No signup needed

Setting up your demo

Building your workspace...

Privacy Policy

Last updated: 31 May 2026

Version: 1.2

1. Introduction

Chippie, operated by Chippie Australia Pty Ltd (ABN 11 698 780 406) ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our quote and invoice management platform.

We handle personal information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth). By using Chippie, you consent to the data practices described in this policy.

2. Information We Collect

Information You Provide

  • Account Information: Name, email address, password, and business details when you register
  • Business Data: Client information, quotes, invoices, jobs, and related business records you create
  • Payment Information: Billing details for paid subscriptions (processed securely by third-party payment providers)
  • Communications: Messages you send to us for support or feedback

Information Collected Automatically

  • Usage Data: How you interact with the Service, features used, and actions taken
  • Device Information: Browser type, operating system, device type, and IP address
  • Cookies: Session cookies for authentication and preferences
  • Log Data: Server logs including access times and pages visited

3. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related notifications
  • Send administrative messages, updates, and security alerts
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms

4. Where Your Data Lives

Your business data is stored on our Oracle Cloud Infrastructure server in the Sydney region. We chose Oracle for its enterprise-grade reliability and its independent security credentials — Oracle Cloud Infrastructure holds ISO 27001 certification, SOC 1 and SOC 2 Type 2 attestations, and has been assessed under the Australian Government's IRAP (Information Security Registered Assessors Program). Your data stays in Australia.

Inside that server, Chippie runs on PostgreSQL. Every business gets its own isolated database schema — your clients, quotes, invoices and jobs live in a separate namespace from every other business on the platform. Queries are scoped to your schema at the connection level, so there is no cross-tenant data path.

On top of that, we apply standard protections:

  • All traffic is encrypted in transit using TLS
  • Passwords are hashed using industry-standard algorithms (never stored in plain text)
  • Access to the production server is restricted to authorised personnel
  • You can export all your business data at any time, and permanently delete it from the server yourself, on demand

No system is 100% secure, and we don't claim otherwise — but we've built Chippie so that your data sits on professional infrastructure, in your country, isolated from other tenants, and under your control.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

  • Service Providers: Third-party vendors who assist in operating the Service (hosting, email, payment processing)
  • Legal Requirements: When required by law, court order, or government request
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize sharing
  • Protection of Rights: To protect our rights, privacy, safety, or property

6. Data You Collect About Your Clients

When you use Chippie, you enter personal information about your own clients — typically names, contact details, addresses, and job history. You decide what to collect and how to use that information. Chippie stores and processes it solely to provide the Service to you (for example, generating and sending quotes and invoices).

You are responsible for:

  • Having a lawful basis to collect and use your clients' personal information
  • Providing your clients with appropriate information about how their data is handled
  • Responding to your clients' requests to access, correct, or delete their information

When you delete a client record or your account, the associated client data is removed from active systems in line with our retention practices.

7. Third-Party Service Providers

We use the following providers to operate Chippie:

  • Oracle Cloud Infrastructure (Sydney, Australia) — hosting and data storage
  • Stripe — subscription payment processing
  • Brevo — transactional and notification email delivery
  • Xero (where you connect it) — accounting sync
  • Cloudflare — content delivery, DDoS protection, and traffic analytics
  • PostHog — product analytics
  • Sentry / Bugsink — error monitoring

Each provider processes only the data needed to deliver its part of the Service and is bound by its own privacy and security commitments. We review these providers periodically.

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your authenticated session
  • Remember your preferences and settings
  • Analyze how the Service is used
  • Improve performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

9. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing activities
  • Withdrawal: Withdraw consent where processing is based on consent

Many of these rights can be exercised directly from your account settings — you can export your business data and permanently delete it from the server at any time. For everything else, contact us using the information below.

If you have a privacy complaint that we have been unable to resolve to your satisfaction, you can refer it to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Marketing Communications

We may occasionally send product updates, newsletters, or marketing emails about Chippie. You can opt out at any time using the unsubscribe link in those emails or by contacting us. Transactional emails — account notifications, billing receipts, security alerts, quote and invoice delivery — are part of the Service and cannot be opted out of while you have an active account.

11. Data Breach Notification

Chippie complies with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth). If we become aware of an eligible data breach involving your personal information that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.

12. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service.

When you delete your account, we will delete your business data from active systems within 30 days. Backups containing your data are overwritten on our standard backup rotation, typically within 90 days. We may retain limited records longer where required by law (for example, financial records under Australian tax law are retained for 7 years).

We may also retain data to resolve disputes, enforce agreements, and meet legal obligations.

13. AI Features and Conversation Capture

Chippie includes an AI assistant ("Chip") and an AI writing helper that improves text you have drafted. To produce a response, the text involved in these features is processed by our AI provider.

If conversation capture is turned on for your business, we store a record of these AI interactions so we can measure and improve their quality and accuracy. Capture is off by default, and only an account administrator can turn it on. When it is on, we store:

  • Chat conversations: the messages you send to Chip and the replies Chip gives.
  • Actions Chip takes: the tools Chip uses on your behalf and the information passed to them (for example, drafting a quote or looking up a client).
  • Writing helper activity: the text you ask the helper to improve and the improved text it returns.

These records are stored raw, as written. They live inside your business's isolated database schema (see Section 4), on the same Australian infrastructure as the rest of your data, and are never shared with other businesses.

Two points about how long we keep them:

  • Turning capture off is forward-only. When you switch the setting off, we stop capturing new conversations straight away. Records captured while it was on are kept until you ask us to remove them.
  • Deletion is available on request. You can ask us to delete previously captured conversations at any time. This is a separate action from turning capture off. Use the contact details in the Contact Us section below.

14. International Data Transfers

Your primary business data is stored in Australia (see Section 4). Some service providers process limited data outside Australia:

  • Stripe processes payment information primarily in the United States.
  • Brevo processes email delivery data in the European Union.
  • PostHog processes analytics data in the European Union or United States, depending on configuration.
  • Sentry / Bugsink processes error data in the United States or European Union.
  • Cloudflare routes traffic through its global edge network.

Where we disclose personal information overseas, we take reasonable steps under Australian Privacy Principle 8 to ensure the overseas recipient handles that information consistently with the APPs.

15. Children's Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from someone under 16, we will delete it promptly.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Updating the "Last updated" date
  • Sending email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

17. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: