Privacy Policy

On-Site Connect is a missed-call text-back service for tradies and small businesses, operated from South Australia, Australia. This policy explains what personal information we handle, why, and what your rights are.

• Account & business details — your name, email, password (stored hashed), business name, forwarding phone number and your auto-reply template.
• Assigned service number — the phone number we provision for your account.
• Call and lead data — metadata about missed calls routed to your number (caller number, timestamp, call status), the auto-reply SMS we send, and any reply messages the caller sends back (caller number, message content, timestamp, lead status you set).
• Payment info — billing details are collected and stored by Stripe, our payments provider. We only receive limited information such as your subscription status, plan and the last 4 digits of your card. We never see or store your full card number.
• Basic technical data — log data such as IP address, browser type and pages accessed, used for security and to diagnose issues.

• To provide the service — routing calls, sending your auto-reply SMS and recording leads in your inbox.
• To manage your account, authenticate you and provide support.
• To bill your subscription and manage trials, upgrades and cancellations.
• To send transactional emails (sign-up confirmation, password resets, billing notices, important service updates).
• To monitor, secure and improve the service.

We don't sell your data, and we don't use the content of your leads for advertising.

We only share what's needed to run the service, with these providers:

• Twilio — powers the phone number, missed-call detection and SMS delivery. Caller numbers and message content pass through Twilio.
• Stripe — processes subscription payments and stores your billing details.
• Resend — delivers transactional emails from us to you.
• Cloud hosting & database providers — used to host the app and store your data securely.

Each of these providers handles data under their own privacy terms, and some may process data outside Australia.

Your data is stored in managed cloud databases with encryption in transit (HTTPS/TLS) and at rest. Access to production data is restricted to the people who need it to run the service. Passwords are stored as one-way hashes — we can't see them.

We keep your account and lead data for as long as your account is active. If you close your account, we'll delete or anonymise your personal data within a reasonable period, except where we're required to keep it (for example, financial records for tax purposes).

You can:

• Access the personal information we hold about you.
• Correct anything that's inaccurate — most of it you can edit directly in your account.
• Request that we delete your account and associated personal data.
• Export a copy of your leads on request.
• Complain to the Office of the Australian Information Commissioner (OAIC) if you think we've mishandled your data.

When someone calls your On-Site Connect number and misses you, we send them an SMS on your behalf and store their reply as a lead. You're the business owner of that conversation — please make sure your use of caller data complies with Australian privacy and spam laws (for example, don't use the numbers for unrelated marketing).

We may update this policy from time to time. If we make a material change, we'll let you know by email or in the app before it takes effect.

For privacy questions, data access or deletion requests, email hello@onsiteconnect.com.au.