Privacy policy
Last updated 24 October 2026
OneJobMate is software for Australian trade businesses: quote-request forms, jobs, quotes, invoices, team management and costs. This policy explains what personal information OneJobMate handles, why, where it is kept and who it is shared with. We follow the Australian Privacy Principles in the Privacy Act 1988.
Who we are
OneJobMate is an Australian business (ABN 57 460 215 853). In this policy, "we" and "us" means OneJobMate. For anything about privacy, email support
Whose information this covers
OneJobMate holds information about two groups of people:
- Businesses that use OneJobMate, and their team members. We collect this information ourselves to run their accounts.
- The customers of those businesses, for example someone who asks a business for a quote through its OneJobMate form. We hold this information on the business's behalf. The business decides what it collects and how it uses it, and its own privacy policy also applies. If you are a customer, the quickest way to see, correct or remove your details is to contact the business directly. We will help if you can't reach it.
What we collect
From businesses and their teams
- Names, email addresses, phone numbers, job roles and login details. Passwords are stored only as a secure hash, never as the password itself.
- Business details such as the business name, ABN, address, logo and brand colours.
- What the owner tells us when signing up: the trade, team size, state and postcode, and, if they choose to answer, the kind of work, jobs a month, the tools they use now, their biggest headache and how they heard about us.
- Subscription details. Card payments are handled entirely by Stripe: card numbers never reach OneJobMate. We keep the plan, its status and Stripe's reference numbers.
- Work records the business enters, such as jobs, quotes, invoices, bills, budgets, time clocked on, and photos taken when clocking on.
- Technical records such as login times, an activity log of changes made, and the server logs our host keeps (which include IP addresses).
- If you turn on phone notifications: the address your phone's notification service gives us for your device, and the type of device (for example “iPhone”). Turning them off, or logging out, stops them.
About the customers of those businesses
- Name, email address, phone number and property address.
- Answers given on a quote-request form, including job details, access notes and any photos uploaded.
- Quotes, invoices, payments and job history with that business, and whether a quote was viewed or accepted.
- Emails exchanged with the business through its OneJobMate inbox, including attachments.
- Text messages the business sends them through OneJobMate: the mobile number, the words, and whether it was sent.
- How a visitor reached the quote form: the website or ad it came from, and the ad click code that Google or Facebook adds to the link. The code is blanked after 13 months on the record of the visit. When the visitor sends a quote request, the code is saved with that request and kept until the business deletes the request or erases the customer.
How we use it
- To run OneJobMate: storing records, sending the quotes, invoices, reminders, arrival-time texts and review requests a business chooses to send, and showing each business its own figures.
- To manage accounts, subscriptions and support requests.
- To email account holders about their account and getting started with OneJobMate, such as a reminder to start the free trial. Every one of these emails has an unsubscribe link, and unsubscribing never stops emails about the account itself.
- To set up a new account and suggest the plan that fits, and to understand who uses OneJobMate so we can improve it and decide where to advertise.
- To measure our own Facebook and Instagram ads and show them to people likely to be interested (see Cookies).
- To keep the service secure and working: backups, virus scanning, fixing errors and preventing misuse.
We do not sell personal information, and we do not use customers' details to advertise to them. Each business can only see its own records.
AI features
Some features send information to an AI service (Anthropic) to produce a result for the business: summarising a quote request and its photos, drafting emails, reading supplier invoices and receipts, identifying parts from a photo, and answering questions about the business's own costs. Nothing an AI drafts is sent to a customer until someone at the business approves it. Under its commercial terms, Anthropic does not use this information to train its AI models.
