Draft — pre-launch. This policy is an early-access working draft. Some legal and contact details are still being confirmed and are shown as clearly marked placeholders. It is not legal advice and is not yet final, and it is excluded from search indexing until it has been reviewed.

Privacy policy

This policy explains what SubbieTrack collects when you request early access, how we use it, and the choices you have. We use these details to contact you about SubbieTrack early access, and your company type in a de-identified form to understand demand. No payment commitment.

Who we are

SubbieTrack is an early-access product for Australian construction firms. The entity responsible for the personal information described here is [[PENDING: registered entity name]] ([[PENDING: ABN]]), of [[PENDING: registered business address]]. These details will be confirmed before this policy is finalised.

What we collect

When you request early access, the form asks you for:

  • Work email — required. This is how we reply to you.
  • Company name — required.
  • Company type — required, chosen from a fixed list of options (Builder / head contractor, Trade contractor / subcontractor, or Other construction business). This describes the business, not you, and there is no free-text company type.
  • Role — required, chosen from a fixed list of options (Owner/Director, Project Manager, Site Supervisor/Foreman, Office/Operations, Tradesperson/Crew, or Other). There is no free-text role.
  • Phone— optional. Leave it blank and we store nothing for it. If you do give it to us, we only use it for direct early-access follow-up — it is never used for marketing.
  • Marketing email opt-in — optional, and a separate checkbox from the request above. It is unticked by default. Leave it unticked and we store that you did not opt in and send no marketing email; tick it and we record that choice together with the date and time you gave it.

Alongside your answers we record the campaign or referral source that brought you to the page, so we can understand where interest comes from. That is limited to the five standard campaign tags in the page address — utm_source, utm_medium, utm_campaign, utm_term, and utm_content. Nothing else from the address is kept, and if you arrive without those tags we store nothing for them.

That is the whole record: your email, company name, company type, role, your phone number if you gave one, whether you opted in to marketing email and when, and those campaign tags if they were present. The form asks for nothing else, and we do not ask for payment details — requesting early access creates no payment commitment.

How we use it (collection notice)

We mainly collect these details to contact you about your SubbieTrack early-access request and to help prepare your first project if you go ahead. That includes replying to you, arranging guided setup, and asking follow-up questions about your needs during early access.

We also use your company typein a de-identified form to understand what kinds of construction business are asking for early access. For this we reduce it to one broad category (builder, trade, or other) with no email, company name, phone, or the raw option you chose attached — so this measurement cannot be traced back to you. We do not use your email, company name, phone, or role for this.

Your early-access request itself only authorises us to contact you about that request — it does not sign you up for anything else. If you separately tick the optional marketing opt-in, we may also email you occasional SubbieTrack product updates. That is a distinct use of your email address from replying to your early-access request, and it only happens if you chose it yourself.

What we won’t do

  • No newsletters or bulk marketing email unless you separately opt in — and even then, only occasional product updates, never bulk campaigns.
  • No SMS or text-message marketing, ever — your phone number, if given, is used only for early-access follow-up.
  • We won’t sell, rent, or share your details with third parties for their own marketing.
  • We won’t add you to a general mailing list or bundle broad marketing consent into your early-access request.

By submitting the early-access form you consent to us contacting you about your request and about preparing your first project. That is the only consent your early-access request itself gives us — it only authorises contact about that request. There is no pre-checked marketing box, and consent to early-access follow-up is not consent to any other kind of message. You can ask us to stop contacting you at any time.

Ongoing marketing email is a separate, optional, unticked-by-default choice: it only starts if you tick the dedicated opt-in checkbox on the form yourself. If you do, you can withdraw that consent at any time — every marketing email we send includes an unsubscribe link, and you can also ask us directly. Withdrawing stops the marketing email only; it does not affect your early-access request.

Who can see your details

Access to raw early-access records is restricted to the two founders of SubbieTrack. Each of us uses an individual account protected by multi-factor authentication (MFA). We do not use shared logins, and we do not take ad-hoc copies or exports of the lead list.

Where your details are stored

We use a small number of service providers to run SubbieTrack, and they process your details only on our instructions:

  • Supabase — hosts the database that stores your early-access record. Processing region: [[PENDING: Supabase project region — confirm in dashboard]].
  • Vercel — hosts and serves this website. Processing region: [[PENDING: Vercel deployment region — confirm in dashboard]].

We are still confirming with our providers whether any of your details are stored or processed outside Australia. Overseas / cross-border processing: [[PENDING: does overseas / cross-border processing occur — confirm against Supabase & Vercel contracts]]. Countries where your details may be processed: [[PENDING: applicable countries — confirm against provider regions]].

Our providers may in turn rely on their own subprocessors. Known subprocessors: [[PENDING: subprocessors — confirm from provider subprocessor lists]].

How long we keep your details

If your early-access enquiry goes dormant, we delete or anonymise your record 12 months after our last meaningful contact with you. We will delete it sooner if you ask us to and we can verify your request.

Your choices — access, correction, and deletion

You can ask us to show you the details we hold about you, correct them, or delete them. We verify who is making the request before we act on it. To make a request, contact us at [[PENDING: privacy contact — mailbox to be confirmed]].

Complaints

If you have a privacy concern, contact us first at [[PENDING: privacy contact — mailbox to be confirmed]] so we can try to resolve it. You can also raise a complaint with the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

We may update this policy as SubbieTrack develops. The current version always lives at this page.

Working draft aligned with OAIC Australian Privacy Principles guidance and ACMA Spam Act guidance. This is an implementation draft, not legal advice.