Privacy Policy

Last updated: 28 April 2026

Cobbo ("Cobbo", "we", "us") is a product operated by [LEGAL ENTITY — TO BE CONFIRMED BEFORE LAUNCH]. We are committed to protecting your privacy. This policy explains how we collect, use, store, and disclose your personal information when you use the Cobbo web application (the "Service"). It is designed to comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and the New Zealand Privacy Act 2020 and Information Privacy Principles (IPPs).

1. Information we collect

• Account information: name, email, business name, ABN, address, phone number, logo, bank details (BSB and account number for invoicing).
• Customer data you enter: client names, contact details, addresses, quotes, invoices, line items, photos, voice recordings, and email content.
• Usage data: pages visited, features used, device and browser type, IP address, and approximate location.
• Authentication data: handled by our identity provider (Clerk).
• Payment data: processed by Stripe; we do not store full card numbers.

2. How we use your information

• To provide and operate the Service (creating quotes/invoices, sending emails, tracking opens).
• To process AI features (voice transcription, quote/email drafting) via OpenAI.
• To send transactional emails on your behalf via your connected provider.
• To detect and prevent abuse, fraud, and security incidents.
• To comply with our legal obligations.

3. AI processing

Voice recordings and text you enter may be sent to OpenAI for transcription and parsing. OpenAI does not use API submissions to train models. Recordings are processed in transit and not retained by us beyond the duration required to return a result.

4. Storage and data residency

Customer data and files are stored in Supabase (ap-south-1, Mumbai). Some sub-processors (Clerk, Stripe, OpenAI, Upstash, Vercel, Sentry) may also process data outside Australia and New Zealand.

5. Disclosure

We disclose personal information only to sub-processors necessary to operate the Service, to comply with law, or with your consent. We do not sell personal information.

6. Security

We use TLS in transit, encryption at rest for sensitive credentials (AES-256-GCM), strict multi-tenant isolation, signed URLs for documents, and rate limiting. No system is perfectly secure; you must keep your account credentials confidential.

7. Your rights

You may request access to, correction of, or deletion of your personal information by contacting us at privacy@cobbo.com.au. You may close your account at any time; data is deleted within 30 days, subject to legal retention requirements (e.g. tax records).

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

9. Children

The Service is not intended for individuals under 18.

10. Changes

We may update this policy from time to time. Material changes will be notified by email or in-app notice.

11. Contact

Privacy questions or complaints: privacy@cobbo.com.au. Australian users may also contact the Office of the Australian Information Commissioner (OAIC). New Zealand users may contact the Office of the Privacy Commissioner.