Who we share it with
We use the following service providers to run OneJobMate. They receive only what they need for their part of the service:
| Service | What it does for us | Where |
|---|---|---|
| Cloudflare | Website delivery and security. Visits to onejobmate.com pass through Cloudflare on the way to our servers, so it sees IP addresses and page requests, and carries the form answers and photos people send | United States and other countries (a worldwide network) |
| Railway | Hosting, the database and file storage (photos and documents) | Singapore |
| Anthropic | The AI that drafts emails, summarises quote requests, reads supplier invoices and receipts, and answers cost questions | United States |
| Resend | Sending emails, and receiving emails sent to a business's OneJobMate inbox | Japan |
| ClickSend | Sending the text messages a business chooses to send its customers, such as arrival times and review requests | Australia (storage); support and monitoring from the United States, Europe and the Philippines |
| Cloudmersive | Virus-scanning email attachments | United States |
| Stripe | Subscription payments from businesses | United States |
| Xero | Accounting sync, only for a business that connects its Xero account | United States |
| Sentry | Error reports, with names, emails and other personal details removed first | United States |
| GitHub | Nightly backups (database copies kept 30 days, file copies 7 days) | United States |
| Google Workspace | Our support mailbox | United States and other countries |
| Meta (Facebook and Instagram) | Measuring our own Facebook and Instagram ads with the Meta Pixel and Meta's Conversions API: which of our public pages was visited (and whether The Trade Report was read to the end), and that an account was created, a checkout was started, a free trial started or a subscription paid, with the account's email address in scrambled (hashed) form. See Cookies below | United States and other countries |
| Apple, Google or Mozilla | Delivering phone notifications to team members who turn them on (whichever service comes with their phone or browser). The message is encrypted before it leaves OneJobMate, so the service only passes it on | United States and other countries |
We may also disclose information when the law requires it, for example to a court or regulator.
Information stored overseas
As the table shows, OneJobMate's servers and service providers are outside Australia. The app, its database and your files are hosted in Singapore, email is handled in Japan, and some providers (such as payments, AI and error reports) are in the United States. Cloudflare passes website traffic through its worldwide network. By using OneJobMate, you understand that personal information will be stored and processed in those countries. We choose established providers and send them only what their part of the service needs.
Cookies
Inside the app, OneJobMate uses only the cookies it needs to work: one that keeps you logged in (for up to 30 days), and a few that remember choices such as the plan you picked or the period shown on your dashboard. When you pay, Stripe's payment form may set its own cookies to prevent fraud.
On our public pages (the home page, The Trade Report, Get the app, sign up, this policy and the terms) we use the Meta Pixel, which sets Meta's advertising cookies. It tells Meta which of those pages was visited, and whether The Trade Report was read to the end. Inside the app it only tells Meta that an account was created, that the payment form for a plan was opened, that a free trial started, or that a subscription was paid, with the plan's price. Our server also tells Meta about the new account, the free trial and the payment directly (Meta's Conversions API), so they are still counted when a browser blocks the pixel. With those we send the account's email address in scrambled (hashed) form, so Meta can match the event to a Facebook or Instagram account, plus the browser's IP address and type. We never send your name or phone number, and we switch off Meta's automatic collection of button clicks and page details. Meta may link these visits to a Facebook or Instagram account and use them to measure and show ads. The pixel is never used on the quote forms, quotes or agreements a business sends its own customers.
On our public website we also count visits ourselves, without cookies: which page was viewed, which buttons and links were clicked, how far down the page people scrolled, the site or ad they came from, the type of device and the country. We don't keep your IP address. We turn it into a code that changes every day, so we can't follow you from one day to the next.
To limit this, change the ad settings in your Facebook or Instagram account (Accounts Centre, Ad preferences), or block third-party cookies in your browser. OneJobMate works the same either way.
Keeping it safe
All connections to OneJobMate are encrypted. Team members only see what their role allows, admins can turn on two-factor login, and files are opened through links that expire. No system is completely secure. If a data breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the law requires.
How long we keep it
- Account and business records are kept while the account is open. When an admin deletes the account (Account page), everything is deleted 30 days later. A team member who deletes their own login has their email address removed straight away; their name stays on the business's past records.
- Customer records are kept until the business deletes them or uses "Erase this customer", which removes the person's details. Records that must stay for the business's tax and accounting, such as invoices, are kept with the person's details removed.
- Inbox emails with an erased customer are deleted after 5 years.
- Text message records are kept until the business deletes the account or erases the customer, which removes the mobile number and the words.
- Ad click codes on website visit records are blanked after 13 months. A code saved with a quote request stays with that request until the business deletes it or erases the customer. The activity log is deleted after 1 year.
- Backups are deleted after 30 days (database) and 7 days (files), so erased details can remain in a backup for up to 30 days.
Seeing, correcting or removing your information
You can ask to see the personal information we hold about you, or ask us to correct or remove it. Email support
Complaints
If you are unhappy with how we have handled your information, email support
Changes to this policy
We will update this page when how we handle information changes, and change the date at the top. For a major change affecting businesses that use OneJobMate, we will also email account admins.
← Back to onejobmate.com