Privacy Policy
Last updated: 2 June 2026
1. Who We Are
TeamTradie is operated by Nebula Dev Ltd (New Zealand). We provide an AI office management assistant for trade businesses via WhatsApp.
2. Data We Collect
- Account data: Your name, phone number, trade type, country, timezone, and billing details.
- Messages: Text messages, voice notes, and photos you send via WhatsApp. These are processed to deliver the service.
- Business data: Information from connected tools (Xero, MYOB, Google Calendar) including invoices, quotes, jobs, and client records.
- Customer data: Names, phone numbers, addresses, and job details of your customers, as shared by you through messages or connected tools.
- Usage data: Message counts, tool usage, API calls, and compute time for billing and service improvement.
3. How We Use Your Data
- To deliver the TeamTradie service (message processing, job tracking, invoicing, scheduling)
- To personalise your AI assistant (learning your preferences, clients, pricing)
- To send scheduled communications (morning briefs, quote follow-ups) with your approval
- To bill your subscription accurately
- To improve the service (aggregated, anonymised usage patterns only)
We do not sell your data. We do not use your data to train AI models.
4. Sub-Processors
We use the following third-party services to deliver TeamTradie:
| Provider | Purpose | Data |
|---|---|---|
| Anthropic (Claude) | AI processing | Message content |
| Meta (WhatsApp) | Messaging channel | Messages, phone numbers |
| Fly.io | Agent compute | Business data, workspace files |
| Neon (Postgres) | Database | Account, usage, audit data |
| Paddle | Billing | Payment details, subscription status |
| Nango (self-hosted, EU) | OAuth broker for connected services | OAuth tokens (encrypted at rest) |
| SendGrid | Transactional email delivery | Email addresses, message content |
| Sentry | Error monitoring | Error stack traces, anonymised user IDs |
4a. Google API Services — Limited Use Disclosure
TeamTradie's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your Google account, we access only with your explicit OAuth consent and only the scopes you grant. The current Google connection uses the following data for the corresponding features:
- Google Calendar (
calendar,calendar.events): create / edit / delete job-booking events on your primary or crew calendars, and read existing events to check for scheduling conflicts. - Google Drive (
drive.file): create files you create, open, or choose for TeamTradie, such as quote PDFs, invoices, and job photos. We do not request broad access to your Drive. - Gmail (
gmail.send,gmail.labels): send customer emails (quotes, invoices, booking confirmations, and follow-ups) from your address after your explicit action, and create/read TeamTradie labels for job-related organisation. We do not read your inbox, create drafts, insert messages into Sent, or modify existing mailbox messages. - Google Contacts (
contacts.readonly,contacts.other.readonly): autocomplete customer details when you create a new job. We do not write back to Google Contacts.
Use, transfer, and retention of Google user data:
- Use is limited to providing and improving the user-facing features above. Google user data is not used to train or improve AI/ML models, generalised or otherwise.
- Transfer: Google user data is not transferred to third parties except (a) sub-processors strictly necessary to provide the service (see Section 4), (b) for security investigations, or (c) where required by law.
- Human access: TeamTradie staff do not read your Google data except (a) with your explicit consent for support, (b) for security investigations, or (c) to comply with applicable law.
- Advertising: Google user data is never used for advertising.
- Retention: cached Google user data is deleted within 30 days of you disconnecting Google or closing your account.
You can disconnect Google at any time from Settings → Integrations, or revoke directly at myaccount.google.com/permissions.
5. Data Storage & Security
- Data is stored in the Sydney (SYD) region for AU/NZ users, London (LHR) for UK/EU users.
- Each tradie gets an isolated compute environment — your data cannot be accessed by other users.
- All data in transit is encrypted via TLS. Database connections use SSL.
- All outbound messages to your customers require your explicit approval before sending.
- We maintain an audit log of all messages and actions for accountability.
6. Data Retention
- Message and audit data is retained for 90 days by default.
- You can configure a custom retention period for your account.
- Billing and usage data is retained for the duration of your subscription plus 12 months (for tax/accounting compliance).
- On account deletion, all data is permanently removed (see section 7).
7. Your Rights
Under the New Zealand Privacy Act 2020 and Australian Privacy Principles, you have the right to:
- Access: Request a copy of all data we hold about you and your business.
- Correction: Request correction of inaccurate data.
- Deletion: Request permanent deletion of all your data, including your AI agent, workspace, connected tool data, messages, and audit logs. We will complete deletion within 30 days.
- Portability: Request an export of your data in a standard format.
To exercise any of these rights, message "DELETE MY ACCOUNT" via WhatsApp or email privacy@teamtradie.io.
8. Customer Data (Your Customers)
When you share your customers' information with TeamTradie, we act as a data processor on your behalf. You are the data controller and are responsible for ensuring you have the right to share this information with us. We process customer data solely to deliver the service to you and do not use it for any other purpose.
9. Changes to This Policy
We will notify you via WhatsApp of material changes at least 14 days before they take effect.
Contact
Privacy questions? Email privacy@teamtradie.io or message us on WhatsApp.