Privacy Policy

1. Who we are

Refr ("Refr", "we", "us") provides an SMS referral engine for Australian tradespeople. In this policy, "you" means the person using Refr — either a tradie with a Refr account, or someone whose details have been entered into Refr by a tradie.

You can contact us about privacy at abirkhan3323@gmail.com.

2. What we collect

Account information

• Your name, email address and mobile number.
• Business details: trading name, trade type, and any referral offers or messages you set up.
• Login credentials (passwords are stored in hashed form by our authentication provider).

Customer and referral records you add

To send referral messages, Refr stores the details of your customers that you upload or enter: their name, mobile number, optional email address, service notes, and the date of their last job. It also stores the referral relationships and outcomes you record (for example, whether a referral converted and the job value).

Message content and metadata

We keep a log of SMS messages sent and received through Refr — the content, the sender and recipient numbers, delivery status, and timestamps. This is used for your dashboard, to handle opt-outs, and to troubleshoot delivery.

Billing information

Payments are processed by Stripe. We receive summary information such as your plan, billing status and the last four digits of your card. We do not store full card numbers.

Waitlist and marketing

If you join our waitlist, we store your name, email address, trade type and referral code.

Usage and technical data

We collect limited technical information — such as IP address, browser type, pages viewed and error logs — to keep the service secure and working.

We do not intentionally collect sensitive information (such as health, political or religious information). Please do not put sensitive information into customer notes or message templates.

3. How we collect it

• Directly from you when you create an account, complete onboarding, or contact support.
• From you, when you upload or enter customer details into Refr.
• From your customers, when they reply to a Refr message or submit a referral.
• Automatically, through the operation of the service.

4. Why we use it

• To provide the service — sending referral messages, tracking referrals, showing your dashboard and analytics.
• To maintain records of consent and handle opt-out requests (STOP and START).
• To process subscriptions, invoices and payments.
• To provide support and respond to enquiries.
• To secure the service, prevent abuse and spam, and debug problems.
• To send you service messages, and — where you have consented — product updates you can unsubscribe from at any time.
• To comply with our legal obligations, including under the Spam Act 2003 (Cth) and the Privacy Act 1988 (Cth).

We do not sell your personal information, and we do not use your customers' details to market other products to them.

5. SMS consent and the Spam Act

Refr sends messages on your behalf, using your business name as the sender. Under the Spam Act 2003, commercial electronic messages need consent, clear sender identification and a working unsubscribe. That means:

• You are responsible for having consent from each customer before their number is messaged. A customer who has just done business with you is usually taken to have inferred consent for a closely related message, but it is your responsibility to confirm that.
• We handle opt-outs. When someone replies STOP (or similar), we record the opt-out and stop messaging that number until they reply START. We also keep the opt-out record as evidence of compliance.
• Every message identifies you and explains how to opt out.

We may suspend sending if we detect patterns that look like spam or unlawful messaging.

6. Who we share information with

We disclose personal information only to service providers who help us run Refr:

• Supabase — database and authentication hosting.
• Twilio — delivery of SMS messages.
• Stripe — subscription billing and payment processing.
• Resend — transactional email.
• Vercel — application hosting.

We may also disclose information where required by law, to enforce our terms, or to protect the rights and safety of Refr, our users or the public. If our business is sold or merged, information may be transferred as part of that transaction, subject to this policy.

7. Overseas storage

Some of our service providers store and process data outside Australia, including in the United States and the European Union. Where information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the APPs. By using Refr, you acknowledge that your information (and the customer details you enter) may be stored overseas.

8. Security

We use encryption in transit, access controls and database-level row security so that each Refr account can only read its own records. No service can guarantee absolute security; if you believe your account has been compromised, contact us immediately.

9. How long we keep it

We keep account and customer records while your account is active. If you close your account, we delete or de-identify your data within a reasonable period, except where we must retain it — for example, billing records for tax purposes, or opt-out records kept to honour a person's request not to be messaged.

10. Access and correction

You can access and correct most information directly in your dashboard. For anything else, email abirkhan3323@gmail.com. We will respond within 30 days. There is no charge for making a request, though we may charge a reasonable fee for providing access to large amounts of information.

If you are a customer of a tradie who uses Refr, your details were entered by that tradie. We can help by removing your number from future messages (reply STOP), but for access or correction of the underlying record you should contact that business — or contact us and we will pass the request on.

11. Cookies and analytics

We use cookies that are necessary to keep you signed in and to operate the service securely. We do not use advertising cookies or sell data to ad networks.

12. Children

Refr is intended for business use by people aged 18 and over.

13. Changes to this policy

We may update this policy from time to time. If a change is material, we will notify account holders by email or in-app before it takes effect. The "last updated" date above always reflects the current version.

14. Complaints

If you think we have breached the APPs, contact us at abirkhan3323@gmail.com and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.