Privacy Policy
This policy explains how Jobdeck ("we", "us", "our"), a product of Taylored Electrical Group Pty Ltd (ABN 49 689 808 633), based in New South Wales, Australia, handles personal information in the Jobdeck mobile app and website. We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
What we collect
- Account details. Your name, email, business name, ABN and licence details you enter.
- Business data you create. Jobs, site diaries and photos, timesheets, quotes, invoices, customers, materials, and crew records.
- Your crew's details. Where you invite team members, their name, email and the hours/notes they log.
- Location, only if a crew member chooses to share it. The approximate position of their phone at the moment they tap "Share my location", so the office can see who is nearest a job. See Location sharing below.
- Where a site photo was taken, only if the business turns that on. Off unless a business chooses it. When it is on, the date, time and position are printed onto the photo itself. See Date and place on a photo below.
- Messages between your crew, and your profile. What people at the same business send each other in Chats, any photos attached, a display picture and phone number if you add one, and whether you are online. Not end-to-end encrypted. See Messages between your crew below.
- Device & usage. App version, platform, anonymous in-app event names, and (if enabled) crash diagnostics.
Location sharing
Jobdeck can show the office where its crew are, so the nearest person gets sent to an urgent job. Because this is the most sensitive thing the app can collect, it is deliberately narrow:
- It is off unless the crew member turns it on, from their own profile screen. Nobody else can switch it on for them.
- It only records a position when they tap the button, while the app is open. Jobdeck does not track anyone in the background, and nothing re-arms it later.
- Only the latest position is kept. Each update overwrites the previous one, so there is no history and no route or movement trail.
- It expires by itself after 12 hours and is deleted, because a stale position is worse than none.
- Only the owner and admins of that business can see it, and only for their own crew.
- The crew member can stop sharing at any time, which deletes the stored position immediately. It is also deleted if they delete their account.
Date and place on a photo
A business can turn on a setting that prints the date, the time and where a photo was taken onto the site photo itself. It is printed into the picture rather than hidden in the file, because a date that only exists in a hidden field is stripped out by most email and messaging apps and is not there when it is needed. This makes it permanent, so the setting is deliberately narrow:
- It is off unless the business turns it on, in Settings. A business that has not chosen it sees no change at all, and no location is read.
- A position is only read at the moment somebody takes a photo, while the app is open. Nothing runs in the background and nothing is recorded between photos.
- A person is never named on a photo. The stamp says when and where the work was done. It never says who was there.
- The location travels with the photo. Once it is printed onto the image it is part of the picture, so anyone the photo is sent to can read it, and it cannot be taken back off a copy that has already gone out. This is the point of the feature and it is the reason to think before switching it on.
- A refused location permission does not stop the photo. If the phone cannot get a position, or the crew member has not allowed location access, the photo is still taken and carries the date and time. It says the location was not available rather than guessing one.
- A rough position is left off rather than printed. A position that is only accurate to a few hundred metres is not shown, because a precise-looking figure would be believed.
- The business can turn it off at any time. New photos stop being stamped. Photos already taken are not changed, because the stamp is part of those images.
Messages between your crew
Jobdeck has a Chats screen where people who work at the same business can message each other, one to one or in a group. It is separate from the messages you send customers, and it only ever reaches people in your own business.
- Messages are stored on our servers, and they are not end-to-end encrypted. They are encrypted in transit and encrypted at rest, but we hold them in a form we could technically read, the same as your jobs and invoices. We say this plainly because the alternative would be a promise we are not making. It is what lets a message be searched, read on the dashboard, and shown in a notification.
- An owner cannot read staff conversations in the app. There is no manager view of somebody else’s messages, and being the owner does not open one. There are two exceptions. A message somebody has deliberately reported, described below. And the whole-business backup an owner can download of their own records, which does include messages, because a business facing an investigation or a discovery order is entitled to its own records — every one of those downloads is written to the activity log, naming who took it and saying that staff messages were in it.
- Blocking. Anybody can block a colleague. A blocked person’s direct messages no longer reach you.
- Reporting. Anybody can report a message. The report goes to the owners and admins of that business, who are told about it and can see the single message that was reported and who sent it. They do not see the rest of that conversation. We do not read reports ourselves unless a business asks us to.
