Privacy policy
This policy is from JobMuster ("we", "us"). It explains what personal information we handle, why we hold it, and who else holds it. Questions and requests go to hello@jobmuster.com.
Who this covers
- Tradies and their staff who hold a JobMuster account.
- Their customers, whose details a tradie enters so we can send them a job page, texts and emails. For this information we act on the tradie's behalf. The tradie decides what to collect and must have a reason to contact the customer.
- Visitors to this website.
What we collect
| Whose | What |
|---|---|
| Account holders | Name, email address, a hashed password, two-factor settings if you turn them on, and sign-in sessions. |
| Businesses | Business name, ABN, GST status, state, trade, phone number, Google review link, plan and billing status, and the ID of the Stripe account you connect. |
| Customers of a business | Name, mobile number, optional email address, the jobs, quotes, invoices, payments, variations, notes and photos the business records, and whether reminders or texts are switched off. |
| Messages | A record of each text and email we send for a business: who to, when, and whether it was delivered. |
| Technical | IP address, browser type and server logs, used to run and secure the service. |
We never see or store card numbers. Card details go straight to Stripe.
Why we use it
- To run JobMuster: show job pages, send the texts and emails a business asks for, take payments and keep records.
- To bill businesses for their plan.
- To keep accounts secure, investigate problems and prevent misuse.
- To meet our legal obligations, such as tax record-keeping.
We do not sell personal information, and we do not use customers' details to market to them.
Where it is held
JobMuster runs on an EU-hosted server, which also holds the database. We use these service providers. Each one holds only what it needs for the job listed.
| Provider | What for |
|---|---|
| Stripe | Plan billing, and card payments from customers into each business's own Stripe account |
| Resend | Sending email |
| Cloudflare | Storing invoice PDFs, photos and backups, running the domain name system, and protecting the website |
| Sentry | Error reports. We switch off request bodies and personal details, so it receives technical data only |
| Xero | Only if a business connects its Xero account: invoices, contacts and payments are sent to it |
| Google Fonts | Fonts on these pages, which means Google receives your IP address |
We may also disclose information where the law requires it.
Cookies
We use a session cookie to keep you signed in and a security cookie to stop forged form posts. We use no advertising or analytics cookies.
Payments
If you want a payment returned: No, except where the law where you live says a payment must be refunded.
How long we keep it
We keep a business's records while its account is open. When the last user on a business deletes their account, we delete the business and its customers, jobs, invoices, payments, notes and photos. Copies stay in our backups until those backups expire, which takes up to two years.
A business can download its records at any time from Billing.
Security
All traffic is encrypted with HTTPS. Customer job pages use signed links that can't be guessed. Account holders can turn on two-factor sign-in. Access to production systems is limited to the people who run JobMuster.
Access, correction and complaints
You can ask to see or correct the personal information we hold about you. Email hello@jobmuster.com. If you are a customer of a business that uses JobMuster, you can also ask that business directly.
If you are not happy with how we handle a privacy complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy, we will update the date at the top. If a change affects how we use account holders' information, we will email them first.