OnTheTools is a registered business name of J.T Kalyvas & J Perazzoli, a general partnership established in Australia, ABN 91 588 670 887. In this policy, "we", "us" and "OnTheTools" refer to that partnership, which is the entity responsible for the personal information described below. You can reach us at support@onthetoolsapp.com.au.
Account details you provide (name, email, phone, suburb, avatar), trade details for tradie accounts (trade, ABN, bio), job details you post (description, category, budget, timing, photos), messages sent through in-app chat, and job/payment status information (invoice amounts, payment/completion status). We do not collect or store full payment card numbers - payment handling goes through a licensed payment processor (Stripe) rather than OnTheTools storing card details directly.
To operate the marketplace: matching clients with tradies, displaying job listings and profiles, enabling messaging and quoting, tracking payment holds and releases, computing ratings from reviews, and improving the app. We may also use it to prevent fraud and abuse and to communicate with you about your account.
Your public profile (name, trade, rating, reviews, consented completion photos) is visible to other users as part of using the marketplace. Job posting photos are public to any tradie browsing jobs. Job completion photos are only shown publicly if the client gives consent; otherwise they're visible only to the client and tradie on that job. Messages within a job's chat are visible only to the client and tradie on that job. We do not sell your personal information to third parties.
Your data is stored using Supabase, a third-party database and storage provider, with row-level access controls so users can generally only read and write data relevant to their own account and jobs. Our Supabase database is currently hosted in Tokyo, Japan. This means your personal information is stored outside Australia. See "Overseas disclosure" below. No system is 100% secure, and we can't guarantee absolute security, but we apply reasonable technical safeguards (access policies enforced at the database level, private storage for unconsented photos with time-limited access links).
Australian Privacy Principle 8 requires us to tell you if your personal information is handled outside Australia. It is. Specifically:
Japan - our Supabase database and file storage are hosted in the Tokyo region. This holds
your account details, job details, messages and photos.
United States - Supabase, Inc. is a US company and its staff may access the hosting
infrastructure for support and maintenance. Stripe, Inc. (payments) and Vercel Inc. (website hosting) are also
US companies. Stripe also operates in Australia.
We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles, but we cannot control, and are not responsible for, how overseas laws may apply to them. If you sign in with Facebook or Google, the name, profile picture and email address we receive from them is handled in the same way.
To protect sign-up and login from bots and abuse, we use Cloudflare Turnstile. It runs invisibly in the background and does not ask you to solve puzzles or identify images. Cloudflare receives technical information about your browser and device in order to tell real people apart from automated traffic. Cloudflare does not use this information to profile you or to serve you advertising - see the Cloudflare Turnstile Privacy Addendum.
We retain account and job data for as long as your account is active, and for a reasonable period afterward in case it's needed to resolve a dispute or as required by law. You can request deletion of your account and associated personal data - see our Data Deletion page.
You can review and update most of your profile information directly in the app. You can request access to, correction of, or deletion of your personal data by contacting us. Deleting your account will remove your profile from public view; some job/payment records may be retained where needed for legal, accounting, or dispute-resolution reasons.
OnTheTools is not intended for use by anyone under 18, and we do not knowingly collect personal information from children.
We may update this privacy policy as the platform evolves. We'll update the "last updated" date when we do.
Questions about this policy can be sent to support@onthetoolsapp.com.au.