Privacy Policy

1. Commitment to Privacy

CustomerDock ("we", "our", or "us"), an Eryxa Ecosystem platform, respects the privacy of Australian sole traders, small business contractors, their staff, and their homeowner customers. This Privacy Policy outlines how we collect, hold, use, and disclose personal information in strict compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

Depending on your role and how you interact with CustomerDock, we may collect the following information:

• Contractor & Business Details: Trading name, Australian Business Number (ABN), Contractor Licence Number, business address, contact person name, Australian mobile phone number, email address, bank account details (BSB and Account Number for direct deposits), and connected Stripe account IDs.
• Customer & Job Information: Homeowner name, Australian contact phone number, site installation address, job specifications, line item descriptions, agreed quote pricing, and uploaded before/after job photos.
• Digital Signatures & Approvals: Touchscreen sign-on-glass signatures captured on site, approval timestamps, and IP addresses recorded when quotes or variations are digitally signed via the homeowner portal.
• Financial Records: Invoiced amounts, deposit receipts, expense dockets, supplier receipts, and GST line items generated for business operation and Xero/BAS accounting export.

3. How We Use Your Information

We use collected data solely to deliver the CustomerDock service:

• Generating professional Australian Tax Invoices, 60-second quotes, and variation addenda.
• Facilitating zero-friction homeowner portal access via secure magic links (/portal/:token) for reviewing quotes, signing contracts, and settling deposits.
• Dispatching transactional SMS and email notifications (e.g. quote links, deposit payment receipts, polite reminder notices).
• Providing calendar synchronization and turn-by-turn navigation deep-links for field staff and sub-contractors.
• Exporting quarterly Business Activity Statement (BAS) summaries and Xero-compatible CSV files for your tax accountant.

4. Data Storage & Security Invariants

CustomerDock is built on edge-native Cloudflare and AWS Sydney infrastructure:

• Data Separation: Structured metadata is retained in Cloudflare D1 with strict tenant scoping. Binary assets (job photos, PDF receipts, immutable quote snapshots) are stored in Cloudflare R2 object storage with tamper-evident SHA-256 integrity verification.
• Encryption: All data in transit is encrypted using modern TLS 1.3. Cryptographic operations utilize WebCrypto standards with PBKDF2 password hashing and WebAuthn (Passkeys) for biometric authentication.
• Zero Data Selling: We never sell, rent, or monetize your trade customer lists, pricing catalogs, or business transaction history to third-party data brokers or marketing agencies.

5. Third-Party Edge Processors

To deliver specific functionality, we partner with trusted edge service providers:

• Cloudflare Inc.: Edge runtime compute, D1 databases, R2 media storage, Turnstile bot defense, and Workers AI.
• Stripe, Inc.: Card and digital wallet payment settlements (Apple Pay, Google Pay) via Stripe Connect Standard. CustomerDock never stores full credit card numbers or CVVs on our servers.
• Amazon Web Services (AWS Sydney ap-southeast-2): Outbound transactional SMS (AWS SNS) and transactional email (AWS SES).

6. Tradie Data Ownership & Portability

Your data belongs to you. If you choose to pause or cancel your CustomerDock Pro subscription, your historical customer database, quotes, invoices, and job photos are never locked or held hostage. You can export your full customer directory and accounting records in standard CSV format at any time free of charge.

7. Access & Correction Rights

Under the Australian Privacy Principles, you have the right to request access to personal information we hold about you and to request corrections. To exercise your rights or if you have privacy inquiries, please contact our Australian Privacy Officer at: