Privacy Policy

Last updated: 9 October 2026

Tradies Bio® is a business platform for licensed Australian tradies, accessible at https://tradiesbio.au/. The platform includes a public-facing tradie Bio page, a personal tradie dashboard, a Progressive Web App (PWA) that tradies can install on their mobile device, and features including phone enquiries and customer management tools. Platform calendar connections are currently disabled and the shared AI runtime is retired. Our separate AI Personal Assistant service helps business owners set up and use their own provider accounts; it does not supply a shared AI account through the PWA.

One of our main priorities is the privacy of everyone who uses Tradies Bio®. This Privacy Policy explains what information is collected and recorded through the Tradies Bio® platform and how it is used. Please contact Stephen Pearce through the email below about your data on this site.

Tradies Bio® is operated as a sole-trader business by Stephen Pearce, trading as Tradies Bio. The sole trader operates this website and is responsible for the handling of personal information described in this policy. Tradies Bio® is a registered trademark (No. 2408794) owned by Stephen Pearce.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at info@tradiesbio.au.

This Privacy Policy applies to all online activities conducted through the Tradies Bio® platform, including the public website at tradiesbio.au, the personal tradie dashboard, the Progressive Web App (PWA), and enabled external-service features accessed through the platform. It covers information shared by or collected from tradies, customers, and visitors across all of these surfaces. It also covers installation and support records we collect while delivering our service. Data you provide directly to your own external AI provider is governed by that provider's privacy terms, rather than automatically becoming Platform data.

Consent

By using the Tradies Bio® platform — including the public website, your personal tradie dashboard, the Progressive Web App (PWA), or any enabled integrated feature — you hereby consent to this Privacy Policy and agree to its terms.

Information We Collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

When you sign up to the Tradies Bio® system, you will also be asked to confirm public information — specifically your ABN and any licences that you hold in your business. You will also be asked to provide a Certificate of Currency, which is included in the formation of your Credentials profile for your clients.

Important: It is the sole responsibility of the Tradie to ensure that all information provided is correct and current. The Platform does not assess the adequacy of insurance cover, or the type of insurances applicable or not applicable. This is wholly the responsibility of the Tradie to provide correct information to the customer. Use of the Tradies Bio® platform signifies that the information provided is factual, current, and relevant. Tradies Bio® is a hold-and-capture platform for tradies to showcase their business — the Tradie is responsible for the content and accuracy therein.

How We Use Your Information

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our website and platform
  • Improve, personalise, and expand our website
  • Understand and analyse how you use our website
  • Develop new products, services, features, and functionality
  • Communicate with you, either directly or through one of our partners, including for customer service, updates, and marketing and promotional purposes (Note: data obtained through Google APIs — including Google Calendar data — is never used for marketing or promotional purposes; see the Google Services & Calendar Data section below for the explicit statement)
  • Send you emails relevant to your account and service
  • Find and prevent fraud

Log Files

The Tradies Bio® platform uses log files. These files log visitors when they visit websites. All hosting companies do this as a part of hosting services analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any personally identifiable information. The purpose of the information is for analysing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

Cookies and Web Beacons

Like any other website, Tradies Bio® uses cookies. These cookies are used to store information including visitors' preferences and the pages on the website that the visitor accessed or visited. The information is used to optimise the users' experience by customising our web page content based on visitors' browser type and/or other information. For more general information on cookies, please refer to your browser's help documentation.

Third-Party Services

Tradies Bio® does not display advertising and does not use any advertising network, ad server, or tracking pixel. We do not use Google Ads, DoubleClick, or any third-party advertising cookie.

External services support Platform operations. Only enabled features use the relevant service; a provider mention is not a promise that a retired feature is available:

  • Calendar services — Platform calendar access is currently disabled. Historical Google API handling is described below; it is not the same as a customer authorising their own AI provider to use their calendar.
  • Stripe — used to process payments where applicable. Stripe's privacy policy is available at stripe.com/au/privacy.
  • Phone and messaging service providers — where an enabled feature uses them, they process necessary contact numbers, delivery/routing information and message or enquiry content. Ask us for the provider and applicable privacy details for a particular enabled feature; these services are not included merely by purchasing customer-owned AI setup.
  • Hosting, storage and email providers — process the account, document and communication data needed to host the Platform, store your records and send service emails.
  • OpenAI — previously used for the shared AI Co-Pilot, Nova and Scout features. Those shared runtime features are retired. Existing AI records are retained only while their retention requirements are reviewed; Google Calendar data was not passed to OpenAI.

You can disable browser cookies through your browser's settings. This will not affect core platform functionality such as logging in or viewing your dashboard.

