Privacy Policy

The short version

Your business and customer information is yours. By default it lives on your own device. We don't sell your data, ever. You can export or delete it any time.

What we store, and where

• On your device (default): your jobs, quotes, invoices, customers, expenses and settings are saved in your browser/app on your phone or computer. They stay there unless you turn on a cloud feature.
• In the cloud (only if you use these features): cloud backup, customer quote/invoice/request links, and sign-in store the relevant data on our hosting provider (Supabase) so the feature can work.

Third parties we use

• Supabase — hosting/database for the optional cloud features and sign-in.
• Stripe — handles your Yamate subscription, and your customers' card payments if you connect your own Stripe account. We never see or store card details.
• Square — the same, if you connect Square instead. Your customers' card payments go through your own Square account. We never see or store card details.
• Anthropic (AI) — if you use the AI quote helper, the job description (and any photo you choose to send) is processed to draft a quote. It isn't used to train models.
• SMS provider — if/when you enable automatic texts, the message and recipient number are sent to the SMS provider to deliver it.
• Google Analytics — measures how the website and the app get used: which screens open, which buttons get tapped, and error reports when something breaks. It runs on this site and inside the app, and it sets cookies. We don't send it your job details or your customers' contact details.
• Google (address lookup) — when you type a job or customer address, what you have typed so far is sent to Google to suggest the rest. That includes your customer's street address. It is only sent while you are typing in an address box.
• WeatherAPI — for outdoor jobs booked in the next few days, the job's location is sent to WeatherAPI to check the forecast. This happens on its own when you open Today — no name, phone or email goes with it.
• Xero — if you connect Xero, the invoices you choose to push are sent there, including your customer's name, address and the amount.
• Resend — sends the emails Yamate sends: the alerts telling you a customer accepted a quote or asked for a job, and messages you send us. It gets the email address and the message.
• Microsoft Clarity — records how this website is used: taps, scrolling and mouse movement, so we can see which pages confuse people. It runs on the public website only, never inside the app or on your customers' quote and invoice links, and it sets cookies. We don't send it your job details or your customers' contact details.
• Twilio — runs the missed-call numbers. Turn on missed-call texts and we check which phone company your mobile is on, then rent a Twilio number for that phone company to divert your unanswered calls to. Twilio gets your mobile number, the caller's number and the number that diverted, then ends the call so it never connects. The caller may be someone who has never used Yamate.

If you arrive from someone who recommended us

Some websites and people recommend Yamate and earn a commission if you subscribe. If you land here from one of their links, we record that the link was followed and store a small code on your device for 60 days so they still get credit if you come back later and sign up.

That code identifies them, not you. It carries no name, no email and nothing about you. We keep a scrambled (hashed) version of your IP address and browser type with it — enough to spot someone faking clicks, not enough to identify you. We don't use any of it for advertising, we don't sell it, and it isn't shared with the person who recommended us: they see that a signup happened and what they earned, never who you are.

Clearing your cookies removes it. If you'd rather not have it set at all, come to yamate.au directly instead of through a recommendation link.

Your customers' data

You're responsible for the customer details you enter. Only add what you need to do the job, and let your customers know you keep their contact details to quote, invoice and service them.

Your rights

• Export: download your data any time from Settings → Your data.
• Delete: delete your account and its cloud data — both ways to do it, on one page.

Where your data goes (overseas disclosure)

Some of the third parties above may store or process data outside Australia (for example cloud infrastructure or AI processing). Where that happens we take reasonable steps to use reputable providers, but overseas recipients may not be bound by the Australian Privacy Principles. Ask us if you'd like specifics for a particular feature.

Access, correction & complaints

You can ask what personal information we hold and request a correction any time — email us. If you're unhappy with how we've handled your privacy, tell us first and we'll try to fix it; you can also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Data breaches

If a breach occurs that's likely to cause serious harm, we'll act promptly to contain it and notify affected people and, where required, the OAIC, in line with the Notifiable Data Breaches scheme.

Security (honest note)

On-device data is as secure as your device. The cloud features are pilot-stage — fine for getting started, but during the pilot please don't store anything you'd be uncomfortable having in a shared pilot system. Cloud features are protected by secure per-user sign-in and database row-level security, so your account's data is kept separate from other users'. We're still hardening the system during the pilot, so please avoid storing anything highly sensitive for now.

Who we are

Yamate is a product of Clarova Pty Ltd · ABN 12 701 418 957. That company is the entity responsible for the personal information described in this policy, and “we” means it throughout.

Contact

Questions or a data request? Get in touch via our contact page or email us.