Legal
Privacy Policy
Last updated: 12 June 2026
This policy explains what personal information figrd collects, why we collect it, and what we do with it. It's written to be readable - not to hide anything in legal language.
Figrd is operated by the business trading as Figrd, based in Victoria, Australia. When we say “we”, “us”, or “figrd” in this policy, that's who we mean.
This policy is written in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It also covers our use of Google's APIs.
What information we collect
Access requests & account information
If you ask for access, we collect your email address so we can get in touch and set you up. When you create an account, we also collect your name, business name, and ABN. We use this to manage your account and to populate your quotes and invoices.
Business information you enter
To help you calculate costs and quote accurately, you decide what to enter. We use it only to provide the features you're using. The hourly-rate calculator on our website runs entirely in your browser - those figures aren't sent to us or stored unless you ask us to email you a copy.
Your customers' information
To create quotes, schedule jobs, and send updates, you enter details about your own customers - their name, phone number, email address, and job address. figrd stores and processes this on your behalf so you can run your business. You're responsible for having a lawful basis to provide it; we act as your service provider and use it only to deliver the features you use.
SMS and email notifications
If you use figrd's SMS or email features, we send messages to your customers on your behalf. To send an SMS, your customer's mobile number and the message are shared with our SMS provider, Cellcast (Australia). Emails are sent through your connected email account or our email provider. We keep a record of each message - recipient, time, delivery status, and the message text - so you have a communication history and delivery can be tracked. Your customers can opt out of promotional messages at any time by replying STOP or using the unsubscribe link; opting out never stops essential job updates such as appointment reminders, “on the way” alerts, or invoices.
Gmail access
figrd's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Payment information
Payments are processed by Stripe. When you enter card details, they go directly to Stripe - we never see or store your full card number. Stripe's privacy policy is at stripe.com/au/privacy.
Usage and analytics
We use PostHog, a product-analytics tool, to collect basic usage information - pages visited, features used, and error events - to keep the service running and improve it. This doesn't include the content of your jobs, quotes, or client records. On our public website we also use PostHog's session recording to understand how visitors move through the pages so we can improve them; anything you type into a form is masked. PostHog processes this information on our behalf, and we honour your browser's Do-Not-Track setting.
Improving figrd
If you turn it on (Settings, then Privacy - it's off by default), we may use de-identified, aggregated information that doesn't identify you, your business, or your clients to understand how figrd is used and to improve and shape the product. It's aggregated so no individual or business can be identified from it, and we never sell it.
Using the figrd mobile app
Location
The app can use your location in a few specific ways - all optional, and all only while you're using the app:
- to capture your start address - a one-off reading, converted to a street address and saved as your business's start location for travel and fuel estimates;
- to attach your position to job updates - for example, recording where you were when you marked a job started or finished;
- to share your live position with your team while you're travelling to or working at a job, if you've turned location sharing on; and
- to open a job's site in Maps.
We never track you in the background, and live sharing stops when the job stops. You can turn location access off any time in your phone's settings.
Photos
The app lets you take photos or pick them from your library to attach to a job. We only access your camera or photos when you choose to add one. Photos are stored with the job so your office can see them.
Notifications
If you allow notifications, we register a device token so we can alert you about new jobs and schedule changes. You can turn notifications off any time in your phone's settings.
Crash reports
We use Sentry to collect crash and error reports from the app so we can fix problems. These can include your device type and operating system version, but never the content of your jobs.
How we store your data
Your data is stored in a Supabase database hosted in Sydney, Australia. The figrd application is hosted on Vercel, primarily from the Sydney region, with a global content delivery network for performance.
We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Your Google OAuth token and any stored credentials are encrypted before storage.
AI features
Some features use AI to save you time - for example, drafting a quote from an enquiry or suggesting price-book matches. To do this, the relevant content (such as the enquiry or the quote details) is sent to our AI provider, Anthropic, which runs the model and returns the result.
We don't use your data - or your customers' data - to train AI models, and our AI provider doesn't train its models on it either. AI output is a starting point you review and edit before it goes anywhere.
Who we share your data with
We don't sell your data. We don't share it with advertisers or lead-generation companies. We share it only with the service providers we need to run figrd, and only what each one needs to do its job:
- Supabase - database, file storage, and sign-in (Sydney, Australia).
- Vercel - application hosting and content delivery (Sydney region; global CDN).
- Stripe - subscription billing and customer payments.
- Cellcast - sending SMS to your customers (Australia).
- Resend - sending system and notification emails.
- PostHog - product and website analytics (how figrd is used).
- Anthropic - AI features like drafting quotes, if you use them; doesn't train on your data.
- Mapbox - address lookup and maps.
- Google - Gmail sending and related APIs, if you connect Gmail.
- Xero - accounting sync, only if you connect it and choose to send data.
- Australian Business Register - ABN lookup (Australian Government).
Some of these providers are based overseas, including in the United States. By using figrd, you consent to your data being processed by these providers as described.
Accessing and correcting your information
You can update most of your personal information directly in your account settings. To request access to all data we hold about you, or to correct something you can't update yourself, email us at privacy@figrd.com.au. We'll respond within 30 days.
We may need to verify your identity before we provide access.
When you delete your account
When you delete your figrd account, we remove your data from our database. This is a hard delete - not an archive, not a soft flag, not “retained for 12 months in case you come back.” Your client list, job history, quotes, and personal information are gone.
The only exception is data we're legally required to retain - for example, records of subscription transactions for tax purposes. We retain the minimum required and no more.
Complaints
If you have a concern about how we've handled your personal information, email us at privacy@figrd.com.au. We'll acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
Changes to this policy
If we make material changes to this policy, we'll notify you by email before the changes take effect and update the “last updated” date at the top. Continued use of figrd after that point means you accept the updated policy.