Your Job is not all public.

We collect account and contact information; customer and trade workspace details; business name, ABN, website, trade and service area; Job summaries and private Job details; quotes, messages, schedules, activity, work records and files; support correspondence; and technical, security and usage records needed to operate the service.

Where a previous billing agreement exists, we retain Stripe customer and subscription identifiers, status and relevant invoice outcomes as needed to manage that agreement and its records. Stripe handles card and payment-method details on its hosted pages; TradieArc does not collect or store full card details.

Before a Founder invitation or matching Job email is sent, we record when express consent was obtained, a short evidence reference and the responsible TradieArc operator. Private delivery and opt-out records use the email address or a one-way hash as needed to deliver the message, honour unsubscribe requests and prevent unsafe repeat delivery.

If a trade workspace requests an ABN or licence check, we collect the supplied identifier, business/public name and licence class, jurisdiction and declared holder relationship. We may retain a bounded response from ABN Lookup or an authorised operator's capture of an official licence register, its source, check time, digest, decision and audit events.

A Job title, suburb or postcode area, trade category and public description can be used to present a lead. Private address, direct contact, access instructions, private photos and work records are intended only for the account and authorised participants in that Job.

A trade business may choose public-facing profile information, but a draft is not public or verified merely because it is saved. Avoid including private or sensitive information in fields labelled public.

A public verification statement is deliberately narrow. It can show the supplied identifier, exact registry fact, holder relationship, jurisdiction/class, official source, check date and expiry. Legal names returned by a provider, raw responses, evidence files, storage paths, decision notes and operator identities are not part of the public profile.

We collect information directly from you, from other authorised Job participants, and automatically when the service handles authentication, security, errors and usage. We use it to create accounts and workspaces, publish and match Jobs, support quotes and handover, provide messaging, scheduling, files and completion tools, manage previous billing agreements and records, send consented Founder and matching Job notices, deliver critical account and work lifecycle messages, honour email preferences, prevent abuse, troubleshoot problems, comply with law and respond to support requests. We use verification evidence only to assess the exact ABN or licence fact requested, support rechecks, correct or revoke statements and audit operator actions; it is not used to buy ranking or infer work quality.

Browser storage may temporarily preserve a guest Job or business draft so it can be restored after sign-in. The draft is removed only after the corresponding authorised save succeeds or when it expires or you clear it.

If private business profile insights are enabled, TradieArc can count qualified profile impressions and views, eligible quote-request starts and completed requests, shortlist saves, and broad discovery paths such as the directory or a direct profile link. We do not put raw IP addresses, user-agent strings, visitor identifiers, full referrer URLs or domains, free-text searches, precise locations, customer identities or Job identifiers in those insight records. Global Privacy Control and Do Not Track requests disable optional browser collection. A short-lived browser attribution record can connect a profile visit to a quote request for up to 30 minutes.

We disclose information to authorised participants where the workflow requires it and to service providers that host or secure TradieArc, including Supabase for database, authentication and private files, Netlify for application hosting, Stripe for previous billing agreements and records, and Resend for outbound email delivery and delivery-event reporting. For an enabled ABN check, the supplied ABN is sent server-to-server to the Australian Business Register's ABN Lookup service. Licence evidence is reviewed from the applicable official regulator; we do not send it to or scrape ABLIS. We may also disclose information where required by law or reasonably necessary to protect people, the platform or legal rights.

These providers may store or process information in Australia and overseas under their service terms and safeguards. We do not sell personal information or disclose private Job details for paid ranking.

We use account authentication, workspace membership checks, database row-level security, private file controls and signed billing webhooks to reduce unauthorised access. No online service can guarantee absolute security, so report suspicious activity promptly and keep your account credentials private.

We keep information while an account, Job, work record or subscription needs it and as reasonably required for security, disputes, accounting and legal obligations. We delete or de-identify it when it is no longer required, subject to backups and records we must retain. Consent evidence, unsubscribe records and bounce, complaint or provider suppression records may be retained as needed to demonstrate consent, keep preferences effective and avoid sending to an unsafe or opted-out address. Verification evidence has a recorded retention deadline no more than two years after capture and may be removed sooner when it is no longer reasonably required, subject to security incidents, disputes, legal obligations and backups.

Optional profile telemetry uses a rotating one-way daily code derived on the server only to deduplicate and rate-limit events. Each parsed request, including a replay, consumes the same bounded daily attempt budget before optional account authentication or storage; those temporary records expire within 48 hours. Database collection starts only through a protected service activation and disabled-period activity is not reconstructed later. Private daily business aggregates and blinded conversion receipts expire within 400 days. Exact shortlist and quote-request records remain governed by their operational account and Job retention rules. Profile insights are visible only to an authorised owner or admin of that business and contribute no weight to public ranking, Job matching, review visibility or request delivery.

You can update supported account, Job and business information in TradieArc. To request access to or correction of other personal information, ask a privacy question, request account deletion or make a complaint, email hello@clarityspace.com.au. Include enough detail for us to verify the account and understand the request, but do not email passwords or full payment details.

We will assess and respond within a reasonable time. If a privacy concern is not resolved, you may be able to contact the Office of the Australian Information Commissioner.

We may update this policy when the supported product, providers or legal requirements change. The effective date at the top identifies the current version. Material changes will be communicated reasonably.