Privacy policy

Last updated 22 October 2026 · Version 2026-10-22

CrackOn (“we”, “us”) makes job management software for trade businesses in Australia. This policy explains how we handle personal information, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you have a question or concern, email hello@crackon.au.

Two kinds of information

1. Account information about the people who use CrackOn: business owners, office staff, technicians and subcontractors. We are responsible for this information.
2. Customer records that a business keeps in CrackOn about its own customers: names, contact details, site addresses, job history, photos, signatures, invoices and similar. The business decides what goes in and how it’s used. We store and process it on the business’s behalf and only as our terms allow. If you are a customer of a business that uses CrackOn, contact that business first about your information; we’ll help them respond.

What we collect

• Account details: name, email address, password (stored only as a one-way hash), role, working hours and skills, and the business’s name, ABN, address and bank details for invoices.
• Usage and device information: sign-in times, IP address, browser type, and records of changes made in the app (an audit log), used for security and support.
• Location, only if a team member turns on location sharing: their position during working hours, so the office can dispatch the nearest technician. They can stop sharing and delete what was collected at any time.
• Payment information: card payments are handled by Stripe. We never see or store full card numbers.
• Messages you send us, such as support emails.

We collect information directly from you, from your business’s administrators (for example when they invite you), and from services you choose to connect (for example importing from another system).

Why we use it

• To provide CrackOn: sign-in, scheduling, sending the emails and text messages the business asks us to send, documents, payments and support.
• To keep the service secure: detecting misuse, investigating errors, and keeping backups.
• To tell you about changes to the service and your account. We’ll only send marketing email with consent, and every marketing email has an unsubscribe link, as the Spam Act 2003 requires.
• To meet legal obligations, such as tax record keeping.

We don’t sell personal information, and we don’t use customer records to advertise to anyone.

Where it’s stored

CrackOn’s database and application servers are in Sydney, Australia. Some service providers we rely on are based overseas or process data outside Australia (see the sub-processor list), mainly in the United States. When we disclose information overseas we take reasonable steps, as APP 8 requires, to make sure the provider handles it consistently with the APPs, including choosing providers with strong security and contractual privacy commitments.

Who we share it with

• Service providers that help us run CrackOn (listed on the data handling page), only for that purpose.
• Services a business connects, such as its accounting software, only when the business asks.
• Authorities, when the law requires it.
• A buyer of the business, if CrackOn is sold, who must keep handling information under this policy.

Security

Data is encrypted in transit (HTTPS) and at rest. Each business’s data is separated at the database level, staff accounts have role-based permissions, and passwords are hashed. If a data breach is likely to cause serious harm, we’ll notify affected people and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme, and tell affected businesses promptly so they can meet their own obligations.

How long we keep it

We keep account information while the account is open. Business records such as invoices are kept for the periods the law requires (for example, five years for tax records), and some compliance records, such as chemical application records, for the periods set by state regulations. After an account closes we delete or de-identify information once those periods end.

Access and correction

You can ask to see or correct the personal information we hold about you by emailing hello@crackon.au. We’ll respond within 30 days. Most details can also be corrected directly in the app. If we refuse a request we’ll explain why.

Cookies

The app uses one essential cookie to keep you signed in. This website and the app don’t use advertising or tracking cookies.

Complaints

Email hello@crackon.au and we’ll respond within 30 days. If you’re not satisfied, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

Changes

We’ll post any change here with a new date, and email account holders about significant changes before they take effect.