Privacy Policy

1. Who we are

This Privacy Policy explains how Sam Brennan Pty Ltd trading as Sortwell (ABN 45 687 228 306) ("Sortwell", "we", "us", "our") collects, uses, discloses and protects your personal information when you use the Sortwell applications - Sortwell Budget (budget.sortwell.com.au), Sortwell Business Manager (bizmanager.sortwell.com.au) and Sortwell Debt Manager (debtmanager.sortwell.com.au) - the website at sortwell.com.au, and related services (together, the "Service").

We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service, you agree to the collection and use of information in accordance with this Policy.

2. The information we collect

Account and identity information. When you sign up, we collect basic account information: your name, phone number, email address and (for the business app) your business name. During setup you may also provide details such as your state and suburb (used to load the correct public holidays for you) and your ABN. We do not collect your date of birth.

Information you enter. Sortwell's apps are tools for managing your money, so you enter your own financial information. Depending on which app you use, this may include your pay, hours, tax and super, overheads and expenses, equipment and asset costs, quotes and estimates, jobs and customers, and debts, bills and due dates, along with related financial figures. This is your data. We store it so the Service can work for you. We do not access, use, sell or share the financial data you enter for any purpose other than providing, maintaining, securing and supporting the Service, and it is never visible to other users you have not authorised. Where an app supports additional users, access is restricted by role, so limited-access users cannot see your financial figures.

Payment information. Payments are processed by our payment provider, Stripe. We do not collect or store your full card number. We receive limited billing details (such as your purchase status and the last four digits of your card) needed to manage your account.

Usage and technical information. When you use the Service we automatically collect technical data such as your IP address, device and browser type, log data, and information about how you interact with the app, including through cookies and similar technologies.

Support and assistant interactions. If you contact us for support, or use an in-app Help assistant, we collect the messages and information you provide.

3. How we collect your information

We collect information directly from you when you create an account, complete setup, enter data, pay, or contact us; automatically as you use the Service; and from our service providers, such as Stripe in relation to your payment.

4. Why we use your information

We use your personal information to provide, operate and maintain the Service; create and manage your account; calculate and display your figures; process your payments; provide customer support and answer questions through the Help assistant; communicate with you about your account, security, and service updates; improve and secure the Service; and comply with our legal obligations. We do not sell your personal information.

5. The in-app Help assistant

Some of the Sortwell apps include an AI-powered Help assistant that answers questions about how to use the app. When you send a message to the assistant, that message is transmitted to our third-party AI provider (Anthropic) to generate a response. The assistant is provided for guidance only, cannot access, change or delete your account data, and its responses may not always be accurate. Please do not enter sensitive personal information into the assistant that is not necessary for your question. We do not use your assistant conversations to train AI models.

6. Who we share your information with

We share your information only as needed to run the Service, including with the following service providers ("sub-processors"):

• Supabase - database, authentication and storage hosting.
• Vercel - application hosting and delivery.
• Stripe - payment processing.
• Anthropic - powering the in-app Help assistant.

We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a sale or restructure of our business (in which case your information would remain subject to protections consistent with this Policy). We require our service providers to protect your information and to use it only for the purposes of providing services to us.

7. Overseas disclosure

Some of our service providers store or process data on servers located outside Australia (for example, in the United States or other countries). Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. By using the Service, you consent to this overseas disclosure.

8. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, operate the Service securely, and understand usage. You can control cookies through your browser settings, though some features may not work correctly if you disable them.

9. How we protect your information

We take reasonable technical and organisational measures to protect your personal information, including encryption in transit, access controls, role-based permissions (so limited-access users cannot see your financial data), and reputable hosting providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. How long we keep your information

We keep your personal information for as long as your account is active and as needed to provide the Service. After you close your account, we retain information only as long as necessary to comply with our legal, accounting and record-keeping obligations, after which it is deleted or de-identified. You may request deletion of your data as described below.

11. Your rights - access and correction

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date or incomplete. Much of your information can be viewed and updated directly in the app under Settings. To make a request, contact us at the details below. We will respond within a reasonable time and in accordance with the APPs.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Children

The Service is intended for use by adults. It is not directed at anyone under 18, and we do not knowingly collect personal information from children.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date above, and where changes are significant we will take reasonable steps to notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.

15. Contact us