Privacy Policy

Last updated 15 October 2026

Information we collect

• Account details: your email address and whether it is verified, from our sign-in provider. We do not collect or store your password.
• Business details: your legal name as a sole trader, an optional trading name, your ABN, time zone, GST registration details (registration status and date, accounting basis and BAS frequency) and any business-use percentages you save.
• Financial records: the income and expense records you enter, import from a CSV file or add from uploaded files, and the BAS figures prepared from them, including quarters you mark as lodged.
• Files you upload: receipts, invoices, platform statements and screenshots. From each file we keep the details needed for your records (for example the supplier, date, total, GST and any ABN shown). We do not keep the full text read from your files.
• Support messages: what you send us through Contact us or by email.
• Billing: your plan and billing status. Card details are entered on Stripe's secure payment page and are never stored by GigTics.
• Security records: sign-in sessions and a record of important actions on your account. Your IP address and browser details are kept only in a scrambled (hashed) form.

GigTics does not ask for your myGov or ATO password, and you don't need to give us information that isn't needed for your records.

How we use it

• to provide GigTics: storing your records, reading your files and preparing figures;
• to sign you in, keep your account secure and prevent misuse;
• to manage your plan and payments;
• to answer support requests and fix problems with your account;
• to meet our legal obligations.

We do not sell your information, use it for advertising, or use analytics or tracking tools on GigTics.

Who can see your information

Your records are visible only to you, and to a small number of GigTics staff when needed to support you or keep the service running. Every time staff open a customer's records or files, it is logged.

We use these service providers to run GigTics:

• Auth0 (Okta): sign-in and email verification, Australian region.
• Microsoft Azure AI Document Intelligence: reads uploaded files, Australia East region. Azure's copy of the result is deleted once GigTics has saved the details it needs.
• Vercel: hosts the app and stores your uploaded files privately, in Sydney.
• Neon: hosts our database, in Sydney.
• Google Cloud: runs our virus scanning of uploaded files in Sydney. Files are checked and not kept.
• Stripe: processes subscription payments.

We keep your records and files in Australia. Some providers are overseas companies and may access information from outside Australia to provide or support their service. Stripe processes payment information in other countries, including the United States. We choose providers that protect information to a standard comparable to the Australian Privacy Principles.

We may also disclose information where the law requires it, for example to comply with a court order.

Cookies and storage on your device

GigTics uses a small number of essential cookies: one keeps you signed in (by default for up to 24 hours) and one protects the sign-in process for a few minutes. Your browser also remembers your light or dark appearance choice and the last quarter you chose in the manual form. We don't use advertising or tracking cookies.

Security

Information is encrypted in transit. Uploaded files are stored privately and checked for viruses before they are read. Our logs leave out details such as email addresses, ABNs and the contents of your records. No system is completely secure; if a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.

Keeping and deleting your information

We keep your information while you have an account. You can delete your account in Account settings. You can change your mind within 15 days; if your paid plan ends later, deletion happens when that period ends. We then permanently delete your records, files, business details, support history and sign-in account. Copies held in our database backups are removed within 7 days. Old sign-in records are cleared automatically after 30 days.

GigTics' own billing records for your subscription (held by Stripe) are kept for 5 years, as Australian tax law requires.

Accessing and correcting your information

You can see and edit your records and business details in GigTics at any time, download your account data (Settings → Data & privacy) and download each quarter's records as a CSV file. To ask for anything else, or to correct information you can't change yourself, email support@gigtics.au.

Questions and complaints

Contact us at support@gigtics.au. We aim to reply within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update this page if the way we handle information changes, and tell you about important changes by email or in GigTics before they take effect.