Tradie Muscle™ - Liz Privacy Policy

⚠️ At a glance - read this first

1. What we collect: Your business details, ABN, compliance documents, payment details (via Stripe), and any customer information captured by Liz through your calls. If you sign up for our free courses or free guides, we collect your name, email, trade and, if you choose, your mobile number.
2. Why: To provide the Service, answering calls, pencilling in jobs, invoicing, and billing your monthly fees.
3. Who we share it with: Only the providers needed to run the Service, Stripe, Twilio, Vapi, Lovable/Supabase, and Google Calendar. We never sell your data.
4. Overseas storage: Some providers store or process data outside Australia, primarily in the United States. See Section 6.
5. Your customers' data: When Liz captures details about your customers, you remain responsible for telling them how their information is used.
6. Your rights: You can access, correct, or request deletion of your data at any time, see Section 8.

Note: the "Who we share it with" and "Your customers' data" points above describe Liz specifically and apply to Standard and Founding Member subscribers. If you are on the Core plan, Liz is not part of your plan, and these points do not apply to you.

1. About this policy

1.1 This Privacy Policy explains how The Ideas Bunker Pty Ltd (ABN 59 163 751 693) trading as Tradie Muscle™ ("We", "Us", "The Provider") collects, holds, uses, and discloses personal information in connection with the Tradie Muscle™ Liz platform ("the Service") and our free business courses.

1.2 We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1.3 This Policy applies to you as our client ("You", "The Client") and, where relevant, to the personal information of your customers that is captured through your use of the Service.

2. Information we collect about you

2.1 Business & account details: Business name, ABN, trade type, service area, hourly rate and fee structure, and contact details (owner, home-base, and partner/bookkeeper mobile numbers and email).

2.2 Regulatory documentation: Proof of identity (such as your driver's licence) and, where you register as a business, your ABN details or ASIC company extract, collected during onboarding to meet Australian telecommunications regulatory requirements.

2.3 Payment information: Processed and stored by Stripe, our payment processor. We do not directly collect or store your full card or bank account details.

2.4 Usage data: Call recordings, transcripts, job records, quotes, invoices, and app activity logs generated through your use of the Service.

2.5 Speed Dial contacts: If you add people to your Speed Dial and turn on "Liz takes a message", we store their name and phone number so Liz can recognise their calls and pass their messages to you by text. Only you can see this list. You're responsible for making sure the people you add are comfortable with you storing their details.

3. Information processed on your behalf (your customers' details)

This section applies to Standard and Founding Member subscribers only. If you are on the Core plan, Liz does not answer calls on your behalf, and this section does not apply to you.

3.1 When a customer calls your business, Liz collects and processes that customer's name, phone number, address, and job details in order to pencil in a booking on your behalf.

3.2 In relation to your customers' personal information, you are the party responsible for deciding how that information is used, and for meeting your own obligations under the Privacy Act (where applicable to your business). We process this information as your service provider, to deliver the Service to you.

3.3 Call recording notice: At the start of every call, Liz advises the caller that the call may be recorded for training and quality purposes, consistent with Clause 1.5 of the Tradie Muscle™ Liz Service Agreement. If the caller continues the call after this notice, they are treated as having consented to the recording. You remain responsible for ensuring your customers understand their details will be handled by an automated system.

3A. Free courses

3A.1 Our free courses are open to anyone, and you don't need an account to read them. If you ask us to send you the courses, we collect your name, email address, trade and, if you choose to give it, your mobile number, along with the course you signed up from and the website or ad that sent you there.

3A.2 We use these details to send you the free courses, and occasionally to tell you about Tradie Muscle™. If you give us your mobile number, we may call you to see whether the courses helped. We never sell your details.

3A.3 You can ask us to stop at any time by replying to any of our emails or by contacting us at tim@theideasbunker.com, and we will delete your details.

3A.4 When you visit a course page, we record basic visit information: the page you viewed, the website or ad that sent you there, and whether you used a phone or a computer. This does not identify you by name. We use it to understand which courses people find useful.

3A.5 Course sign-up and visit information is stored with Supabase (see Sections 5 and 6).

3A.6 Free guides: If you download one of our free guides (such as the Christmas Shutdown Checklist), we collect your first name, email address, trade and, if you choose to give it, your mobile number. We use these details to send you the guide and a short series of follow-up emails about running your business and about Tradie Muscle™. These sign-ups are held by Brevo, our email provider, which stores data in the European Union. Every email has an unsubscribe link, and you can ask us to delete your details at any time.

