Privacy policy for businesses

Two kinds of information

Information about you and your staff. We collect this to give you an account and to bill you, and we're responsible for it.

Information about your customers. You put this into JobLoop and you're responsible for it. We hold and process it for you, on your instructions, to provide JobLoop. We don't use it for anything else.

What we collect about you and your staff

• Your business's name and ABN, and what the Australian Business Register says about that ABN.
• Each staff member's name, email address, phone number if they add one, and their role.
• Login details. Passwords are stored scrambled; we can't read them.
• What staff record in JobLoop: hours worked and leave, and their location only while they share an "on my way" link.
• How many text messages your business sends each month, to work out your bill.
• Billing details. Your card is entered with Stripe, our payment provider. We never see or store the card number; we keep a reference to your Stripe customer record and the state of your subscription.
• Errors the app runs into while you use it, so we can fix them.

What we use it for

• Setting up and securing your account, and checking that a registration is a real business.
• Running JobLoop for you, and sending the messages you've set it up to send.
• Billing you, and emailing you about your account: approval, reminders about payment, and changes to the service.
• Fixing faults and keeping the service secure.
• Keeping the records the law requires.

We don't sell personal information, and we don't send you or your customers anyone else's advertising.

Who it's shared with

Only the services JobLoop needs in order to work:

• Supabase, which hosts the database, in Australia (Sydney).
• Vercel, which hosts the website and app.
• Stripe, for your subscription to JobLoop.
• Square, when you connect your own Square account to take payments from your customers.
• Resend, which sends emails, and Twilio, which sends text messages.
• Google, for address lookup and, where a staff member chooses, their own Google Calendar.
• The Australian Business Register, to look up the ABN you register with.

Some of these providers process information outside Australia. We may also disclose information where the law requires us to.

How it's protected

• Information is encrypted in transit and at rest.
• Each business's data is kept apart from every other's by rules in the database itself, not only by the screens you see.
• Within your business, what a person can see and do depends on their role. Staff can turn on two-step sign-in.
• The few of us who run JobLoop can reach your data only as needed to run the service, fix a fault you've reported, or meet a legal obligation.

If there's a data breach that is likely to cause serious harm, we'll tell the businesses affected and the Office of the Australian Information Commissioner, as the law requires.

How long we keep it

For as long as you have an account. We don't delete your data when you stop paying, so you can come back to it or export it. Ask us to delete it and we will, apart from billing and tax records the law requires us to keep.

Your choices

• You can see and correct most of what we hold about you in Settings.
• You can export your customers and sales from Settings > Customer & sales data.
• You can ask us for a copy of the information we hold about you, to correct it, or to delete it, by emailing admin@jobloopcrm.com.au.
• If one of your customers asks you to delete their information, you can do that yourself from their page in JobLoop.

If you're not satisfied with how we handle a request, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.