Privacy Policy

This policy explains how the operator of TURVIQ ("we", "us") handles personal information in TURVIQ and on this website. We follow the Privacy Act 1988 and the Australian Privacy Principles.

Two different roles

Most of the personal information in TURVIQ isn't ours: it's your business's. When you enter your clients' details or your staff's records, you are the one who collected it and you decide what to enter. We store and process it only to run TURVIQ for you. For the information about you and your login that we collect ourselves, we are the one responsible.

What we collect

• Account details: your name, email, business name, a salted hash of your password (never the password itself), the version of these policies you agreed to, and when you sign in.
• Business data you enter or import: clients and their contacts and properties, jobs and photos, quotes and invoices, messages, and staff records. If you choose to record it, staff records can include addresses, emergency contacts, tax file numbers, bank and super details, contracts, licences and pay rates.
• Payments: card payments and your TURVIQ subscription are handled by Stripe. We don't see or store card numbers; we keep Stripe reference numbers and your subscription status.
• Technical information: your IP address and basic request details, used to keep the service secure and to slow down guessing of passwords, and a sign-in token kept in your browser so you stay logged in.
• Emails we exchange with you when you contact support.

How we use it

• To provide, secure and support TURVIQ, including sending the confirmation, password reset and invitation emails.
• To bill you and to keep records we're required to keep.
• To fix problems and improve the product.

We don't sell personal information and we don't use your business data for advertising.

Sage AI

When you use Sage or another AI feature, the information needed for that request (for example the clients, jobs or messages involved) is sent to an AI provider through our AI service so it can produce the answer. We send only what the request needs, and the AI features only run when you use them.

Who we share information with

We use trusted service providers to run TURVIQ: our hosting and database provider, Stripe (payments), our email sender, AI providers, and mapping services. If you connect other tools (for example Xero, QuickBooks, Google or Microsoft), information goes to them as you direct. These providers may store or process information outside Australia, including in the United States. We take reasonable steps to make sure they protect it. We may also disclose information where the law requires it.

How we protect it

• Everything travels over encrypted connections (HTTPS).
• Each business's data is kept separate, and the database can only be reached by our servers, never directly from a browser.
• Passwords are stored as salted hashes, sign-in attempts are limited, and staff logins only receive the information their job needs (for example, not other people's pay, tax or bank details).
• Connected-service keys are stored encrypted.

No system is perfectly secure. If we have an eligible data breach, we'll tell the people affected and the Office of the Australian Information Commissioner as the law requires. Tax file numbers get extra care: only record them if you need to, and only give admin access to people who must see them.

How long we keep it

We keep your information while your account is open. The account owner can download everything, or delete the business, from Account, then Your data. Deleting removes the business's data from our live systems straight away. Copies in our providers' backups can remain for a limited time until they expire.

Your rights

You can ask to see, correct or delete the personal information we hold about you, and the account owner can do much of this in the app. Email hello@turviq.com and we'll reply promptly. If your information is in a business's TURVIQ account (for example you are their client or employee), please ask that business first. If you're unhappy with how we handle a request or a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Cookies and tracking

TURVIQ keeps you signed in using your browser's storage. We don't use advertising cookies. If we add website analytics we'll keep them privacy-friendly and update this page.

Changes

We'll update this policy when our practices change and show the date at the top. If a change matters, we'll tell you.