← Back

Privacy Policy

Version 2026-07-02-v1 · Last updated 2 July 2026

1. Who we are

JobFlo is operated by ArcLabs Technologies, a registered business name of Tapiwa Blessing Maramba (ABN 48 689 947 289), in Australia. We're bound by the Privacy Act 1988(Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, disclose and protect personal information when you use jobflo.au (the “Service”).

2. Personal information we collect

We collect personal information that is reasonably necessary to provide the Service to you. The information we collect includes, but is not limited to, the following.

From you as an account holder, we collect:

  • your name, email address and password (hashed) when you sign up;
  • business information you provide during onboarding — business name, ABN, phone, address, GST status, hourly rate, bank account details for displaying on invoices;
  • a logo or photo you choose to upload;
  • billing details if you subscribe to a paid plan (processed by our payment provider — see below);
  • technical metadata such as IP address, browser type and pages visited;
  • when you use our mobile app — your device type and operating system, app version, a device identifier, a push-notification token (if you enable notifications), and basic crash/diagnostic data;
  • photos you capture or select — with your permission, the app uses your device camera and photo library so you can attach photos to jobs and documents and upload a logo.

If you enable biometric unlock (Face ID, Touch ID or fingerprint), the check is performed entirely by your device's operating system. We never receive, see or store your biometric data — only a confirmation from your device that the unlock succeeded.

Sensitive information.JobFlo isn't designed to collect “sensitive information” as defined in the Privacy Act 1988(Cth) — this includes information about your health, racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, sexual orientation or practices, or criminal record, among other categories. We don't ask for it, and we ask that you don't enter it into free-text fields such as notes. If you choose to record such information, you consent to us holding it as part of your account data.

About your clients, you may enter:

  • names, email addresses, phone numbers, business addresses;
  • notes, quotes, invoices, payment records, appointments related to them.

When you record information about your clients in JobFlo, you are the party responsible for that information. You're responsible for handling it in line with your own obligations under the Australian Privacy Principles — including having a reasonable basis to collect it and, where required, telling your clients how their information is used.

How we hold your information.Personal information is held in our database and file-storage systems and protected with the measures described in section 6 (“Storage and security”).

3. How we use information

We use personal information to:

  • provide, maintain and improve the Service;
  • send transactional emails — account confirmations, invoices, payment receipts, reminders, lifecycle notifications;
  • respond to your support requests;
  • process subscription payments;
  • detect and prevent fraud, spam, and abuse;
  • comply with our legal obligations.

4. Marketing

We may send you occasional product update emails about features we've shipped or things relevant to your trade. You can unsubscribe at any time using the link in those emails. We will not sell your personal information or your clients' personal information to anyone, ever.

5. Who we share information with

We share personal information where it's reasonably necessary to provide and operate the Service. This includes, but is not limited to, the following types of service providers:

  • Supabase— our database, authentication and file storage provider. Data is stored in Supabase's Australian region where available.
  • Stripe(when subscriptions or card payments are enabled) — our payment processor. Stripe handles all cardholder data directly; we never see or store card numbers. If you turn on online card payments, you set up a Stripe Express connected account: Stripe collects your identity and bank/payout details directly from you to verify you and pay funds into your account, and processes your clients' card payments. Your use of Stripe is governed by Stripe's own terms, including the Stripe Connected Account Agreement.
  • Google Maps Platform (Places API)— powers address autocomplete and “Directions” links. When you type an address, fragments are sent to Google to return suggestions. Operated by Google in the United States.
  • Resend — our transactional email provider, used to deliver invoices, reminders and lifecycle emails.
  • Brevo — our waitlist email provider (used only for pre-launch signups, not for account holders).
  • Apple Push Notification service and Google Firebase Cloud Messaging— deliver push notifications to your device, if you enable them.
  • Apple App Store and Google Play — distribute our mobile app; these platforms have their own privacy terms covering your use of the app store.
  • Vercel — our hosting provider.

Each of these providers handles personal information under their own contractual and legal obligations. We choose providers that maintain industry-standard security and, where possible, host data in Australia.

If you turn on calendar sync, we generate a private iCal feed at a secret link that your calendar app (e.g. Apple, Google or Outlook Calendar) periodically fetches. Anyone with that link can see your appointment details, so keep it private — you can reset it at any time.

We may also disclose personal information if required by law, a court order, or to protect the rights, property or safety of ArcLabs Technologies, our users, or the public.

6. Storage and security

Your core account and business data is stored in our database provider's Australian region where available. Some providers — email, payments, maps, push notifications and hosting — operate overseas (see “Overseas transfers” below). We use industry-standard security measures — encryption in transit (TLS), encrypted database backups, role-based access controls, and audit logging — to protect personal information.

No method of internet transmission or storage is 100% secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

7. Data retention and deletion

We keep personal information for as long as your account is active. If your account is cancelled or locked, we retain your data for 30 days so you can return and resume your subscription, then permanently delete it from active systems. Backups are overwritten on our standard rotation.

You can export all of your data at any time as a CSV bundle via the in-app export tool.

Deleting your account.If you're the account owner, you can permanently delete your account and everything in it at any time — open Profile → Subscription & Billing, scroll to Delete account, type DELETE to confirm and tap Permanently delete. This immediately and permanently removes your account and all its data — clients, documents, quotes and invoices, payments, expenses, time entries and appointments — and cancels any active subscription. It can't be undone. If you're a team member rather than the owner, or can't reach that screen, email hello@jobflo.au from your account email address and we'll delete it for you.

8. Your rights

You have the right under Australian privacy law to:

  • access the personal information we hold about you;
  • ask us to correct it if it's inaccurate or out of date;
  • ask us to delete your account and the personal information about you;
  • complain to us if you think we've mishandled your personal information — and, if you're not satisfied with how we handle your complaint, complain to the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, email hello@jobflo.au. We'll respond within a reasonable time and typically within 30 days.

Complaints.If you believe we've mishandled your personal information, please raise it with us first by emailing hello@jobflo.au with the details. We'll acknowledge your complaint, investigate, and aim to respond within 30 days. If we can't resolve it to your satisfaction, you can escalate to the OAIC at oaic.gov.au or 1300 363 992.

9. Cookies and app permissions

We use cookies only to keep you signed in and to remember your preferences. We do not use third-party advertising or behavioural tracking cookies. We may use a small number of first-party analytics events to understand how the Service is used, in aggregate, so we can improve it.

Our mobile app asks for certain optional device permissions — camera and photo library (to attach photos and upload a logo), notifications, and biometric unlock. You can grant or revoke any of these at any time in your device settings.

10. Overseas transfers

Some of our service providers — for example Stripe, Resend, Google (Maps and push notifications), Apple, and Vercel — operate from outside Australia, primarily the United States. By using the Service you consent to your personal information being transferred to and stored in those jurisdictions for the purposes described in this policy.

11. Automated decision-making

We do not use automated processes — including any form of artificial intelligence — to make decisions about you that have a legal effect or similarly significant effect. For example, we don't use automation to approve or refuse your access, set your pricing individually, or assess your creditworthiness. Some features use automation to assist you (for instance, generating payment reminders or flagging overdue invoices), but these don't make decisions that materially affect your rights. If this changes, we'll update this policy to explain what automated decisions are made, the kinds of personal information used in them, and how they may affect you, consistent with the Privacy Act 1988 (Cth).

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll ask you to acknowledge the updated policy the next time you sign in.

13. Contact

For privacy questions or complaints, email hello@jobflo.au.