- Deleting a message removes the words and any photo attached to it for everybody. The line stays in the thread saying a message was removed, so the conversation does not resequence under whoever is reading it.
- Online, last seen, typing and read receipts are shown to colleagues you share a conversation with. You can switch both off in your profile, separately: whether you appear online, and whether your last seen time is shown. Turning yours off also hides other people’s from you, so it is not a one-way mirror.
- Photos sent in a chat are stored the same way as job photos, and their links expire after an hour rather than a day, because a photo between two employees is not a document being shown to a customer.
- A nickname you set for a colleague is yours alone. Nobody else sees it, and it never appears on a job, an invoice, an export, an email or the activity log.
How we use it
Only to run Jobdeck for you: to provide the app, sync your data across your crew's devices, send transactional messages (invites, verification, quote/invoice emails), improve reliability, and provide support. We do not sell your data, and the app itself carries no advertising or tracking SDKs.
Website measurement is the one exception. Its pages use Google Analytics to count visits and see which pages people find useful, with IP addresses anonymised. That is ordinary website measurement and it happens before you have an account: it runs on jobdeck.com.au, and on the sign-in and sign-up screens of the dashboard because signing up happens there rather than here and we would otherwise have no way of knowing whether the site works. It stops the moment you are signed in, and it is never in the phone app at all, so none of your jobs, customers, invoices or crew data is involved in it. If you would rather not be counted, any browser content blocker will stop it, and nothing about the site or the product will behave differently.
Who we share it with (sub-processors)
We use a small set of reputable service providers to run the app. Each only receives the data needed for its function:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Analytics (United States) | Counting visits to this website, and to the dashboard's sign-in and sign-up screens. It stops once you are signed in | Page visited, approximate location, device type. Anonymised IP. No account data, and nothing from inside the app |
| Cloudflare (United States) | Receiving email sent to any @jobdeck.com.au address, including support and privacy enquiries and the supplier-invoice inbox address your business can hand to wholesalers | The full email as sent, including attachments, in transit. Support mail is forwarded to us; a supplier invoice is parsed and handed to your business's inbox |
| Neon (Singapore) | Database hosting | Your account & business data |
| Railway (United States) | Server hosting | Data transiting the app |
| Vercel | Website hosting | Website traffic only |
| Resend | Transactional email | Recipient email + message content |
| Expo (United States), and Apple or Google behind it | Push notifications | Device push tokens and the text of each notification. For a staff chat message that is the sender's name and the first part of what they wrote, on the recipient's own devices only |
| Sentry | Crash monitoring | Diagnostics + a user ID (never your email) |
| Twilio | SMS (when used) | Customer phone + message text |
| Stripe | Your Jobdeck subscription, and card payments from your customers (when used) | For your subscription: your email, card and billing address, plus your business id, plan and team size. For customer payments: the invoice amount + pay-link. Card details stay with Stripe. We never see or store them. |
| Square (United States) | Card payments from your customers, when you connect Square | The invoice amount + pay-link. Card details stay with Square. We never see or store them. |
| Xero / MYOB | Accounting sync (opt-in) | Customers & invoices you push to your own accounting file |
| Intuit QuickBooks (United States) | Accounting sync, when you connect QuickBooks | Customers & invoices you push to your own accounting file |
| Google / Apple | Sign-in (opt-in) | Your sign-in identity token |
If your business adds an accountant seat, that person can view your business's reports and download a financial export (customers, jobs, quotes, invoices, variations and expense claims). The accountant export does not include your crew's licence details, leave records or site photos. Those stay with the business owner and admins.
Overseas disclosure (APP 8)
Where your data actually sits. Your Jobdeck database, which holds your account and all of your business records, is hosted by Neon in Singapore (AWS ap-southeast-1). The servers that run the app, hosted by Railway, are in the United States (San Francisco), and the photos and document scans you upload are stored on that same server's disk, in the same place. Our website is served by Vercel from its global network.
