Privacy Policy
Last updated: 22 July 2026 · New Zealand Privacy Act 2020 & Australian Privacy Principles
1.Who we are
TradeStart (“we”, “us”) provides the TradeStart software at tradestart.io and app.tradestart.io. This policy explains how we handle personal information for our website visitors and account holders. We comply with the New Zealand Privacy Act 2020 and, for Australian users, the Australian Privacy Principles under the Privacy Act 1988 (Cth).
2.Information we collect
| Category | Examples |
|---|---|
| Account & business details | Your name, email, phone, business name, trade type, NZBN/ABN, business address, and logo. |
| Billing information | Subscription status and history. Card payments are handled by Stripe — we receive confirmation and limited details, not your full card number. |
| Content you enter | Your customers, jobs, quotes, invoices and related notes (see section 4). |
| Usage & technical data | Log data, device/browser information, IP address, and how you use the Service. |
| Support & feedback | Messages you send us and any feedback you submit. |
3.How we use it
- To provide, maintain and improve the Service and your account.
- To process your subscription and send billing, invoice and system emails.
- To provide support and respond to your enquiries.
- To keep the Service secure and prevent fraud or abuse.
- To send you service updates and, where permitted, occasional product news (you can opt out of marketing at any time).
- To meet legal, tax and accounting obligations.
4.Customer data you store
When you add your own customers’ details to TradeStart, you are the party responsible for that information and we process it on your behalf to provide the Service. You’re responsible for having a lawful basis to collect and store it and for responding to your customers’ privacy requests. We don’t use your customers’ personal information for our own marketing.
5.Who we share it with
We don’t sell your personal information. We share it only with service providers who help us run TradeStart, under appropriate confidentiality and data-protection obligations:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing and subscription billing. |
| Postmark | Sending invoice, quote and system emails. |
| Xero | Only if you connect it — to sync invoices you choose to push. |
| MongoDB Atlas & hosting | Hosting the Service and storing your data. |
| Analytics & advertising | Understanding site usage and measuring the performance of our ads (see section 10). |
We may also disclose information if required by law, or to protect our rights, users or the public.
6.Overseas storage
Some of our providers store or process data outside New Zealand and Australia. Where we transfer personal information overseas, we take reasonable steps to ensure it’s protected by comparable safeguards, as required by the Privacy Act 2020 and the Australian Privacy Principles.
7.How long we keep it
We keep your information for as long as your account is active and as needed to provide the Service. After you close your account we may retain data for a reasonable period to meet legal, tax and accounting requirements, then delete or anonymise it. You can export your data before leaving.
8.Security
We take reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), hashed passwords, access controls and rate limiting. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your data and will notify you and the relevant authority if a notifiable privacy breach occurs.
9.Your rights
You have the right to access and correct the personal information we hold about you. In New Zealand these rights come from the Privacy Act 2020; in Australia, from the Australian Privacy Principles. To make a request, email hello@tradestart.io and we’ll respond within the timeframes the law requires. You can also update most of your details directly in your account settings, and opt out of marketing emails at any time.
10.Cookies & analytics
Our website and app use cookies and similar technologies to keep you signed in, remember preferences, and understand usage. If we run advertising (for example on Facebook/Instagram), we may use measurement tools to measure ad performance and reach relevant audiences. You can control cookies through your browser settings; blocking some may affect how the Service works.
11.Children
TradeStart is intended for businesses and people aged 18 and over. It isn’t directed at children, and we don’t knowingly collect their personal information.
12.Changes to this policy
We may update this policy from time to time. If we make material changes we’ll give reasonable notice (for example, by email or in-app) and update the “last updated” date above.
13.Contact & complaints
Questions or a privacy request? Email hello@tradestart.io, call 027 390 5330, or write to Brunswick Street, Timaru, New Zealand. If you’re not satisfied with our response, you can complain to the NZ Office of the Privacy Commissioner (New Zealand) or the Office of the Australian Information Commissioner (Australia).