Privacy Policy

TradiePool Pty Ltd — Last updated: 9 May 2026

This Privacy Policy explains how we collect, use, store, and share your personal information when you use the TradiePool platform. It's written in plain English so any tradie can understand it.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs 1–13). By using our platform, you agree to this policy.

1. What information we collect (APP 3)

Information	Examples
Identity	Full name, email address
Business identity	ABN, business name, primary and secondary trades
Contact	Phone number, base postcode, service-area postcodes
Video recordings	≤30-second job clips you record and upload
Device / technical	IP address, browser type, device model
Usage analytics	Pages visited, features used (anonymised via Umami)

We only collect information that is reasonably necessary for our functions. We do not collect sensitive information (health, racial origin, political opinions) as defined by the Privacy Act.

2. Why we collect it (APP 5)

Account creation and verification — confirming your ABN with the Australian Business Register (ABR), creating your tradie profile.
Job matching — connecting job posters with tradies who service the relevant postcode.
AI-powered job extraction — analysing your video clip to automatically generate a job description (trade, scope, materials, urgency).
Bid notifications — sending push notifications or emails when a new job appears in your service area.
Payment processing — managing credit purchases and transactions.
Legal compliance — meeting our obligations under Australian law.

We will not use your information for unrelated purposes without your consent.

3. How we use your video data — cross-border disclosure (APP 8)

When you record and upload a job clip, the video file is:

Stored in Cloudflare R2 (servers in the US and/or EU).
Sent to Google LLC (United States) via the Google Gemini API so that an AI model can extract the job description.

By uploading a video, you consent to this cross-border disclosure under APP 8.3(a). Google processes the video solely for AI inference. Their practices are governed by Google's Privacy Policy. We do not control Google's data handling once the video is transmitted.

4. Storage and security (APP 11)

Data type	Where stored	Location
Video files	Cloudflare R2	United States / EU
Account and job data	Neon Postgres	Sydney, Australia
Payment records	Polar.sh	United States
Email delivery logs	Resend	United States

We use HTTPS, server-side encryption at rest, short-lived presigned URLs for video access, and access controls that restrict data to authorised personnel. If you discover a security issue, contact us at privacy@tradiepool.com.au.

5. Third parties we share data with (APP 6)

We do not sell your personal information. We share data only as needed to provide our service:

Third party	What we share	Purpose
Google LLC (Gemini API)	Video file	AI job-spec extraction
Polar.sh	Email, transaction details	Payment processing
Resend	Email address	Transactional email delivery
ABR Lookup API (AU Gov)	ABN	Business name lookup and verification
Cloudflare	Video files, IP metadata	Object storage and CDN/DDoS protection

6. How long we keep your data (APP 11.2)

Data	Retention period
Video files	Deleted automatically 30 days after a job expires or is cancelled
Job records	Retained for 2 years (for dispute resolution), then deleted
Account data	Retained while your account is active, deleted within 30 days of a verified deletion request
Payment records	Retained for 7 years (Australian tax law requirement)
Usage analytics	Aggregated only; no identifiable data retained beyond 90 days

7. Your rights (APPs 12–13)

You have the right to:

Access a copy of the personal information we hold about you.
Correct inaccurate or out-of-date information.
Delete your account and associated data (excluding records we are legally required to retain).
Withdraw consent for marketing communications at any time.

To exercise these rights, email privacy@tradiepool.com.au. We will respond within 30 days.

8. Notifiable Data Breaches (NDB scheme)

The Notifiable Data Breaches (NDB) scheme (Part IIIC of the Privacy Act) applies to TradiePool. If we become aware of an eligible data breach likely to result in serious harm, we will:

Assess the breach within 30 days of becoming aware of it.
Notify the Office of the Australian Information Commissioner (OAIC) if the assessment confirms a notifiable breach.
Notify affected individuals as soon as practicable.

9. Cookies and analytics

We use Umami for privacy-friendly, cookieless analytics. Umami does not use cookies, does not track you across sites, and does not sell data. No consent banner is required for Umami. We do not use advertising cookies or third-party tracking scripts.

10. Children

TradiePool is intended for adults with a valid ABN. We do not knowingly collect personal information from anyone under 18.

11. Complaints (APP 1.4)

If you believe we have mishandled your personal information, please contact us first:

Email: privacy@tradiepool.com.au
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC):

Website: oaic.gov.au
Phone: 1300 363 992
Mail: GPO Box 5218, Sydney NSW 2001

12. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email.

13. Contact us

Privacy Officer — TradiePool Pty Ltd
Email: privacy@tradiepool.com.au
Support: support@tradiepool.com.au
Website: tradiepool.com.au