ClientSupplyTrust and legal
Privacy Policy
This policy covers the public website at clientsupply.com.au and the ClientSupply JobDesk application at app.clientsupply.com.au. ClientSupply is operated by Leveriano Habiyambere, ABN 99 286 419 439.
Website enquiries and application accounts
The marketing website does not provide public JobDesk account creation or payment collection. Its email links open a draft in your email app; no enquiry is sent by the website. Access to JobDesk is arranged directly with ClientSupply, separately from an enquiry.
When you email us, we receive your address, message, attachments you choose to include and delivery metadata. Do not send passwords, payment credentials, customer records or sensitive personal information in an enquiry.
Application account handling may involve your name, email, business details, role, terms acceptance, verification and access status. The application has its own account and authentication system. Invitations record the invited address, role, inviter, expiry and acceptance or withdrawal.
Passwords, sessions and security
Application passwords are stored as one-way hashes rather than plaintext. Session, verification, password-reset and invitation tokens are stored as one-way hashes, with expiry and use or revocation information. Sessions also track the account and active business context.
Security and activity records may include sign-in attempts, verification, resets, session revocation, invitations, access changes, actions, timestamps and technical request information. Credential values must not be included in those audit records. Hosting and email providers may process network addresses, browser/device information, request paths, delivery and security logs.
Business and customer records
JobDesk processes the records your business enters: business details and settings; customers, contacts and service locations; enquiries; jobs, assignments, scheduling, notes and completion; quotes; invoices; externally received payments and receipts; team members; next actions and related history.
Your business is responsible for accurate records, appropriate notice and a lawful basis to enter other people’s information. JobDesk is not designed for health or medical records, government identifiers, biometric data or other sensitive personal information. Do not enter those records or payment credentials.
Financial information
ClientSupply records invoice amounts, due dates, payment amounts, dates, methods and references, receipt numbers and remaining balances. It does not currently process card or bank payments or collect funds.
ClientSupply does not store raw card numbers, CVVs or bank-login credentials. Do not place them in notes, messages or attachments. Current access does not create a live billed subscription or automatically convert an evaluation into paid access.
Enabled business communications
Where a connected mailbox is enabled and authorised, we process mailbox identity, connection status, recipients, subject, message/draft content, document attachments, provider message identifiers and send results to deliver the message you explicitly approve and show related history.
Provider refresh credentials are kept in server-side protected secret storage, not ordinary browser storage or customer-visible history. Short-lived access credentials are handled server-side. Google/Gmail availability depends on provider consent, configuration and controlled rollout. This is a sending workflow, not general inbox reading or autonomous customer messaging.
Why we use information
We use information to respond to enquiries; provide accounts and authorised business workflows; deliver verification, reset and invitation messages; carry out approved communications; maintain records; investigate errors or misuse; and meet applicable legal obligations. We do not sell personal information or use an enquiry to initiate a charge.
Service providers and disclosure
Netlify provides hosting/functions and Supabase provides application database/secret-storage services. Resend supports configured platform email such as verification, reset and invitations. Business-mailbox providers process enabled, authorised email. Providers may also use their own subprocessors. We may disclose information when required by law or reasonably necessary to protect rights or service security.
Some provider processing may occur outside Australia. Specific processing locations have not been fully verified for this publication, so we do not claim Australian-only hosting or invent countries. Contact us for current provider information before entering records with location restrictions.
Retention, closure and deletion
Information is kept as reasonably needed to operate the service, respond to enquiries, maintain relevant business and financial records, investigate misuse and meet applicable legal obligations. Retention depends on the record and relationship; this policy does not promise an unverified fixed deletion period.
Session and single-use links expire or can be revoked. Expiry ends access; it does not by itself promise deletion of every historical record. Closing a business or ending an evaluation is separate from deleting data. Owners may request closure, export assistance or deletion; we verify authority and explain available options and any necessary retention before acting. Financial/audit records or provider backups may not be immediately removable.
Access, correction and complaints
Email leveriano@clientsupply.com.au to request access, correction, deletion or raise a privacy concern. We may verify your identity and authority. For records entered by another business, contacting that business may also be appropriate.
We review privacy complaints and respond within a reasonable timeframe. Where Australian privacy law applies, you may also complain to the Office of the Australian Information Commissioner.
Security and changes
Server-side access checks and database protections help separate businesses’ records. No internet service is risk-free. See the Security summary. Keep credentials private and review your application sessions.
We publish updates here when information handling changes. This factual engineering update is not independent legal approval.