Our other providers are located overseas or store and process data overseas. Principally in the United States (for example Resend for email, Sentry for crash-monitoring, Twilio for SMS, Stripe for payments and subscriptions, Square for card payments when you connect it, Intuit for QuickBooks accounting sync when you connect it, Google and Apple for sign in, Google Analytics for counting visits to this website, and Expo for push notifications). Xero and MYOB process in Australia and New Zealand. Where a provider runs on global infrastructure it may process in another country as well; if that changes materially for any of the providers above, we will update this page.
Before your information goes to an overseas recipient we take reasonable steps to make sure it is handled consistently with the Australian Privacy Principles, including using established providers under contracts that require it. We are accountable for that under APP 8.1, and we are not asking you to waive it. We do not rely on your consent to send your information overseas, because the people whose information is in your account, such as your customers and your crew, never gave us any.
How we store & protect it
Data is stored securely with encryption in transit, access controls, and connected accounting tokens encrypted at rest. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss, and unauthorised access.
If a data breach occurs that's likely to result in serious harm, we'll notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.
On your phone
The app is built to keep working on sites with no reception, so some information is also held on the device itself:
- A copy of the jobs you have opened. The job number, site address, description and logged materials, so they can still be read with no signal. Kept for up to 7 days and cleared when you sign out.
- Diary entries and site photos you have written but not yet sent. These stay on the phone until they reach us, which is the whole point of them: they must survive a day with no reception. They are not deleted when you sign out, because that would destroy work you have not sent. The app warns you if you sign out while any are still waiting.
- Site video you have added to a job but not yet sent. Jobdeck does not record video: you film it with your phone's own camera and add the clip here. The app then keeps only where that file sits on the phone, not a second copy of it, and reads it at the moment it uploads. Like the entries above it is not deleted when you sign out. If your phone clears its own temporary files first, the app tells you the clip is gone rather than pretending it sent.
- Other work you have recorded but not yet sent — clock on and clock off, checklist ticks, materials used, filled-in forms, and a customer's completion signature. Like the entries above, these stay on the phone until they reach us and are not deleted when you sign out. The app shows you exactly what is still waiting, and nothing is ever removed from that list without you choosing to remove it.
- Unsaved form contents, so a phone call part-way through writing something does not lose it. Discarded after 24 hours.
- Your sign-in tokens, held in the device's own secure keychain, and app preferences such as reminder settings.
Anything held on the phone is protected by the device's own passcode or biometric lock. If you share a work phone, sign out before handing it over, and send any pending diary entries first.
Keeping & deleting your data
You can delete your account at any time in the app (Profile → Delete account) or via our account deletion page. This revokes your logins, removes your personal credentials, receipt photos, profile photo and contact number, removes any nicknames and blocks in staff chat that you set or that were set about you, takes you out of every business's chats, and scrubs your personal details so the account can't be signed into again. Messages you sent in staff chat stay in the conversation for the people you sent them to, with your name removed; if you want the words gone as well, ask the business owner for an erasure, which blanks them. Operational records that belong to the business (such as jobs and invoices) are kept, and some records, for example financial records and work-health-and-safety (SWMS) sign-ons. Are retained in anonymised form because a business's history and the law require it.
We keep personal information only for as long as we need it for the purposes above, or as the law requires. Financial and tax records are generally kept for at least 5 years (as required by Australian tax law) and WHS records for the period required under work-health-and-safety law. Business owners can export all their business data at any time.
Access & correction (APP 12 & 13)
You can ask us to access the personal information we hold about you, or to correct it if it's wrong. Email support@jobdeck.com.au and we'll respond within a reasonable time (usually within 30 days). There's normally no charge. If we can't give you access or make a correction, we'll explain why in writing.
Complaints
If you think we've mishandled your personal information, email support@jobdeck.com.au with "Privacy complaint" in the subject. We'll acknowledge your complaint, look into it, and respond, usually within 30 days. If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au or 1300 363 992.
Children
Jobdeck is a business tool and isn't intended for anyone under 16.
Changes
We may update this policy; we'll post the new version here and update the date above.
Contact
Privacy questions or requests: support@jobdeck.com.au.
Taylored Electrical Group Pty Ltd (ABN 49 689 808 633), New South Wales, Australia. A postal address is available on request.