Woodio

Privacy Policy

Last updated: 2 July 2026

This Privacy Policy explains how Trade Anchor ("we", "us", "our") handles personal information in connection with Woodio ("the Service"). We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Information we collect

  • Account information — your name, email, password (stored hashed) and organisation details.
  • Business data you enter — projects, quotes, staff time and pay rates, client and vendor contacts, payments, expenses, inventory, files and notes. This may include personal information about your clients and staff.
  • Payment information — processed by Stripe; we do not store full card numbers.
  • Usage and technical data — log data, IP address, device and browser information, and cookies used for authentication.

2. How we use information

To provide, secure and improve the Service; authenticate users; process payments; send transactional emails (such as invitations, receipts and password resets); and comply with legal obligations.

3. Cookies

We use essential cookies to keep you signed in. We do not use third-party advertising cookies.

4. Service providers (sub-processors)

We share data with trusted providers only as needed to run the Service. Each processes data under its own terms and security controls:

  • Neon — database hosting
  • Vercel — application hosting
  • Cloudflare R2 — file and image storage
  • Resend — transactional email
  • Stripe — payment processing
  • Anthropic — AI assistant features (only the data you submit to those features)

5. International transfers

Our infrastructure may process and store data outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the APPs.

6. Data retention

We retain Customer Data for as long as your account is active and as needed to provide the Service. After account closure we may retain data for a limited period for backup, legal or dispute-resolution purposes, then delete it.

7. Security

We use measures including encryption in transit, hashed passwords, access controls and tenant isolation. No system is perfectly secure, so we cannot guarantee absolute security.

8. Your rights

Subject to law, you may request access to or correction of your personal information and may raise privacy concerns with us. Business data about your clients and staff is controlled by the organisation that holds the account; direct such requests to that organisation.

9. Children

The Service is intended for business use and is not directed at children under 16.

10. Changes to this Policy

We may update this Policy and will notify material changes through the Service or by email.

11. Contact

Privacy questions or requests: hello@tradeanchor.com.au.