Last updated: 31 May 2026
Version: 1.2
Chippie, operated by Chippie Australia Pty Ltd (ABN 11 698 780 406) ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our quote and invoice management platform.
We handle personal information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth). By using Chippie, you consent to the data practices described in this policy.
We use the collected information to:
Your business data is stored on our Oracle Cloud Infrastructure server in the Sydney region. We chose Oracle for its enterprise-grade reliability and its independent security credentials — Oracle Cloud Infrastructure holds ISO 27001 certification, SOC 1 and SOC 2 Type 2 attestations, and has been assessed under the Australian Government's IRAP (Information Security Registered Assessors Program). Your data stays in Australia.
Inside that server, Chippie runs on PostgreSQL. Every business gets its own isolated database schema — your clients, quotes, invoices and jobs live in a separate namespace from every other business on the platform. Queries are scoped to your schema at the connection level, so there is no cross-tenant data path.
On top of that, we apply standard protections:
No system is 100% secure, and we don't claim otherwise — but we've built Chippie so that your data sits on professional infrastructure, in your country, isolated from other tenants, and under your control.
We do not sell your personal information. We may share your data in the following circumstances:
When you use Chippie, you enter personal information about your own clients — typically names, contact details, addresses, and job history. You decide what to collect and how to use that information. Chippie stores and processes it solely to provide the Service to you (for example, generating and sending quotes and invoices).
You are responsible for:
When you delete a client record or your account, the associated client data is removed from active systems in line with our retention practices.
We use the following providers to operate Chippie:
Each provider processes only the data needed to deliver its part of the Service and is bound by its own privacy and security commitments. We review these providers periodically.
We use cookies and similar technologies to:
You can control cookies through your browser settings. Disabling cookies may affect Service functionality.
Depending on your location, you may have the following rights:
Many of these rights can be exercised directly from your account settings — you can export your business data and permanently delete it from the server at any time. For everything else, contact us using the information below.
If you have a privacy complaint that we have been unable to resolve to your satisfaction, you can refer it to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We may occasionally send product updates, newsletters, or marketing emails about Chippie. You can opt out at any time using the unsubscribe link in those emails or by contacting us. Transactional emails — account notifications, billing receipts, security alerts, quote and invoice delivery — are part of the Service and cannot be opted out of while you have an active account.
Chippie complies with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth). If we become aware of an eligible data breach involving your personal information that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.
We retain your data for as long as your account is active or as needed to provide the Service.
When you delete your account, we will delete your business data from active systems within 30 days. Backups containing your data are overwritten on our standard backup rotation, typically within 90 days. We may retain limited records longer where required by law (for example, financial records under Australian tax law are retained for 7 years).
We may also retain data to resolve disputes, enforce agreements, and meet legal obligations.
Chippie includes an AI assistant ("Chip") and an AI writing helper that improves text you have drafted. To produce a response, the text involved in these features is processed by our AI provider.
If conversation capture is turned on for your business, we store a record of these AI interactions so we can measure and improve their quality and accuracy. Capture is off by default, and only an account administrator can turn it on. When it is on, we store:
These records are stored raw, as written. They live inside your business's isolated database schema (see Section 4), on the same Australian infrastructure as the rest of your data, and are never shared with other businesses.
Two points about how long we keep them:
Your primary business data is stored in Australia (see Section 4). Some service providers process limited data outside Australia:
Where we disclose personal information overseas, we take reasonable steps under Australian Privacy Principle 8 to ensure the overseas recipient handles that information consistently with the APPs.
The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from someone under 16, we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
G'day, I'm Chip, Chippie's AI assistant. Ask me anything about Chippie.