1. Overview & Scope
Talkquote ("we", "us", "our") is committed to protecting your privacy in compliance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This policy outlines how we collect, use, store, and disclose personal and financial information across our mobile and web applications.
2. Data We Collect
- Account Information: Name, business name, ABN, email address, phone number, and account credentials.
- Financial & Transaction Data: Bank statement files you upload yourself (CSV or PDF) for reconciliation, plus the transaction lines read from them. Talkquote has no live bank feed connection and NEVER asks for, views, or stores your bank login credentials.
- Invoice & Receipt Content: Photos, uploaded PDFs, and forwarded supplier emails containing line items, totals, GST amounts, supplier ABNs, and store locations.
- Customer & Job Data: Customer names, phone numbers, email addresses, site addresses, and quote history created by contractors.
- Voice Recordings: Audio you record for voice quoting and expense dictation. Recordings are sent for transcription and parsing and are not retained after the resulting draft is created.
3. How We Use Your Data
- To generate quotes, invoices, credit notes, and job-profitability reports.
- To read voice notes, receipts, tax invoices, and uploaded bank statements using Google Gemini models, so expenses can be matched to your uploaded statement lines and active jobs. Every suggested match is presented for your confirmation — nothing is reconciled without you approving it.
- To answer your questions in the in-app support assistant (also powered by Google Gemini).
- To facilitate client credit card payments via Stripe Connect.
- To maintain ATO-compliant 5-year digital record-keeping archives for tax purposes.
4. Data Storage & Security
- Cloud Infrastructure: Data is encrypted in transit (TLS) and at rest (AES-256) on managed Supabase (AWS) infrastructure hosted in the Asia Pacific (Singapore) region. Your data is therefore stored and processed outside Australia, and may also be processed overseas by the service providers listed in section 5.
- Payment Security: Card details are never handled by Talkquote — they are captured and tokenised directly by Stripe (PCI-DSS Level 1 compliant). Bank account details you enter for PayID or direct deposit are stored only so they can be printed on your invoices.
- Access Control: Row Level Security (RLS) ensures contractors can only access their own business data.
5. Third-Party Services
We share data strictly on a need-to-know basis with trusted service providers:
- Supabase (AWS, Singapore region): database, authentication, and file storage.
- Google (Gemini models, accessed via the Lovable AI gateway): voice transcription and parsing, receipt and tax invoice OCR, bank statement PDF reading, and the in-app support assistant.
- Stripe: subscription billing and online client payment processing (Stripe Connect).
- Resend: transactional and notification emails.
- Mobile Message (Australian SMS provider): SMS delivery of quote and invoice links.
We do not sell your data, and we do not use it to train third-party AI models.
6. Your Rights & Access
Under the Privacy Act 1988, you have the right to request access to your personal information, request corrections, or request complete account deletion by contacting support@talkquote.com.au