Privacy Policy

Just Send It AI — Operated by ROCO Group Australia Pty Ltd (ACN 669 916 125 | ABN 30 669 916 125).
Effective: 20 May 2026 · Last updated: 20 May 2026 · Version 1.0

1. Introduction

Just Send It AI is an Australian AI-powered quoting platform built for licensed tradespeople. This Privacy Policy explains how we collect, hold, use, disclose, and protect Personal Information when you access our website at justsendit.com.au, our mobile and web application, or any related service (the "Platform").

We are bound by, and committed to compliance with, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We voluntarily apply APP obligations regardless of whether the small business exemption would otherwise apply to us.

By creating an account, subscribing, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, you must not use the Platform.

2. Who We Are

  • Legal entity: ROCO Group Australia Pty Ltd
  • ACN: 669 916 125 · ABN: 30 669 916 125
  • Trading as: Just Send It AI
  • Registered office: Parramatta, NSW 2150, Australia
  • Privacy contact: admin@justsendit.com.au
  • Website: https://justsendit.com.au

3. What Information We Collect

3.1 Information you provide directly

  • Account & identity: full name, business name, email, phone, password (hashed).
  • Business credentials: ABN, electrical contractor licence number, trade type, state, suburb, service areas, business logo.
  • Subscription & billing: plan selected, billing address, payment method (handled by Stripe — we do not store card numbers).
  • Job inputs: job descriptions, photos, voice recordings, client details, scope notes, addresses.
  • Communications: emails, support tickets, feedback, testimonials, survey responses.
  • Marketing preferences: opt-in status, communication preferences.

3.2 Information we collect automatically

  • Device & technical: IP address, browser type, device type, operating system, screen resolution.
  • Usage data: pages viewed, features used, quote generation counts, session duration, click paths, error logs.
  • Cookies & similar technologies: session cookies, authentication tokens, analytics identifiers (see Section 10).
  • Approximate location: derived from IP — used for service area, GST, and state compliance logic.

3.3 Information we collect from third parties

  • Stripe — subscription status, transaction confirmations (we never see your full card number).
  • Google / Apple — if you sign in using a third-party identity provider.
  • Public registers — verification of ABN (ABR) and contractor licence (state authority records).
  • Marketing platforms — referral source, ad attribution, campaign data.

3.4 Sensitive information

We do not knowingly collect sensitive information as defined under the Privacy Act and ask that you do not submit such information through the Platform.

3.5 Information about your clients

When you generate or send a quote you may submit Personal Information about your clients. You are the controller of that data; we are your processor. You warrant that you have a lawful basis to provide your clients' Personal Information to us and that you have given them appropriate notice. You agree to indemnify us for any claims arising from a breach of this warranty.

4. How We Use Your Information

  • Service delivery — account, quotes, AI processing, history, support.
  • AI quote generation — sending inputs to AI sub-processors to produce indicative quotes.
  • Billing & subscription management via Stripe.
  • Communication — transactional, service, security and (opt-in) marketing messages.
  • Improvement & analytics — aggregate, de-identified usage data.
  • Trust, safety & fraud prevention — licence and ABN verification, misuse detection.
  • Legal compliance — Australian tax, consumer protection, and future ECERT obligations.

We do not sell your Personal Information to third parties. Ever.

5. AI Processing & Automated Decision-Making

5.1 AI sub-processors

The Platform uses third-party AI models to generate quote content. Our primary AI sub-processor is Anthropic, PBC (Claude API), located in the United States. When you submit a job input, the content is transmitted to the AI sub-processor, processed, and returned to you and stored in your account. Anthropic states that API inputs and outputs are not used to train their generally available models by default. We may add or change AI sub-processors over time.

5.2 Outputs are indicative, not advice

  • Do not constitute professional, legal, electrical, or safety advice;
  • Must be reviewed by a qualified, licensed tradesperson before being relied upon or sent to a client;
  • Do not certify compliance with AS/NZS 3000, the Electricity (Consumer Safety) Act 2004 (NSW), or any other standard or law.

You remain fully responsible for the accuracy, legality and suitability of any quote you send.

5.3 No solely automated decisions with legal effect

All material decisions about your account (e.g. termination for misuse) involve human review.

6. Who We Share Information With

  • Anthropic, PBC — AI quote generation (USA).
  • Stripe — payment processing (AU/USA).
  • Supabase — database, authentication, file storage (USA, with AU region where available).
  • GoHighLevel — CRM, email, SMS, onboarding workflows (USA).
  • n8n GmbH — workflow automation (self-hosted / EU).
  • VentraIP Australia — domain and email hosting (Australia).
  • Xero — accounting records (NZ/AU).
  • Professional advisors — lawyers, accountants, auditors under confidentiality.
  • Government and regulators — where required by law.
  • Acquirers — in connection with a sale, merger, or restructure.

Future sub-processors may include QuickBooks, MYOB, the Building Commission NSW ECERT API, Nango, and others necessary to deliver the Platform.

7. Overseas Disclosure (APP 8)

Some sub-processors are located outside Australia, primarily in the United States. By using the Platform, you acknowledge and consent to the transfer of your Personal Information overseas for the purposes described. We nevertheless take reasonable steps to ensure recipients handle data consistently with the APPs (reputable providers, SOC 2 / ISO 27001 where available, data processing agreements, encryption in transit and at rest).

8. Data Security

  • Encryption — TLS in transit; AES-256 at rest where supported.
  • Access control — Supabase row-level security; principle of least privilege internally.
  • Credentials — passwords hashed; never stored in plain text.
  • API keys stored in environment variables only.
  • System prompts stored server-side and never exposed to the frontend.
  • Internal credential transfers via ephemeral encrypted channels only.
  • Monitoring — application logs, error tracking, access logging.

No method of transmission or storage is 100% secure. In the event of an eligible data breach we will comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

9. Data Retention

  • Account data — active subscription + 7 years from cancellation (tax records).
  • Quote content — duration of subscription + 12 months, unless earlier deletion requested.
  • Billing records — 7 years (ATO).
  • Support communications — 3 years from last interaction.
  • Marketing data — until you unsubscribe or request deletion.
  • Server logs — 12 months.

10. Cookies & Tracking

The Platform uses cookies and similar technologies to maintain your login session, remember preferences, analyse aggregate usage, and measure marketing. You can manage cookies through your browser settings. Disabling essential cookies may prevent the Platform from functioning correctly.

11. Your Rights

  • Access — request a copy of the Personal Information we hold.
  • Correct — request correction of inaccurate or out-of-date information.
  • Delete — request deletion, subject to legal retention obligations.
  • Export — request a portable copy of your data.
  • Withdraw consent — opt out of marketing at any time.
  • Complain — to us, or to the OAIC at www.oaic.gov.au.

To exercise any of these rights, email admin@justsendit.com.au with subject "Privacy Request". We will respond within 30 days. We may need to verify your identity first.

12. Children

The Platform is intended for licensed tradespeople and is not directed at individuals under 18. We do not knowingly collect Personal Information from minors.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by email, a prominent notice on the Platform, and an updated "Last updated" date. Continued use after changes take effect constitutes acceptance.

14. Contact Us

Privacy Officer, Just Send It AI (a trading name of ROCO Group Australia Pty Ltd)
Email: admin@justsendit.com.au · Web: https://justsendit.com.au

If you are not satisfied with our response, contact the OAIC at GPO Box 5288, Sydney NSW 2001 · 1300 363 992 · www.oaic.gov.au.

End of Privacy Policy — Version 1.0