← Back to SendScope

Privacy Policy

Last updated: June 2026

1. About This Policy

This Privacy Policy explains how SendScope collects, uses, and protects your personal information. SendScope acts as an orchestrator enabling freelancers and service providers to transact directly with their clients. We are committed to complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Lawful Basis for Processing

We process your personal information on the following lawful bases:

  • Consent: Where you have given clear consent for us to process your personal information for a specific purpose (e.g., marketing communications)
  • Contractual necessity: Where processing is necessary for the performance of a contract with you, including providing the Platform, processing payments, and managing your account
  • Legitimate interest: Where processing is necessary for our legitimate business interests, such as improving the Platform, preventing fraud, ensuring security, and conducting analytics, provided these interests are not overridden by your rights
  • Legal obligation: Where processing is necessary to comply with applicable laws, including tax reporting and regulatory requirements

3. Information We Collect

We collect the following types of information:

  • Account information: Name, email address, and profile photo via Google OAuth sign-in
  • Business information: Display name, business name, logo, bio, website, and brand colour that you provide in your settings
  • Deal content: Project proposals, scope descriptions, pricing tiers, invoices, and client details that you create
  • Payment information: Transaction records processed through Stripe. SendScope does not store credit card numbers directly
  • Usage data: Page views, feature interactions, deal view counts, and session data collected to improve the Platform

4. How We Use Your Information

We use your information to:

  • Provide and operate the Platform, including deal pages, invoicing, and payments
  • Facilitate transactions via Stripe Connect between service providers and their clients
  • Send transactional emails including deal notifications, payment confirmations, and payment reminders via Resend
  • Monitor errors and Platform stability via Sentry
  • Improve the Platform based on aggregate usage patterns
  • Enforce our Terms of Service and prevent fraud

We do not sell your personal information to third parties.

5. Third-Party Services

We share data with the following service providers, each under their own privacy policies:

  • Stripe: Payment processing and Stripe Connect for freelancer payouts
  • Google: OAuth authentication for sign-in
  • Resend: Transactional email delivery (deal notifications, payment reminders)
  • Vercel: Application hosting and edge functions
  • Turso: Database storage (libSQL)
  • Sentry: Error tracking and performance monitoring
  • Vercel Blob: Logo and image storage

6. Data Storage and Security

Your data is stored in Turso (libSQL) databases hosted in the United States, with encryption at rest and in transit. Payment data is processed and secured by Stripe in accordance with PCI DSS standards. We implement appropriate technical and organisational measures to protect your information, including HTTPS encryption, secure authentication, and access controls. Because our database and several of our service providers are located overseas, please also read section 13 below on international data transfers.

7. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to you, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) within 30 days, in accordance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988. Notification will include the nature of the breach, the types of information involved, and recommended steps you can take to protect yourself.

8. Cookies

SendScope uses the following types of cookies:

  • Session cookies: Required for authentication via NextAuth (Google OAuth)
  • Preference cookies: First-party functional cookies that remember your settings, theme, the marketplace persona you are viewing as, and whether you have seen the welcome screen. These are strictly necessary for the interface to work and are not used for tracking.

We do not use advertising cookies, third-party tracking cookies, or behavioural targeting cookies.

9. Data Retention

We keep your personal information while your account is active and for as long as we need it to provide the Platform, meet our legal obligations, resolve disputes, and enforce our agreements. Some records are kept longer where the law requires it, for example financial and transaction records that we retain for seven years under Australian tax law. When you ask us to delete your account, we delete or de-identify the personal information we hold about you within 30 days, except for records we are required or permitted by law to keep. We are finalising a detailed retention schedule, and we may hold some information until that schedule is in place. Information that has been aggregated or de-identified so that it no longer identifies you may be kept indefinitely for analytics.

10. Your Rights

Under the Australian Privacy Act, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your account and personal data
  • Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you are unsatisfied with how we handle your data

To exercise these rights, contact us at the email below. We will respond within 30 days.

11. Children's Privacy

SendScope is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at privacy@sendscope.io.

12. Automated Decision-Making

SendScope does not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Other than the routine, non-significant automated processing described below, all decisions that materially affect your account, access, or the services available to you are made or reviewed by human operators.

If you use the marketplace directories, some routine automated processing applies that does not produce legal or similarly significant effects. We order directory results by how recently a listed member was active, or by distance from a suburb you search; you can change how results are ordered, and a paid subscription does not affect this ordering. We also derive your marketplace role (owner, trade, supplier, or consultant) from the records you create, so we can show you the relevant parts of the marketplace. You control your own listings and can change or remove them at any time.

13. International Data Transfers

SendScope stores and processes personal information outside Australia. Our primary database is hosted in the United States, and several of our service providers also operate there, including Stripe (payments), Vercel (hosting), Resend (email), Sentry (error monitoring), Google (sign in), and Vercel Blob (image storage). This means that the personal information we hold about you, including the client name and email captured when a deal is approved, is stored and handled in the United States. Under Australian Privacy Principle 8 we remain accountable for how these overseas providers handle your information, and we take reasonable steps, including contractual data protection commitments and security reviews, to require them to protect it consistently with the Australian Privacy Principles. By using SendScope you acknowledge that your personal information will be stored and processed overseas as described here.

14. Third-Party Links

The Platform may contain links to third-party websites or services that are not operated by SendScope. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit.

15. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the Platform. Continued use after changes constitutes acceptance of the updated policy.

16. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@sendscope.io.

For general support enquiries, contact us at support@sendscope.io.

You may also contact the Office of the Australian Information Commissioner at www.oaic.gov.au.