Privacy Policy
In short
- We collect what we need to run your account and to handle the calls and texts your callers send.
- For your callers' details we act on your behalf; for your own account details we are responsible.
- We share data only with the providers that run the Service. We never sell it or use it for advertising.
- The website uses no analytics or advertising cookies. The dashboard uses one cookie to keep you logged in.
This summary helps you find your way; the full text below is what applies.
1. Who we are
TradeReach AI ("TradeReach", "we", "us") is the name under which Ali Marhaben, an individual, provides the Service. Contact us about privacy at support@tradereach.net.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), whether or not the Act applies to us as a small business.
This policy covers the website at tradereach.net, the dashboard at app.tradereach.net and the Service described in our Terms of Service.
2. Our two roles
For information about our customers (the businesses that use TradeReach) and visitors to our website, we decide how it is used and are responsible for it.
For information about the people who call our customers (their callers), we act on behalf of the customer, who decides how it is used. Our Data Processing Addendum covers that processing. If you called a business that uses TradeReach, please contact that business first; we will help them respond.
3. What we collect
- Account details
- Email address, password (stored only as a secure hash), business name, trade, the mobile number for job alerts, and the business settings you enter, such as opening hours, services and questions.
- Billing details
- Your plan, subscription status, billing periods, SMS packs and invoices. Card details go directly to Stripe; we never see or store them.
- Call and message data
- For our customers: callers' phone numbers, call times, the texts exchanged, details callers provide (such as name, suburb and the job), photos they send where supported, and opt-out status.
- Usage records
- SMS counts per billing period, used for allowances and billing.
- Security and legal records
- IP addresses and times of logins and other security-relevant requests, records of administrative actions, and a record of each acceptance of our Terms (time, version and IP address).
- Messages to us
- What you send us when you contact us.
4. How and why we use it
- To provide the Service and your account, including texting callers, alerting you and showing leads (to perform our contract with you).
- To bill you and keep financial records (contract, and our legal obligations).
- To keep the Service secure, prevent spam, fraud and abuse, and keep evidence of acceptances and opt-outs (our legitimate interests, and legal obligations).
- To send service emails such as account confirmation, password resets and important notices (contract).
- To improve reliability using aggregated, non-identifying statistics (legitimate interests).
We do not use personal information for advertising, we do not sell it, and we do not make decisions with legal or similarly significant effects about anyone solely by automated means. The Service sorts enquiries by urgency only to help the business respond.
6. International transfers
Our servers are hosted by netcup in Germany. Our customers and their callers are mostly in Australia, and some of our providers process data in the United States and elsewhere. Before information is disclosed overseas we take reasonable steps, including relying on our providers' contractual data protection commitments, so that it is handled consistently with the Australian Privacy Principles. Where another law applies to a transfer, we also use the safeguards it requires.
7. How long we keep it
- Account details, leads and conversations: while the account is open, unless the customer deletes records or sets a shorter retention period. After an account closes, its data is deleted within 90 days, except as below.
- Opt-out records: as long as needed to keep honouring the opt-out.
- Unconfirmed sign-ups: may be removed after 7 days.
- Login sessions end after 30 days. Password reset links expire after 30 minutes and email confirmation links after 24 hours.
- Backups: taken daily and kept for 7 days on our server and up to 30 days in a separate backup copy, then deleted.
- Billing records: for at least 5 years after the transaction, as Australian tax record-keeping rules require.
- Security records, Terms acceptances and administrative records: for as long as they are needed as evidence or to meet legal obligations.
8. How we protect it
Connections are encrypted with HTTPS. Passwords are stored only as secure hashes, and login cookies cannot be read by scripts. The database cannot be reached from the internet. Administrative access is limited, requires a recent login and is recorded. Backups are kept in access-restricted locations. No system is perfectly secure; if a breach affects your information, we will act and notify you and the authorities where the law requires.
9. Your rights
Depending on the law that applies to you, you can ask to access, correct or delete your personal information, to restrict or object to its use, to receive it in a portable format, and to withdraw consent you have given. Email support@tradereach.net. We may need to confirm your identity, and we answer within the time the law sets.
If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you live outside Australia, you may also be able to complain to the privacy regulator where you live.
11. Children
The Service is for businesses and is not intended for children.
12. Changes to this policy
We will post any update on this page with a new date and, for significant changes, tell customers by email or in the dashboard.
13. Contact
Privacy questions and requests: support@tradereach.net.