Privacy policy
1. About this policy
This policy explains how Trustworthy Payments Pty Ltd (“we”, “us”) collects, uses, discloses and protects personal information. It covers trustworthypayments.com, the Know Your Builder service, and our FundSight and Digital Retention Trust waitlists.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information we collect
| Category | What it includes | When we collect it |
|---|---|---|
| Contact details | Name, email address | When you request a report, create an account, join a waitlist or contact us |
| Account details | Email, name, hashed password, or your Google account name, email and the sign-in tokens Google issues if you sign in with Google | When you register or sign in |
| Your role and project | Whether you are an owner-builder, homeowner, subcontractor or developer; your state; project type, stage and value band; and contract, start, completion and payment-schedule dates you enter | When you choose to tell us, to tailor reports and reminders |
| Search details | Company or business name, ABN/ACN, and any director or person name you enter | Each time you run a Know Your Builder search |
| Saved reports and activity | Reports you save, share links you create, builders you add to a watchlist or monitoring | When you use those features |
| Payment details | Handled by Stripe; we receive only a payment reference and amount, never your card number | Only if you make a payment (none are currently offered) |
| Usage and device data | Pages visited, links clicked, browser type, IP address, approximate location | Automatically, when you use the site (see section 7) |
You can browse our website without giving us personal information. You need an email address to receive a Know Your Builder report. If you’d rather not identify yourself, contact us and we’ll see whether we can help anonymously.
3. How we use information
- run Know Your Builder searches and deliver, save and share your reports
- create and secure your account, including email verification and password resets
- monitor builders on your watchlist and alert you to changes, if you turn this on
- send service emails, such as your report link and reminders you’ve set up
- send product updates and waitlist news, where you’ve agreed (see section 6)
- understand how the site is used so we can improve it
- meet legal obligations and protect against misuse, for example bulk or automated searching
We do not sell personal information. We do not use your information, or the information in reports, to train artificial intelligence or machine-learning models.
4. Public register data and people named in reports
Know Your Builder reports bring together information that government bodies, courts and tribunals already publish. That can include personal information about company directors, sole traders and licence holders, such as a name, a licence status, or a court, disciplinary or insolvency record.
- Sources: publicly available registers, including the Australian Business Register, ASIC, the Payment Times Reporting Register, the Modern Slavery Register, NSW and ACT licensing and disciplinary registers, and published court and tribunal decisions. See how it works for the full list.
- Purpose: we use it only to help people check a builder or contractor before they enter into, or continue, a building contract.
- Accuracy: we show each record as the source publishes it, with a link back to the source. We don’t add our own judgement about any individual. Records can be out of date, or can match a different person with a similar name. Always confirm with the original register.
- If you are named in a report: you can ask us to review how a record appears, correct a matching error, or tell us the source record has changed (see section 9). We can’t change the original government record; corrections to it must go to the agency that holds it.
- Fair use: reports are for genuine due diligence. Don’t use them to harass, discriminate against, or publicly shame anyone. We may suspend accounts that misuse the service.
5. Who we share information with
We share personal information only with service providers who help us run the service, and only as much as each one needs. Some of them store or process data outside Australia, mainly in the United States.
| Provider | What they do for us | Likely location |
|---|---|---|
| Cloudflare | Hosts the website and protects it from misuse | Global |
| Vercel | Hosts the Know Your Builder app | United States / global |
| Railway | Runs the search server that queries public registers | United States |
| Cloud database provider | Stores accounts, saved reports, watchlists and reminders | Australia or overseas, including the United States |
| Cloud job-queue provider | Queues reminder emails and monitoring jobs | Australia or overseas, including the United States |
| Resend | Sends our emails | United States |
| ScraperAPI and 2Captcha | Help our server reach some public registers. They see the search terms sent to those registers, which can include a company or person name | United States / other |
| Sign-in with Google, if you choose it | United States | |
| Stripe | Payment processing, if payments are offered | United States / global |
| IONOS | Domain and business email | Germany / United States |
We take reasonable steps to make sure these providers protect personal information in line with the APPs. We may also disclose information if the law requires it, or to protect our rights or someone’s safety. When you create a share link for a report, anyone with that link can view the report until the link expires (30 days).
6. Emails and your choices
- Service emails: your report link, account and password emails, monitoring alerts, and reminders you set up. These are part of the service you asked for.
- Marketing emails: product news and waitlist updates. We send these only if you’ve agreed, and each one has an unsubscribe link, in line with the Spam Act 2003 (Cth).
You can turn off reminders or monitoring at any time from your account, or by emailing [email protected].
7. Cookies and analytics
We use essential cookies to keep you signed in and to keep the site secure. We don’t currently use a third-party analytics tool. Usage events are recorded in our server logs without your name or email. We briefly use your IP address to limit how many searches can be run in a short time, which protects the service from misuse.
8. Storage, security and retention
We protect personal information with encrypted connections (HTTPS), hashed passwords, access controls on our systems, and providers that maintain recognised security standards. No system is completely secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
| Information | How long we keep it |
|---|---|
| Account details | While your account is open, then deleted within 90 days of closure |
| Saved reports and search history | While your account is open, or until you delete them |
| Share links | 30 days from the last share |
| Waitlist and marketing contacts | Until you unsubscribe |
| Server logs | Up to 90 days |
9. Access, correction and complaints
You can ask for access to the personal information we hold about you, or ask us to correct it, including if you’re named in a report. Email [email protected] with enough detail for us to find the record. We’ll respond within 30 days and may need to confirm your identity first. Access is free.
If you have a privacy complaint, contact us first and we’ll try to resolve it within 30 days. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner on 1300 363 992.
10. Changes and contact
We may update this policy as our services change. We’ll post the new version here with its effective date, and email account holders about significant changes.
Effective date: 28 October 2026
Privacy contact: Trustworthy Payments Pty Ltd, [email protected]