications to phones. They receive the phone's notification address and the notification text.
- Where a business switches them on: WhatsApp (Meta) receives the mobile number and first name of the team member or customer contact being messaged, and the update being sent; Xero receives the quotes and invoices the business sends to it, with its customers' details, and we read back their status and the payments recorded there. These services are connected to the business's own WhatsApp and Xero accounts and have their own privacy policies.
- Payments: where online subscription payments are switched on, our payment provider handles them.
Our servers are in Australia. Some of these providers (for example Expo, Google, Apple and Meta) may handle data outside Australia, including in the United States.
Keeping it safe and how long
Data is encrypted in transit and access is limited to those who need it. Records are kept while the account is active and removed items are kept for the business's records. After an account ends we keep data only as long as needed for legal and accounting reasons.
Your rights
You can ask to see or correct the personal information we hold about you. If you use OzTrady through your work, you can also ask for your account to be removed under My account (on the website or in the phone app); your business then removes your personal details, while past work records stay with the business without your name. If you are a customer or worker of one of our business customers, please contact that business first. If you think we have mishandled your information, contact us and we will respond; you may also contact the Office of the Australian Information Commissioner (oaic.gov.au).