Privacy Policy

1. Who we are

ProfitLens ("we", "us", "our") is a business intelligence platform for Australian trade businesses, operated by ProfitLens. Our website is profitlens.com.au.

We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What information we collect

Account information:

• Your name and business name
• Email address and password (stored as a one-way hash)

Business data you import or connect:

• Job records (quoted and actual costs, labour hours, materials)
• Invoice records (amounts, due dates, payment status)
• Quote records (values, acceptance/rejection status)
• Customer names and contact details
• Financial metrics derived from the above

Usage data:

• Pages visited and features used within the platform
• AI Coach conversation history

3. How we use your information

We use your information to:

• Provide the ProfitLens service — analysing your business data and generating insights
• Send your weekly business briefing email (if enabled)
• Send transactional emails (account verification, password reset)
• Process subscription payments via Stripe
• Provide customer support
• Improve the platform

We do not sell your data to third parties. We do not use your business data to train AI models.

4. AI processing

The AI Coach feature sends a summary of your calculated business metrics (revenue totals, profit margins, invoice amounts, conversion rates) to OpenAI to generate responses to your questions.

We do not send raw job records, customer names, contact details, or any personally identifiable information to OpenAI. Only aggregated, anonymised financial summaries are included in AI requests.

OpenAI's data processing is governed by their Privacy Policy. OpenAI does not use API data to train their models.

5. Third-party integrations

When you connect third-party platforms (Xero, simPRO, ServiceM8, AroFlo), we access your data from those platforms using their official APIs and authorisation flows. We only read the data necessary to provide the service. We store access tokens securely and never share them with other users or third parties.

Stripe processes payment information. We never store your credit card details — Stripe handles all payment processing under their own Privacy Policy.

6. Data storage and security

Your data is stored on Cloudflare's global infrastructure, with servers located in Australia and internationally. We use:

• Row-level data isolation — your business data is never accessible to other users
• Encryption in transit (HTTPS/TLS) for all data
• Hashed passwords (one-way, not reversible)
• Signed authentication tokens with expiry

7. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days, after which it is permanently deleted.

You can request deletion of your account and all associated data at any time by contacting us at support@profitlens.com.au.

8. Your rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Withdraw consent for data processing
• Export your data at any time from the Import Data page

To exercise these rights, email support@profitlens.com.au.

9. Cookies

ProfitLens uses only essential session cookies required for authentication. We do not use advertising cookies or third-party tracking cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. Continued use of the service after changes constitutes acceptance.

11. Contact us

For privacy enquiries or complaints:

Email: support@profitlens.com.au
Website: profitlens.com.au
Location: Sydney, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.