Privacy policy
In force from 30 July 2026.
The short version
We hold your business details, your quotes, and the contact details of the clients you quote. We don't sell any of it. We don't use one customer's data to serve another. Your clients' names, addresses and quote contents are not visible to us in the admin tools — that's a deliberate limit, described below.
Who is responsible
Noah Nicholas Coulson, ABN 98 983 308 378, Newmarket QLD 4051, Australia. Contact: noahcoulson9@gmail.com
What we collect, and why
| What | Why |
|---|---|
| Your email address | To sign you in and to contact you about the service. |
| Your business details — name, ABN, phone, suburb, logo, bank details | They go on the quotes you send. Bank details are shown only to your own clients, never used by us. |
| Your rates and settings | To price your quotes. |
| Your quotes, and your clients' names, addresses and email addresses | To produce the quote and send it to that client. Provided by you. |
| Site photos you attach | They appear on the quote your client opens. |
| When your client opened the quote, and whether they accepted | So you know where the job stands. |
| Usage events — signed up, built a quote, sent a quote | Counts and timestamps only, so we know whether the product is working. |
Your clients' information
When you quote someone, you give us their name, address and email. We use it for exactly one thing: producing that quote and delivering it to them. We don't market to your clients, we don't build a list from them, and we don't pass them to anyone.
The admin tools deliberately show activity only about your account — how many quotes, total value, when you were last active. They do not open up your clients' names, addresses, or what any quote says. A support tool that can read private client data is a risk that isn't worth taking.
When a client accepts a quote we record their typed name and a one-way hash of their IP address. The hash exists so an acceptance can be shown to have come from a real, distinct device if it's ever disputed. It can't be turned back into an address.
Cold outreach
If you got an unsolicited email from us, it went to a business address published online, about software for the work that business does — inferred consent under the Spam Act 2003. Every message carries a working unsubscribe link. Use it and you're removed permanently and immediately; we keep only your address on a suppression list, purely so we never email you again.
Who else touches your data
- Cloudflare — hosting and the database. Data is stored in the Oceania region.
- Stripe — payments. They get your email and business name to bill you. We never see your card number.
- An email provider — to deliver login codes, your quotes to your clients, and follow-ups.
That's the whole list. No advertising networks, no analytics products, no data brokers. The site sets no tracking cookies — the only cookie is the one that keeps you signed in.
How long we keep it
While your account is open, and for 12 months after you cancel so you can come back or export it. Then it's deleted. Suppression-list entries are kept indefinitely, because forgetting them would mean emailing someone who asked us not to.
Your rights
You can ask for a copy of everything we hold about you — or just press Export everything in the app, which gives you the same thing immediately. You can ask us to correct it, or to delete it. Email noahcoulson9@gmail.com and you'll get an answer within 30 days.
If you're not happy with how we've handled a privacy matter, tell us first. If we can't resolve it you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Security
There are no passwords to steal — sign-in is a six-digit code emailed to you, good for ten minutes and usable once. Traffic is encrypted. Every database query is scoped to your account, and that scoping is enforced by the database itself as well as by the application.
If a breach ever occurs that is likely to cause you serious harm, you'll be told, and so will the OAIC, as the Notifiable Data Breaches scheme requires.
Changes
If this policy changes in a way that matters, you'll get an email at least 14 days beforehand.