Australian Privacy Act 1988 & APPs

We aim to handle personal information consistently with applicable Australian privacy obligations, including the Australian Privacy Principles where they apply. You can contact us to request access to or correction of information held through this site:

  • The right to access — You have the right to request copies of your personal data. We may charge a small fee for this service.
  • The right to rectification — You have the right to request that we correct any information you believe is inaccurate, or complete information you believe is incomplete.
  • The right to erasure — You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing — You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing — You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability — You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

If you make a request, we will endeavour to respond within one month. To exercise any of these rights, please contact us at info@tradiesbio.au.

Children's Information

The Tradies Bio® platform does not knowingly collect any personally identifiable information from children under the age of 13. If you believe that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Google Services & Calendar Data

Current position: new Platform calendar connections and calendar reads, writes and token refreshes are disabled. Any calendar access you separately authorise within your own AI account is controlled through that provider, not through a new Tradies Bio® calendar connection. Contact us about access, correction or removal of historical Platform records.

Historical Platform calendar integration and data-handling disclosures

The following describes the earlier integration, not a currently offered connection or active Scout feature. Historical retention and removal requests are reviewed separately; this description is not a claim that every legacy record has been deleted.

Tradies Bio® integrates with Google Calendar to help tradies view upcoming jobs, identify open diary gaps, and automatically log customer enquiries as calendar events. This integration is entirely optional. Tradies who choose to connect their Google account authorise access via OAuth 2.0. The Google API scope requested is:

  • https://www.googleapis.com/auth/calendar.readonly — reads your calendar names during initial setup only, so you can choose the calendar you use for work. It is used once to display the picker, then never again.
  • https://www.googleapis.com/auth/calendar.events — enables the Tradies Bio® jobs workflow to read and write events in your selected jobs calendar only. Read access displays upcoming jobs in My Jobs and lets Tradie Scout identify open schedule gaps (start and end times only — no event content). Write access creates or updates Tradies Bio® events for Bio-page enquiries and booking requests. We never delete or modify events you have created yourself.

What we read from Google Calendar

  • My Jobs view — event title (summary), location, description, and start/end date and time are read from your selected Google jobs calendar and displayed inside your private Tradies Bio® dashboard. This data is fetched live and shown only to you — it is not stored in our database.
  • Tradie Scout — the API request is limited to start and end date/time fields only (via a partial-response field selector: fields="items(start,end)"). Event titles, descriptions, locations, and all other event content are not requested or received by this feature. Scout runs when you open Co-Pilot and request its analysis — it does not access your calendar silently in the background.
  • Calendar names during setup — names are read once to show the calendar picker, then are never read again or stored.
  • Connected calendar ID — we store only the unique identifier of your selected Google jobs calendar in our database so we know which calendar to read from and write to on subsequent sessions. The calendar name is not stored.

What we do not use: Attendee names or email addresses, organiser details, conference/video call links, recurrence rules, or any other calendar metadata beyond those described above.

What we write to Google Calendar

When a tradie uses the CRM event feature, Tradies Bio® creates or updates an event in their connected Google Calendar. These events contain:

  • A title summarising the enquiry status and customer name
  • A description containing job type, job location, customer phone and email, job value, urgency, the customer's original message, any notes the tradie has added, and the Tradies Bio® enquiry reference
  • Start and end date/time (set by the tradie)

This data originates from information customers and tradies have entered into Tradies Bio® directly — it is written back to Google Calendar for the tradie's own records. Tradies may disable this feature at any time by disconnecting their Google Calendar.

Token storage

Google OAuth access and refresh tokens are stored server-side in Tradies Bio®'s database, linked to the tradie's account. They are never stored in browser local storage or accessible to client-side scripts. Tokens are used solely to make Google Calendar API calls on behalf of the tradie. Disconnecting Google Calendar immediately deletes all stored tokens.

Progressive Web App (PWA) and client-side data handling

Tradies Bio® is available as an installable Progressive Web App (PWA). The PWA is a thin client — it makes no direct calls to any Google API. All Google Calendar API requests are made exclusively by Tradies Bio®'s backend servers; the PWA communicates only with Tradies Bio®'s own servers, never with Google's API directly.

OAuth access tokens and refresh tokens are held server-side only and are never transmitted to the browser or the PWA client under any circumstances.

When a tradie views My Jobs, the server fetches calendar event data and returns it as server-rendered HTML — the same way any authenticated web page delivers user data to a browser. All responses that include Google Calendar event content are served with a Cache-Control: no-store header, which instructs the browser and any intermediate cache not to store the response. Tradies Bio® does not intentionally write Google Calendar event data to localStorage, sessionStorage, IndexedDB, service worker caches, or browser cookies.

