Privacy Policy
Last updated 2 September 2026
TradeCommand is job management software for trade businesses. It is made by TC Systems Pty Ltd (ABN 95 699 724 028) of 6 Lyster Street, Coffs Harbour NSW 2450, Australia. In this policy, "we", "us" and "our" mean TC Systems Pty Ltd, and "the service" means TradeCommand, including the app at app.tradecommand.com.au and this website.
We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles. This policy explains what we collect, why, where it goes, and how you can reach us.
Who the information is about
- Account holders and staff of a trade business that uses the service.
- Clients and contacts of that business, whose details the business enters or receives.
- People who message a business through a channel the business connects to the service, such as email or WhatsApp.
- Visitors to this website.
What we collect
- Account details: your name, email address, phone number and role in the business.
- Business records: leads, quotes, jobs, variations, purchase orders, timesheets, invoices, comments and files that the business stores in the service.
- Client details: names, addresses, phone numbers and email addresses that the business enters.
- Messages: the content, sender, recipient and timestamps of emails and WhatsApp messages sent to or from a connected channel.
- Connected services: when a business connects Microsoft OneDrive, Microsoft Planner, Xero or WhatsApp, we store the access tokens and account identifiers those services give us.
- Technical data: IP address, browser and device details, sign-in times, and error reports.
We do not collect payment card numbers. We do not use cookies or trackers on this website for advertising. The app uses a session cookie so you stay signed in.
Why we collect it
- To provide the service to the business and its staff.
- To deliver and receive messages on a channel the business has connected.
- To let assistants in the service read incoming enquiries and turn them into leads, tasks or replies for a person to review.
- To keep the service secure, fix faults and send service notices.
- To meet legal duties, such as tax and record-keeping rules.
We do not sell personal information. We do not use it for advertising.
Assistants and automated processing
The service includes assistants that read business records and messages to draft replies, classify enquiries and suggest actions. A person in the business reviews and takes each action. To run these assistants we send the relevant text to Anthropic, an AI model provider. Anthropic processes it to return a result and does not use it to train models.
Who we share it with
We share personal information only with providers that help us run the service:
- Hosting and storage: our own servers and Amazon Web Services (S3) for files.
- Email delivery: MailPace, for transactional email.
- Error monitoring: Sentry, for crash and error reports.
- AI processing: Anthropic, as described above.
- Messaging platforms: Meta Platforms (WhatsApp Business Platform) and any messaging provider a business connects, for messages sent through that channel.
- Connected services: Microsoft and Xero, only when a business connects them, and only for the data that connection needs.
Some of these providers store data outside Australia, including in the United States. We choose providers that commit to protecting personal information to a standard comparable to Australian law.
We also disclose information when the law requires it, or to protect the rights, property or safety of people.
WhatsApp and Meta
A business can connect a WhatsApp Business account to the service. When it does, messages sent to that number are delivered to the service through Meta's WhatsApp Business Platform, and replies the business sends go back the same way. We use the information Meta gives us only to deliver those messages and to manage the connected account. Our use of information from Meta complies with Meta's Platform Terms and Developer Policies.
How long we keep it
We keep business records for as long as the business keeps its account, because the business needs them to run. When a business closes its account, we delete its data within 30 days, apart from records we must keep by law and from backups, which expire on their own cycle. See our data deletion page for how to request deletion.
Security
Data is encrypted in transit. Access tokens for connected services are encrypted at rest. Access to production systems is limited to the people who operate the service. No system is perfectly secure, and we will tell affected people and the regulator about a data breach where the law requires it.
Your rights
You can ask us for a copy of the personal information we hold about you, and ask us to correct it. If you are a client or contact of a business that uses the service, you can also ask that business directly, since it controls the record. We respond within 30 days.
Contact
Email privacy@tradecommand.com.au, or write to TC Systems Pty Ltd, 6 Lyster Street, Coffs Harbour NSW 2450, Australia. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We update this policy when the service changes. The date at the top shows the latest version.