Privacy Policy — Dockett

Dockett ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Dockett web and mobile application. Please read this policy carefully.

1. Information we collect

We collect information you provide directly to us, including:

Account information: Name, email address, and password when you register.
Business information: Business name, ABN, phone number, and business logo.
Financial data: Bank account name, BSB, and account number (used to populate invoice payment details — never processed or stored by Dockett payment infrastructure).
Client data: Names, email addresses, and phone numbers of your clients that you enter into the app.
Job and scheduling data: Quotes, invoices, line items, job notes, voice transcripts, job site addresses, scheduled dates and times, and variation records you create.
Usage data: IP address, browser type, pages visited, and feature usage for improving the service.

2. How we use your information

To provide, operate, and maintain Dockett
To generate quotes, invoices, and reports on your behalf
To process subscription payments via Stripe
To send transactional emails (e.g. quote copies, invoices, job scheduling notifications with calendar invites) via Resend
To respond to your support requests
To improve and develop new features
To comply with our legal obligations

3. How we store your data

Your data is stored securely using Supabase, which operates on Amazon Web Services infrastructure. Depending on the Supabase project region selected, your data may be stored on servers located in Australia (ap-southeast-2 — Sydney) or the United States.

We use industry-standard encryption in transit (TLS) and at rest. Access to your data is controlled by row-level security policies — only you can access your own business data.

4. Third-party services

We share your information with the following third parties only as necessary to provide the service:

Stripe — Payment processing and subscription management. When you subscribe, Stripe collects and stores your payment card details directly. Dockett never sees or stores full card numbers.Stripe Privacy Policy
Resend— Transactional email delivery (e.g. quote copies, invoice copies, and job scheduling notifications including calendar invites). Your client's email address and scheduled job details are shared with Resend only when you trigger a send action.Resend Privacy Policy
Anthropic (Claude API)— AI-powered voice transcription and quote extraction. Voice transcripts may be sent to Anthropic's API to extract job details. We do not send personally identifiable information to Anthropic beyond what is in the transcript itself.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. financial records for tax purposes).

6. Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and data
Make a complaint about how we handle your information

7. Cookies

We use strictly necessary cookies (session authentication) to operate the service. We do not use advertising or tracking cookies.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of Dockett after changes constitutes acceptance of the updated policy.

9. Contact us

For privacy enquiries, requests, or complaints, please contact us at:

privacy@dockett.xyz