Informed consent before connecting

Before a tradie authorises Google Calendar access, Tradies Bio® displays a clear explanation of why the connection is being requested, what it enables (job visibility, automatic booking creation, and follow-up tracking), and what data is and is not accessed. Tradies can choose "Not now" at any point before the Google authorisation screen appears, with no data collected and no redirect to Google.

Revoking access

Tradies can disconnect their Google Calendar at any time — no need to contact support. Disconnect from within Tradies Bio®:

  • My Jobs → Calendar settings: Open My Jobs from your dashboard, tap Calendar settings, then tap Disconnect Google Calendar. This immediately removes all stored OAuth tokens from our database and stops all calendar reads and writes.

Disconnecting via either method is immediate and permanent until you choose to reconnect. All stored OAuth access tokens, refresh tokens, and your selected calendar ID are deleted from Tradies Bio®'s database at the moment of disconnection.

Access can also be revoked directly from Google's side at any time by visiting your Google Account permissions page, finding Tradies Bio®, and selecting Remove Access. Revoking from Google's side has the same effect — Tradies Bio® will detect the revocation on the next calendar request and display a prompt to reconnect or continue without Google Calendar.

Data retention and deletion of Google user data

  • Event content (titles, descriptions, times): Tradies Bio® does not store Google Calendar event content in our database. All event data is fetched live from the Google Calendar API on demand and displayed only to you. No event content is retained after your session ends.
  • OAuth tokens and Calendar ID: Your Google OAuth access token, refresh token, and selected Calendar ID are retained only for as long as your Google Calendar remains connected to your Tradies Bio® account. They are permanently deleted from our servers the moment you disconnect (via the in-app Disconnect button or via your Google Account permissions page).
  • Account deletion: If you delete your Tradies Bio® account, all associated Google OAuth tokens and Calendar IDs are permanently erased from our servers immediately at the time of deletion — there is no retention period for Google user data once the account deletion is processed. No Google user data is retained after account deletion. To request complete account and data deletion, email info@tradiesbio.au. Deletion requests submitted by email are processed within 30 days of receipt; Google OAuth tokens and Calendar IDs are deleted immediately when that processing occurs, not at the end of the 30-day window.
  • Derived data: Tradie Scout uses start and end times from your calendar to calculate available diary gaps. This calculation is performed in memory and is used only for local, deterministic Scout copy. No calendar-derived value is sent to an AI service or stored in our database.

Who we share or disclose Google Calendar data with

The table below sets out every party that receives or can access your Google Calendar data through Tradies Bio®. There are no other parties.

Party Role Data received
Tradies Bio® platform (our servers) Platform service — operates the calendar sync on your behalf Encrypted OAuth access token, refresh token, and selected Calendar ID. Event data is fetched live and never persisted.
Google LLC (via Google Calendar API) API provider — receives server-side API calls to read/write calendar events on your behalf Standard API requests (OAuth bearer token). Google's own data practices are governed by Google's Privacy Policy.
OpenAI (API service provider) Provides wording for an on-demand Scout suggestion No Google Calendar data or calendar-derived availability values. Scout's availability copy remains local.
No other parties — We do not sell, rent, transfer, share, or disclose Google Calendar data to any advertising networks, data brokers, analytics platforms, financial institutions, or any other third party.

Google API Services User Data Policy — Limited Use

✅ AI & Machine Learning — Explicit Statement

Tradies Bio® does not use data obtained through Google Workspace APIs to develop, improve, or train generalised artificial intelligence (AI) or machine learning (ML) models. Google Calendar data is used solely to provide the in-product features described in this policy — and for no other purpose.

Tradies Bio®'s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • Google Calendar data is used solely to provide the calendar features described above — displaying upcoming jobs, identifying diary gaps, and writing booking events. It is not used for any secondary purpose.
  • Google Calendar data is not used for advertising, marketing, or to serve ads of any kind. Tradies Bio® runs no advertising platform.
  • Google Calendar event content, dates, derived availability values, OAuth tokens, and calendar IDs are not passed to OpenAI or any other AI service. Scout keeps availability calculations local and uses them only for deterministic in-product copy.
  • Google Calendar data is not transferred to third parties except as required to operate the calendar features (for example, server-side API calls made on behalf of the tradie who connected their account).
  • Tradies Bio® does not use data obtained through Google Workspace APIs to develop, improve, or train generalised AI and/or ML models.
  • Human access to your Google Calendar data is prohibited except under these four conditions only:
    1. You have given explicit consent for a support technician to view data to troubleshoot a specific technical problem you reported.
    2. It is necessary for security purposes, such as investigating abuse or a security incident.
    3. It is required to comply with applicable law.
    4. The data is aggregated and fully anonymised for internal operational purposes only (such as monitoring API error rates) — in which case no individual's data can be identified.

