Privacy Policy

Blumetec Hub ("we", "us", "our") operates a lead and variation management platform for Australian service professionals. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using Blumetec Hub — whether as a service professional (account holder) or as a client submitting an enquiry — you agree to the practices described in this policy.

We collect the following personal information:

We do not collect sensitive information (such as health, financial, or government identifier data) beyond what is voluntarily provided in job descriptions.

We collect personal information to:

• Provide the Blumetec Hub lead and variation management service to service professionals
• Allow service professionals to receive and manage client enquiries
• Send automated email reminders and job status notifications to service professionals
• Enable clients to view and approve quotes via a secure portal link
• Help clients understand the contents of a quote using AI analysis, when the client chooses to use the AI explainer feature in the client portal
• Prevent spam and abuse on public-facing forms
• Maintain and improve the platform

We will not use your personal information for marketing or share it with third parties for their own marketing purposes.

We use the following third-party services to operate the platform. All are based in the United States. By using Blumetec Hub, you acknowledge that your personal information may be transferred to and stored in the US. See section 7 for more detail.

Each provider has their own privacy policy and data processing terms. We select providers that maintain appropriate security standards.

• Active accounts: Personal information is retained for as long as your account is active.
• After deletion: When an account is deleted, we will delete or de-identify all associated personal information within 30 days.
• Client data: Client enquiry data is retained as long as the service professional's account exists. When a professional deletes their account, all associated client data is also deleted.
• Backups: Data may persist in encrypted backups for up to 30 days after deletion before being permanently removed.

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information

To make a request, email us at support@blumetechub.com.au. We will respond within 30 days. We may need to verify your identity before processing the request.

Service professionals can request full account deletion, which will remove all leads, client data, quotes, photos, and variations associated with their account.

Clients who wish to have their enquiry data removed should contact the service professional directly, or email us at the address above if they are unable to reach them.

Blumetec Hub is an Australian business. However, some of the third-party services we use store and process data in the United States (see section 4). We take reasonable steps to ensure these providers maintain appropriate protections, but we cannot guarantee that overseas recipients will comply with the Australian Privacy Principles.

Supabase stores database data in the AWS ap-southeast-2 (Sydney) region, meaning most personal data remains in Australia. Other services (Vercel, Resend, Google, Sentry) process data in the US.

AI processing by Google: Job descriptions, notes, and — when a client chooses to use the AI quote explainer — quote PDF files are sent to Google's Gemini AI service for processing. This data is transmitted to Google's servers, which may be located outside Australia. We recommend reviewing Google's Gemini API Terms of Service for details on how they handle submitted data. Clients can choose not to use the AI explainer feature, in which case their quote PDF is not sent to Google.

By using Blumetec Hub, you consent to this overseas transfer under APP 8.

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. These include:

• Encrypted data storage and transmission (HTTPS/TLS)
• Authentication required to access professional accounts (Google OAuth)
• Row-level security policies to isolate each professional's data
• Rate limiting on public-facing forms to prevent abuse
• Error monitoring and logging to detect anomalies

No internet transmission is completely secure. If you believe your data has been compromised, contact us immediately.

If you believe we have breached the Australian Privacy Principles or the Privacy Act 1988, you may:

1. Contact us first at support@blumetechub.com.au. We will investigate and respond within 30 days.
2. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au/privacy/privacy-complaints

We may update this Privacy Policy from time to time. The current version will always be available at blumetechub.com.au/privacy. We will notify account holders of material changes via email.

For any privacy-related questions, contact us at support@blumetechub.com.au.