Legal

Privacy Policy

Last updated: 12 May 2026 · Effective date: 12 May 2026

1. Who We Are

MySpannr ("we", "us", "our") is a software-as-a-service platform designed for Australian tradespeople and service businesses. We provide workflow automation tools including quoting, invoicing, job management, team management, and related business administration features.

For privacy enquiries, contact us at: accounts@myspannr.com

2. Anonymity and Pseudonymity

Because MySpannr is a business administration platform requiring ABN verification and account authentication, we are unable to provide services anonymously or under a pseudonym. All users must register with accurate business and personal information.

3. What Information We Collect

2.1 Account Information

• Full name, email address, phone number
• Business name, ABN, trade type
• Password (stored as a one-way hash — we cannot read your password)
• Google OAuth profile data (if you sign in with Google)

2.2 Business Information

• Customer names, email addresses, phone numbers and addresses
• Job details, quotes, invoices and cost records
• Supplier names and material price lists
• Team member details and timesheet records
• Business settings, rates and templates

2.3 ABN and GST Data

When you enter your ABN, we verify it against the Australian Business Register (ABR) maintained by the Australian Taxation Office. We store:

• Your ABN
• Legal entity name and entity type (e.g. Sole Trader, Pty Ltd)
• GST registration status and date
• Date and method of verification

2.4 Usage Data

• Login timestamps and login count
• AI scan usage and associated costs
• Feature usage events (for platform improvement)
• IP address (for security and fraud prevention)

2.5 Photos and Files

Job photos you upload are stored in Cloudflare R2 object storage under your account. If object storage is temporarily unavailable, a photo may instead be stored securely within our database. File attachments added to job notes (such as PDFs, spreadsheets and images) are stored within our database. You retain ownership of all files you upload.

2.6 Payment Information

We do not store your credit card details. Payment processing is handled by Stripe, Inc. via PCI-DSS compliant payment infrastructure. Your card details are submitted directly to Stripe's secure systems — we never see or handle your raw card data. We receive only a payment confirmation and transaction ID. See Stripe's Privacy Policy.

4. Unsolicited Personal Information

If we receive unsolicited personal information that we did not request and that is not reasonably necessary for our functions, we will destroy or de-identify that information as soon as practicable, unless we are legally required to retain it.

5. How We Use Your Information

Purpose	Data Used	Legal Basis
Providing the MySpannr service	All account and business data	Contract performance
Verifying your ABN with the ABR	ABN, entity data	Contract performance
Sending quotes and invoices to your customers	Customer contact details, job data	Contract performance
Processing subscription payments	Email, billing details via Stripe	Contract performance
Security and fraud prevention	IP address, login data	Legitimate interest
Platform improvement and analytics	Anonymised usage data	Legitimate interest
Sending service notifications	Email address	Contract performance
Complying with legal obligations	As required by law	Legal obligation

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

6. Third Parties We Share Data With

7. Data Storage and Security

Your data is stored on Railway-hosted PostgreSQL servers. We implement the following security measures:

• All data transmitted over HTTPS/TLS 1.3
• Passwords hashed using bcrypt (12 rounds)
• JWT tokens with 24-hour expiry
• Rate limiting on all API endpoints
• Input sanitisation and parameterised database queries
• Daily database backups stored in Cloudflare R2
• Bot protection via Google reCAPTCHA Enterprise on registration

No security system is perfect. In the event of a data breach, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

8. Your Rights

Under the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your account and associated data
• Portability — request an export of your business data in a machine-readable format
• Opt-out — opt out of non-essential communications

To exercise any of these rights, email accounts@myspannr.com. We will respond within 30 days. If we are unable to comply with your request, we will provide written reasons (for example, where we are legally required to retain certain records).

9. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription:

• Your data remains accessible for 30 days after cancellation
• After 30 days, your account data is deleted from our active database
• Backup copies are automatically deleted within approximately 30 days
• Some data may be retained longer where required by Australian law (e.g. tax records)

10. Cookies and Tracking

MySpannr uses minimal cookies:

• Authentication — session management for logged-in users
• reCAPTCHA — Google reCAPTCHA Enterprise uses a risk-based analysis engine to detect bots on registration and login forms. It operates invisibly without user interaction.

We do not use advertising cookies, tracking pixels or cross-site tracking technologies.

11. Children's Privacy

MySpannr is a business tool intended for use by adults. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with personal information, contact us at accounts@myspannr.com.

12. International Data Transfers

Some of our third-party service providers (including Stripe and Anthropic) may process data outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure these providers maintain data protection standards consistent with Australian privacy law.

Your data is stored on infrastructure primarily located in the United States and Singapore. By using MySpannr, you acknowledge and consent to the cross-border disclosure and transfer of your personal information to these locations, as permitted under Australian Privacy Principle 8 (APP 8) of the Privacy Act 1988 (Cth).

We take reasonable steps to ensure that overseas recipients of your personal information do not breach the Australian Privacy Principles in relation to that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the application. Continued use of MySpannr after changes take effect constitutes acceptance of the updated policy.

14. Complaints

If you have a complaint about how we handle your personal information, please contact us first at accounts@myspannr.com. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

15. Contact Us

For all privacy-related enquiries:

• Email: accounts@myspannr.com
• Website: myspannr.com