Customer-owned AI Personal Assistant — installation, training and support

You sign into your selected AI provider with your own personal or business account and control your subscriptions, billing, permissions and information. You pay any provider subscription or usage charges directly; they are not included in our service fee. Before sharing business or customer information, review the provider's privacy and data-use settings and ensure you have authority to share it.

For our installation and support service, we may record your contact details, agreed setup, assigned Facilitator, terms acceptance, service dates, training completion and support requests/outcomes. We use these records to arrange delivery, support you, handle complaints and maintain necessary transaction records. We do not need your AI-account password or authentication codes. Only permit access needed for an agreed task; temporary access should be removed after the task. Information you explicitly show or send to us for support is handled as a service record, not silently copied from your external AI account.

The Platform does not automatically ingest your external AI conversations or connect to your email/calendar merely because you purchase setup. Any separate access or integration requires its own explanation and your authorisation. Customer-authorised access through an external AI provider is subject to that provider's policies.

Historical Shared Artificial Intelligence Services

Tradies Bio® previously used the following provider for the shared Co-Pilot, Nova and Tradie Scout features:

  • OpenAI — model: gpt-4o, tier: Paid API (not a free or consumer tier). OpenAI's paid API service does not use API inputs to train or improve its models. See OpenAI's API Data Usage Policy.

The shared Co-Pilot, Nova and Scout runtime services are now retired and no new use of those PWA features is sent to OpenAI. Existing conversation, usage and support records are not automatically deleted while Tradies Bio reviews its lawful retention requirements.

Google user data and AI: Google Calendar event content, dates, derived availability values, OAuth tokens, and calendar IDs are never sent to OpenAI or any other AI service. Tradie Scout reads calendar timing only to calculate availability locally and uses that result in deterministic in-product copy. Event titles, descriptions, locations, customer details from calendar events, and all other Google user data are never included in AI prompts.

These historical shared-service statements do not describe the data you choose to share directly with your own AI provider. The separate customer-owned service is described above.

Data Protection

The Tradies Bio® platform takes the security of personal information seriously and applies the following protections across all data, with specific mechanisms for sensitive credentials such as Google OAuth tokens:

General protections

  • Encryption in transit — all data between your browser and our servers is encrypted via HTTPS/TLS 1.2+. Plain HTTP connections are rejected.
  • Access controls — tradies can only access their own calendar data and business information. No tradie can view another tradie's data. Administrative access is role-restricted to authorised Tradies Bio® staff and is audited.
  • Optional integration — Google Calendar access is entirely optional. Tradies who do not connect Google Calendar are not affected by any of the Google data practices described in this policy.
  • AI data isolation — raw Google user data is never transmitted to third-party AI services, as described above.

Sensitive data — Google OAuth tokens

Google OAuth access tokens and refresh tokens are treated as sensitive credentials and are subject to the following specific protections:

  • Encryption at rest — OAuth tokens are stored encrypted in our database. The encryption key is held separately from the token store and is never written to application logs.
  • Server-side only — tokens are never returned to the browser, written to cookies, or stored in browser local storage or session storage. All calendar API calls are made server-side using the stored token; the token itself is never exposed to client-side JavaScript.
  • Minimum retention — tokens are held only for as long as the Google Calendar integration remains active. Disconnecting immediately triggers permanent deletion of all tokens from the database with no backup retention.
  • Scope limitation — the OAuth token is scoped to calendar.events for the selected jobs calendar and calendar.readonly to read calendar names during setup only. Tradies Bio® requests no other Google API permissions.
  • Revocation detection — if Google revokes a token (e.g. the tradie removes access from their Google Account settings), Tradies Bio® detects the 401 response on the next API call and immediately purges the stored token and flags the integration as disconnected.
  • No logging of token values — token strings are never written to application logs, error reports, or monitoring dashboards.

Google API Services — Limited Use Compliance

✅ Google API Services User Data Policy — Compliance Statement

Tradies Bio®'s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data accessed via Google APIs is used only to provide and improve the user-facing features described in this policy. This data is not used, transferred, or sold to serve advertising, or to create, train, or improve generalised AI or machine learning models outside of the specific in-product features described above.

✅ AI/ML Explicit Statement (Google-mandated wording): Tradies Bio® does not use data obtained through Google Workspace APIs to develop, improve, or train generalised artificial intelligence (AI) or machine learning (ML) models.

This statement is hosted at https://tradiesbio.au/privacy#limited-use and can be provided to Google as the required Limited Use compliance disclosure URL. The Google Calendar data section of this policy is also directly accessible at https://tradiesbio.au/privacy#google-data.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Tradies Bio® — Stephen Pearce, sole-trader operator and privacy contact

Email: info@tradiesbio.au

Website: tradiesbio.au

Tradies Bio® is a registered trademark owned by Stephen Pearce — No. 2408794.