4. How we use personal information

4.1 To provide, maintain, and improve the Service, including call answering, scheduling, invoicing, and review requests.

4.2 To process your payments and manage billing.

4.3 To comply with Australian telecommunications regulatory requirements.

4.4 To communicate with you about your account, service outages, or changes to our terms.

4.5 We do not use your data, or your customers' data, for direct marketing to your customers without your instruction, and we do not sell personal information to third parties.

4.6 To send our free courses, and occasional information about Tradie Muscle™, to people who ask for them (see Section 3A).

4.7 Support access: If you ask us for help, or we need to fix a problem with your account, we may view your Command Centre to give that support. Only our administrator can do this, access is read-only unless a change is needed to fix the problem, and every access is logged.

4.8 Mate referrals: If you sign up using another subscriber's referral link or code, we record which subscriber referred you. We use this only to apply your referral discount and to give the referring subscriber their referral credit.

5. Who we share information with

5.1 We share personal information only with the service providers necessary to deliver the Service. All subscribers, on every plan:

• Stripe - payment processing and billing
• Lovable and Supabase - hosting of the Command Centre app and its underlying database

5.1a Standard and Founding Member subscribers only (these providers deliver Liz's services and are not used on the Core plan):

• Twilio - telephony infrastructure, phone numbers, and call recording
• Vapi - voice AI processing that powers Liz's conversations
• Google Calendar - appointment scheduling, where you choose to connect it

5.2 Each provider is contractually restricted to using this information only to provide their service to us, and may not use it for their own purposes.

5.3 Google Calendar: If you connect your Google Calendar, we use the access Google gives us only to create, update and delete calendar events for jobs you have confirmed in your Command Centre, and to show which Google account is connected. We don't read, copy or change any other events in your calendar, and we never use your Google data for advertising or sell it. We keep a secure access key so your confirmed jobs can sync. You can disconnect at any time from your Profile page or from your Google Account settings, and disconnecting deletes that key. Tradie Muscle's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Overseas storage and disclosure

6.1 Some of the providers listed in Section 5 store or process personal information outside Australia. Twilio and Vapi primarily operate infrastructure in the United States and, by default, may process or store call data there. Lovable's underlying Supabase infrastructure is hosted in a region selected at setup (currently Asia Pacific). Free guide sign-ups are stored by Brevo in the European Union (see Clause 3A.6).

6.2 By using the Service, you acknowledge that some personal information, including your own business data and information about your customers captured by Liz, may be transferred to, and stored or processed in, countries outside Australia, including the United States.

6.3 We take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles, but we cannot guarantee the privacy practices of overseas systems to the same standard as an Australian entity.

7. Data security and retention

7.1 We take reasonable technical and organisational steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure.

7.2 Call recordings are retained for 90 days from the date of the call, after which they are deleted from our primary systems. Retention on third-party platforms (Twilio, Vapi) is governed by their own data retention settings and policies.

7.3 Regulatory compliance documents (ID and business documents) provided at onboarding are deleted once your Twilio Regulatory Bundle has been approved and is no longer required.

7.4 If you cancel your plan, your service keeps running for 7 days and then your account closes. You can download all your records yourself at any time from your Profile page, and for 90 days after your account closes from the 'Your records' page. After those 90 days, your business data is permanently deleted from our primary systems. We keep only a minimal record (your business name, ABN and the dates of cancellation and deletion) and any billing records we are required to keep by law. Copies in system backups and on third-party platforms (such as Stripe, Twilio and Vapi) are removed according to those systems' own retention schedules.

7.5 Free course and free guide sign-up details are kept until you ask us to delete them. If you unsubscribe, we keep only your email address, so we can make sure we don't email you again.

8. Access, correction, and complaints

8.1 You may request access to, or correction of, the personal information we hold about you at any time by contacting us at tim@theideasbunker.com.

8.2 If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us directly. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Website and cookies

9.1 Our website may use cookies to understand site traffic and improve the browsing experience. You can disable cookies through your browser settings, though some site features may not function correctly as a result.

10. Changes to this policy

10.1 We may update this Privacy Policy from time to time. The current version is always available within your Command Centre app and on our website.

11. Contact us

The Ideas Bunker Pty Ltd (ABN 59 163 751 693) trading as Tradie Muscle™
tim@theideasbunker.com