Privacy Policy

1. About This Policy

MeasureRight Solutions ("we", "our", or "us") operates the website at measurerightsolutions.com.au and the MeasureRight web application at app.measurerightsolutions.com.au (together, the "Service"). We are committed to handling personal information responsibly and in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

This Privacy Policy describes what information we collect, why we collect it, how it is used and protected, and the rights available to you.

Contact: measurerightsolutions@gmail.com

2. Information We Collect

We may collect the following categories of information:

• Account information: Your name and email address, collected when you register or sign in via Google or Microsoft authentication.
• Business details: Your business name, contact details, and any information you enter (such as your ABN, address, or logo) to generate quotes and invoices.
• Client data: Names, addresses, and contact details of your clients that you enter to create quotes and invoices. You are responsible for the accuracy of this information and for having a lawful basis for providing it to us.
• Financial records: Quotes, invoices, expenses, materials, payment records and job data that you enter into the Service.
• Usage data: Technical data such as IP addresses, browser type, device type, pages visited and session duration, used to operate and improve the Service.

3. Authentication — Google and Microsoft Sign-In

MeasureRight supports sign-in via Google OAuth and Microsoft authentication. If you use either method, we receive your name, email address and profile picture from the identity provider solely to verify your identity and create or access your account.

Sign-in does not grant MeasureRight permission to send, read or access your email. The sign-in connection is used only to identify you and log you in securely. Connecting your Gmail or Microsoft account for email sending is a separate, optional permission described in Section 5.

4. Google API Services User Data Policy

MeasureRight's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Gmail permissions are used only to send business emails initiated by you (for example, sending a quote or invoice to your client). We do not read, store or analyse your inbox or sent messages.
• Google user data is not sold to any third party.
• Google user data is not used for advertising or marketing purposes.
• Google user data is not shared with third parties except where required to provide the Service to you, to comply with applicable law, or to protect the Service and its users.

5. Email Permissions

If you connect a Google or Microsoft email account, MeasureRight uses that connection only to send emails on your behalf — for example, sending quotes and invoices to your clients. Emails are sent only in direct response to an action you take within the app.

Your client's email address is used solely to deliver the document. We do not use client contact details for our own marketing.

6. Why We Collect Information

We collect information to:

• Create and maintain your account
• Provide the features of the Service (quotes, invoices, expense tracking, profitability reporting)
• Send transactional emails on your behalf
• Improve and develop the Service
• Respond to your support enquiries
• Comply with legal obligations

7. How We Use Your Information

We use the information described above only to operate and improve the Service. We do not sell your personal information. We do not use your data for advertising.

8. Service Providers

We use third-party service providers to operate the Service. These providers process data on our behalf. Current categories include:

• Supabase: Cloud database and authentication infrastructure used to store your account and business data securely.
• Replit: Cloud hosting platform used to run the MeasureRight application.
• Google: Authentication (Google OAuth) and, if you connect your Gmail account, transactional email delivery.
• Microsoft: Authentication (Microsoft sign-in) and, if you connect your Microsoft account, transactional email delivery.

We do not sell your personal information to any third party.

9. Overseas Processing

Some of our service providers (including Supabase, Replit, Google and Microsoft) may store or process your data on servers located outside Australia, including in the United States. We take reasonable steps to ensure that overseas providers handle your information consistently with Australian privacy standards, but we cannot guarantee that all overseas providers will comply with the Australian Privacy Principles in every case.

10. Data Storage and Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure or loss. No system is completely secure, and we cannot guarantee absolute security.

MeasureRight is currently in a beta phase. While we take security seriously, the Service may be updated or modified during this period.

11. Cookies and Browser Storage

The Service uses essential cookies and browser storage to maintain your login session and remember your preferences. These are necessary for the Service to function. We do not currently use advertising or tracking cookies.

12. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account and associated personal data
• Make a complaint if you believe we have mishandled your information

To exercise these rights, contact us at measurerightsolutions@gmail.com. We will respond within a reasonable timeframe.

13. Account Deletion Requests

You may request deletion of your account and associated data at any time by emailing measurerightsolutions@gmail.com with the subject line "Account Deletion Request". We will action your request within a reasonable period. Some information may be retained where required by law.

14. Disconnecting Google or Microsoft Access

You can revoke MeasureRight's access to your Google account at any time via Google Account Permissions. For Microsoft, you can revoke access via your Microsoft account settings. Revoking access will prevent email sending features from working but will not delete your MeasureRight account or data.

15. Data Retention

We retain your information for as long as your account is active and as reasonably necessary to provide the Service. If you request account deletion, we will remove your personal data within a reasonable period, subject to any legal retention obligations.

16. Policy Updates

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

17. Contact

For privacy enquiries or to exercise your rights: measurerightsolutions@gmail.com